On Fri, Jul 24, 2026 at 08:06:36AM +0200, Markus Armbruster wrote: > Connor Kite <[email protected]> writes: > # @memory-isolation: disable access from cryptodev to guest memory. > # (default: false) (since 11.2) > > Pardon my ignorance... What exactly is "cryptodev" here? Is it code > running in another process? > > Should the description answer my question? Perhaps like this: > > # @memory-isolation: isolate guest memory. Isolated guest memory > # cannot be accessed from uh, what exactly? > > Fill in the blank.
Maybe it's clearer to mention the potentially untrusted vhost-user backend process rather than cryptodev (the virtio-crypto vhost-user device)? Stefan
signature.asc
Description: PGP signature
