linux-kernel - Re: [RFC v1 0/2] Enable IOMMU support for pseries Secure VMs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20191106130558-mutt-send-email-mst@kernel.org>
Date:   Wed, 6 Nov 2019 13:06:37 -0500
From:   "Michael S. Tsirkin" <mst@...hat.com>
To:     Alexey Kardashevskiy <aik@...abs.ru>
Cc:     Ram Pai <linuxram@...ibm.com>, linuxppc-dev@...ts.ozlabs.org,
        benh@...nel.crashing.org, david@...son.dropbear.id.au,
        mpe@...erman.id.au, paulus@...abs.org, mdroth@...ux.vnet.ibm.com,
        hch@....de, andmike@...ibm.com, sukadev@...ux.vnet.ibm.com,
        ram.n.pai@...il.com, cai@....pw, tglx@...utronix.de,
        bauerman@...ux.ibm.com, linux-kernel@...r.kernel.org
Subject: Re: [RFC v1 0/2] Enable IOMMU support for pseries Secure VMs

On Wed, Nov 06, 2019 at 12:59:50PM +1100, Alexey Kardashevskiy wrote:
> 
> 
> On 05/11/2019 08:28, Ram Pai wrote:
> > This patch series enables IOMMU support for pseries Secure VMs.
> > 
> > 
> > Tested using QEMU command line option:
> > 
> >  "-device virtio-scsi-pci,id=scsi0,bus=pci.0,addr=0x4,
> >  	iommu_platform=on,disable-modern=off,disable-legacy=on"
> >  and 
> > 
> >  "-device virtio-blk-pci,scsi=off,bus=pci.0,
> >  	addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0,
> >  	iommu_platform=on,disable-modern=off,disable-legacy=on"
> 
> 
> Worth mentioning that SLOF won't boot with such devices as SLOF does not know about iommu_platform=on.

Shouldn't be hard to support: set up the iommu to allow everything
and ack the feature. Right?

> > 
> > Ram Pai (2):
> >   powerpc/pseries/iommu: Share the per-cpu TCE page with the hypervisor.
> >   powerpc/pseries/iommu: Use dma_iommu_ops for Secure VMs aswell.
> > 
> >  arch/powerpc/platforms/pseries/iommu.c | 30 ++++++++++++++++++------------
> >  1 file changed, 18 insertions(+), 12 deletions(-)
> > 
> 
> -- 
> Alexey