Re: [Xen-devel] [PATCH v2 02/12] VMX: implement suppress #VE.

2015-06-29 Thread Ed White
On 06/29/2015 08:03 AM, George Dunlap wrote: > On Mon, Jun 29, 2015 at 3:31 PM, Andrew Cooper > wrote: >> On 29/06/15 15:20, George Dunlap wrote: >>> On Mon, Jun 22, 2015 at 7:56 PM, Ed White wrote: In preparation for selectively enabling #VE in a later patch, set suppress #VE on all EP

Re: [Xen-devel] [PATCH v2 02/12] VMX: implement suppress #VE.

2015-06-29 Thread Sahita, Ravi
On Mon, Jun 29, 2015 at 3:31 PM, Andrew Cooper wrote: > On 29/06/15 15:20, George Dunlap wrote: >> On Mon, Jun 22, 2015 at 7:56 PM, Ed White wrote: >>> In preparation for selectively enabling #VE in a later patch, set >>> suppress #VE on all EPTE's. >>> >>> Suppress #VE should always be the de

Re: [Xen-devel] [PATCH v2 02/12] VMX: implement suppress #VE.

2015-06-29 Thread George Dunlap
On Mon, Jun 29, 2015 at 3:31 PM, Andrew Cooper wrote: > On 29/06/15 15:20, George Dunlap wrote: >> On Mon, Jun 22, 2015 at 7:56 PM, Ed White wrote: >>> In preparation for selectively enabling #VE in a later patch, set >>> suppress #VE on all EPTE's. >>> >>> Suppress #VE should always be the defau

Re: [Xen-devel] [PATCH v2 02/12] VMX: implement suppress #VE.

2015-06-29 Thread Andrew Cooper
On 29/06/15 15:20, George Dunlap wrote: > On Mon, Jun 22, 2015 at 7:56 PM, Ed White wrote: >> In preparation for selectively enabling #VE in a later patch, set >> suppress #VE on all EPTE's. >> >> Suppress #VE should always be the default condition for two reasons: >> it is generally not safe to d

Re: [Xen-devel] [PATCH v2 02/12] VMX: implement suppress #VE.

2015-06-29 Thread George Dunlap
On Mon, Jun 22, 2015 at 7:56 PM, Ed White wrote: > In preparation for selectively enabling #VE in a later patch, set > suppress #VE on all EPTE's. > > Suppress #VE should always be the default condition for two reasons: > it is generally not safe to deliver #VE into a guest unless that guest > has

Re: [Xen-devel] [PATCH v2 02/12] VMX: implement suppress #VE.

2015-06-24 Thread Andrew Cooper
On 22/06/15 19:56, Ed White wrote: > In preparation for selectively enabling #VE in a later patch, set > suppress #VE on all EPTE's. > > Suppress #VE should always be the default condition for two reasons: > it is generally not safe to deliver #VE into a guest unless that guest > has been modified

[Xen-devel] [PATCH v2 02/12] VMX: implement suppress #VE.

2015-06-22 Thread Ed White
In preparation for selectively enabling #VE in a later patch, set suppress #VE on all EPTE's. Suppress #VE should always be the default condition for two reasons: it is generally not safe to deliver #VE into a guest unless that guest has been modified to receive it; and even then for most EPT viol