Re: [PATCH 17/28] hw/display: mark bochs, cirrus, qxl, VGA, ramfb as secure

[marcandre.lureau@xxxxxxxxxx]

> Most of the display adapters are emulating old hardware which is not
> relevant to virtualization use cases.
> 
> The exceptions that should be considered secure are Cirrus (PCI, not
> ISA), Bochs, QXL, RAMFB, VGA (PCI, MMIO, not ISA) and VMWare VGA.

I don't think we should support all those display devices as security 
boundaries.

I would shorten the list to: bochs, ramfb, vga, and virtio-gpu* (excluding 
virgl & rutabaga). Anything else has been known to have various risks and is 
much higher complexity..

Gerd, based on your expertize, I think your opinion matters here.

-- 
Marc-André Lureau <marcandre.lureau@xxxxxxxxxx>