On Wed, Jul 14, 2021 at 10:51:34PM +0200, Arnd Bergmann wrote: > The question is how we can best allow one but not the other. By only allowing to allocate domains of type IDENTITY and DMA, but fail to allocate UNMANAGED domains. Regards, Joerg