Patent ID: 11880481
Assignee: RED HAT, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 14:
15. A non-transitory machine readable medium storing code, which when executed by a processor is configured to:
initialize a secure interface configured to provide access to a virtual machine (VM), a self-contained platform, or a container from a device, wherein the VM, the self-contained platform (SCP), or the container is associated with a level of security;
allocating a buffer associated with the secure interface, wherein the level of security indicates whether the device has access to guest memory of the VM, the self-contained platform (SCP), or the container via the buffer;
provide the buffer to the device; and
sending input/outputs (I/Os) between the device and the VM, the self-contained platform (SCP), or the container via the secure interface, wherein the buffer is allocated based on the level of security,
wherein the buffer is allocated such that at least one of:
when the level of security is low, the buffer is allocated from a portion of the guest memory,
when the device is a trusted device, the buffer is a total amount of the guest memory, or
when the level of security is high, the buffer is allocated outside the guest memory.