Re: [Xen-devel] [PATCH v5 03/15] VMX: implement suppress #VE.

2015-07-14 Thread George Dunlap
On Tue, Jul 14, 2015 at 1:14 AM, Ed White wrote: > In preparation for selectively enabling #VE in a later patch, set > suppress #VE on all EPTE's. > > Suppress #VE should always be the default condition for two reasons: > it is generally not safe to deliver #VE into a guest unless that guest > has

Re: [Xen-devel] [PATCH v5 03/15] VMX: implement suppress #VE.

2015-07-14 Thread Jan Beulich
>>> On 14.07.15 at 02:14, wrote: > In preparation for selectively enabling #VE in a later patch, set > suppress #VE on all EPTE's. > > Suppress #VE should always be the default condition for two reasons: > it is generally not safe to deliver #VE into a guest unless that guest > has been modified

[Xen-devel] [PATCH v5 03/15] VMX: implement suppress #VE.

2015-07-13 Thread Ed White
In preparation for selectively enabling #VE in a later patch, set suppress #VE on all EPTE's. Suppress #VE should always be the default condition for two reasons: it is generally not safe to deliver #VE into a guest unless that guest has been modified to receive it; and even then for most EPT viol