[PATCH 0/2] Unprivileged sgl-only passthrough

[Keith Busch]

On Thu, Oct 19, 2023 at 01:29:46AM +0530, Kanchan Joshi wrote:
> And if not this, what should be the solution to have non-root
> passthrough?

I agree we need non-root passthrough.

Could we restore what we previously had, but fence it off with a module
parameter to opt-in to allow it? Like setting a silicon chicken bit, and
taint the kernel if that helps convey the responsibility taken with such
a parameter?

The only other possibility I can think of is start a command allow-list
specific to non-root users, along with your earlier patch's decoder.