Abstract: Methods, systems, and computer program products for direct assignment of physical devices to confidential virtual machines (VMs). At a first guest privilege context of a guest partition, a direct assignment of a physical device associated with a host computer system to the guest partition is identified. The guest partition includes the first guest privilege context and a second guest privilege context, which is restricted from accessing memory associated with the first guest privilege context. The guest partition corresponds to a confidential VM, such that a memory region associated with the guest partition is inaccessible to a host operating system. It is determined, based on a policy, that the physical device is allowed to be directly assigned to the guest partition. Communication between the physical device and the second guest privilege context is permitted, such as by exposing the physical device on a virtual bus and/or forwarding an interrupt.

Abstract: A handle assembly comprises a handle having a gripping portion to be handled to open a door. A base portion has a base pivot portion about which the handle pivots. The base portion transmits a pivoting motion of the; handle to a door-opening mechanism to open the door. A housing is securable against the door with an exposed side facing away from the door and a hidden side facing toward the door. The housing has a cavity being open to the hidden side. A front hole is defined in a surface of the exposed side of the housing and communicates with the cavity. The front hole is sized for the base portion to be entered in the cavity therethrough from the exposed side. A plug is insertable into the cavity of the housing from the hidden side to hold the base portion of the handle captive in the housing.