On Fri, Aug 20, 2021 at 05:45:54PM +0900, Yasunori Goto wrote: > static struct page **sev_pin_memory(struct kvm *kvm, unsigned long uaddr, > : > : > if (locked > lock_limit && !capable(CAP_IPC_LOCK)) { > pr_err("SEV: %lu locked pages exceed the lock limit of > %lu.\n", locked, lock_limit); > return ERR_PTR(-ENOMEM); > } > > I think it is better than nothing. How do you think? Unprivileged user space should not be allowed to cause the kernel to print messages. Jason