On 06.03.2020 12:35, Kamil Rytarowski wrote: > A hypervisor backend shall implement instruction decoder for MMIO/PIO > operations. NVMM performs this emulation in userspace, while others like > HAXM perform this inside the kernel. > > There are pros and cons but it is a distinct property of NVMM, but it is > definitely a more secure approach. Of course, I'm not an expert, but IMHO, this is more of an implementation feature than an architectural feature. Definitely it is safer, but probably more expensive, more context switching or maybe not. But this is quite interesting and it is not clear why other hypervisors do not have this. Thank you very much for your answer.
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature