On Tue, Jun 11, 2024 at 07:25:27PM +0200, Jeremi Piotrowski wrote:

Is there a reason we can't fix the handler to do the #VE->mmio emulation
for userspace too, so that this scenario works just like outside of a
CVM?

We are looking into it. It requires some groundwork to properly understand
risks of wider attack surface. I think we will get there, but it will take time.

-- 
  Kiryl Shutsemau / Kirill A. Shutemov