> If the fd overhead really is a problem, perhaps the fd could be retained > for setup operations, and omitted only on calls that require a vcpu to > have been already set up on the current thread? Quite frankly I'd like to have an fd because it means you've got a meaningful way of ensuring that id reuse problems go away. You open a given id and keep a handle to it, if the id gets reused then your handle will be tied to the old one so you can fail the requests. Without an fd it's near impossible to get this right. The Unix/Linux model is open an object, use it, close it. I see no reason not to do that. Also the LSM hooks apply to file objects mostly, so its a natural fit on top *IF* you choose to use them. Finally you can pass file handles around between processes - do that any other way 8) Alan -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html