Re: [PATCH v15 01/13] x86/sev: Carve out and export SNP guest messaging init routines

From: Dionna Amalie Glaze
Date: Fri Dec 06 2024 - 19:28:02 EST


>
> Well, it is unlocked_ioctl() and snp_guest_ioctl() is not taking any locks.
> What's stopping anyone from writing a nasty little program which hammers the
> sev-guest on the ioctl interface until the OOM killer activates?
>

Given sev-guest requires heightened privileges, can we not assume a
reasonable user space? I thought that was an organizing principle.

> IOW, this should probably remain _ACCOUNT AFAICT.
>
> --
> Regards/Gruss,
> Boris.
>
> https://people.kernel.org/tglx/notes-about-netiquette
>


--
-Dionna Glaze, PhD, CISSP, CCSP (she/her)