On 05/11/2015 19:15, Peter Maydell wrote: > If we have a secure address space, use it in page table walks: > * when doing the physical accesses to read descriptors, > make them through the correct address space > * when the final result indicates a secure access, pass the > correct address space index to tlb_set_page_with_attrs() > > (The descriptor reads are the only direct physical accesses > made in target-arm/ for CPUs which might have TrustZone.)
What is the case where you have no secure address space and you have TrustZone? KVM doesn't have TrustZone, so it should never be in a secure regime, should it? Paolo
