On 08/20/2018 04:14 PM, David Woodhouse wrote: > If you need the physmap, then rather than manually mapping with 4KiB > pages, you just switch. Having first ensured that no malicious guest or > userspace is running on a sibling, of course. The problem is determining when "you need the physmap". Tycho's patches, as I remember them basically classify pages between being "user" pages which are accessed only via kmap() and friends and "kernel" pages which need to be mapped all the time because they might have a 'task_struct' or a page table or a 'struct file'. You're right that we could have a full physmap that we switch to for kmap()-like access to user pages. But, the real problem is transitioning pages from kernel to user usage since it requires shooting down the old kernel mappings for those pages in some way.