> Most of the display adapters are emulating old hardware which is not > relevant to virtualization use cases. > > The exceptions that should be considered secure are Cirrus (PCI, not > ISA), Bochs, QXL, RAMFB, VGA (PCI, MMIO, not ISA) and VMWare VGA.
I don't think we should support all those display devices as security boundaries. I would shorten the list to: bochs, ramfb, vga, and virtio-gpu* (excluding virgl & rutabaga). Anything else has been known to have various risks and is much higher complexity.. Gerd, based on your expertize, I think your opinion matters here. -- Marc-André Lureau <[email protected]>
