On Mon, May 12, 2025 at 12:48 PM Teddy Astie <teddy.as...@vates.tech> wrote: > >What makes max_cstate / dom0-max-vcpus / dom0-mem specifically unsafe ?
These arguments are all allowed. The *_secure_param macros mean the argument is safe for lockdown mode. Making PCI passthrough safe for secure boot will be handled in a different patch.
