Re: [RFC KVM 02/27] KVM: x86: Introduce address_space_isolation module parameter

From: Andy Lutomirski
Date: Mon May 13 2019 - 11:48:10 EST


On Mon, May 13, 2019 at 7:39 AM Alexandre Chartre
<alexandre.chartre@xxxxxxxxxx> wrote:
>
> From: Liran Alon <liran.alon@xxxxxxxxxx>
>
> Add the address_space_isolation parameter to the kvm module.
>
> When set to true, KVM #VMExit handlers run in isolated address space
> which maps only KVM required code and per-VM information instead of
> entire kernel address space.

Does the *entry* also get isolated? If not, it seems less useful for
side-channel mitigation.