On Wed, Sep 30, 2015 at 03:50:09PM +0300, Vlad Zolotarov wrote: > How not virtualizing iommu forces "all or nothing" approach?
Looks like you can't limit an assigned device to only access part of guest memory that belongs to a given process. Either let it access all of guest memory ("all") or don't assign the device ("nothing"). -- MST