On 09/19/2014 04:12 PM, Andy Lutomirski wrote:
>
> To force deterministic execution.
>
> I incorrectly thought that the kernel could switch RDRAND on and off.
> It turns out that a hypervisor can do this, but not the kernel. Also,
> determinism is lost anyway because of TSX, which *also* can't be
> turned on and off.
>
Actually, a much bigger reason is because it lets rogue guest *user
space*, even will a well-behaved guest OS, do something potentially
harmful to the host.
-hpa
--
To unsubscribe from this list: send the line "unsubscribe kvm" in
the body of a message to majord...@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
