On Fri, Mar 24, 2017 at 09:37:36AM +0000, Ard Biesheuvel wrote: > No. It is the firmware's EFI code, and the virtual translation applied > by the OS is made known to the firmware by means of a call into the > runtime service SetVirtualAddressMap(). We can still randomize within those 64G before calling SetVirtualAddressMap(). The question is, do we want to or need to, even? -- Regards/Gruss, Boris. Good mailing practices for 400: avoid top-posting and trim the reply. -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html