linux-kernel - Re: [PATCH 0/1] uio_pci_generic: extensions to allow access for?non-privileged processes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20100409200908.GM3168@sequoia.sous-sol.org>
Date:	Fri, 9 Apr 2010 13:09:08 -0700
From:	Chris Wright <chrisw@...s-sol.org>
To:	Tom Lyon <pugs@...n-about.com>
Cc:	Avi Kivity <avi@...hat.com>, Greg KH <gregkh@...e.de>,
	kvm@...r.kernel.org, linux-kernel@...r.kernel.org,
	"Hans J. Koch" <hjk@...utronix.de>
Subject: Re: [PATCH 0/1] uio_pci_generic: extensions to allow access
 for?non-privileged processes

* Tom Lyon (pugs@...n-about.com) wrote:
> On Friday 09 April 2010 02:58:19 am Avi Kivity wrote:
> > - access to all config space, but BARs must be translated so userspace 
> > cannot attack the host
> Please elaborate. All of PCI config? All of PCIe config? Seems like a huge mess.

All of config space, but not raw access to all bits.  So the MSI/MSI-X
capability writes need to be intermediated.  There's bits in the
header too.  And it's not just PCI, it's extended config space as well,
drivers may care about finding their whizzybang PCIe capability and doing
someting with it (and worse...they are allowed to put device specific
registers there, and worse yet...they do!).

thanks,
-chris
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/