On 2/10/23 10:41, Sean Christopherson wrote: > Anyways, tying things back to the actual code being discussed, I vote against > CC_ATTR_PARAVISOR. Being able to trust device emulation is not unique to a > paravisor. A single flag also makes too many assumptions about what is trusted > and thus should be accessed encrypted. Did you like the more wordy per-device flags better? Or did you have something else in mind entirely?