On Mon, Jul 27, 2026 at 11:43 AM Stefan Hajnoczi <[email protected]> wrote:
> > Maybe it's clearer to mention the potentially untrusted vhost-user > > backend process rather than cryptodev (the virtio-crypto vhost-user > > device)? > > That difference in emphasis might indeed be clearer. The main purpose of this patch in the series is simply to provide a means of enabling the isolation mode that is being implemented in vhost-user. To Markus's point, clarifying that this is limiting access from the backend process makes sense .
