On 11/26/24 02:17, Chao Gao wrote: ... > The alternative is to enable it in KVM domain, but KVM maintainers NAKed > the solution. The external discussion can be found at [*], it ended up > with adding the support in kernel instead of KVM domain. So, there's a lot of changelog here, but scant details. This patch enables XFEATURE_CET_KERNEL everywhere it's available, right? So, this patch at least wastes the XSAVE buffer space and doesn't actually get anything. Right?