linux-kernel - Re: [RFC v1 0/2] Enable IOMMU support for pseries Secure VMs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Thu, 7 Nov 2019 17:01:22 +1100
From:   Alexey Kardashevskiy <aik@...abs.ru>
To:     "Michael S. Tsirkin" <mst@...hat.com>
Cc:     Ram Pai <linuxram@...ibm.com>, linuxppc-dev@...ts.ozlabs.org,
        benh@...nel.crashing.org, david@...son.dropbear.id.au,
        mpe@...erman.id.au, paulus@...abs.org, mdroth@...ux.vnet.ibm.com,
        hch@....de, andmike@...ibm.com, sukadev@...ux.vnet.ibm.com,
        ram.n.pai@...il.com, cai@....pw, tglx@...utronix.de,
        bauerman@...ux.ibm.com, linux-kernel@...r.kernel.org
Subject: Re: [RFC v1 0/2] Enable IOMMU support for pseries Secure VMs



On 07/11/2019 05:06, Michael S. Tsirkin wrote:
> On Wed, Nov 06, 2019 at 12:59:50PM +1100, Alexey Kardashevskiy wrote:
>>
>>
>> On 05/11/2019 08:28, Ram Pai wrote:
>>> This patch series enables IOMMU support for pseries Secure VMs.
>>>
>>>
>>> Tested using QEMU command line option:
>>>
>>>  "-device virtio-scsi-pci,id=scsi0,bus=pci.0,addr=0x4,
>>>  	iommu_platform=on,disable-modern=off,disable-legacy=on"
>>>  and 
>>>
>>>  "-device virtio-blk-pci,scsi=off,bus=pci.0,
>>>  	addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0,
>>>  	iommu_platform=on,disable-modern=off,disable-legacy=on"
>>
>>
>> Worth mentioning that SLOF won't boot with such devices as SLOF does not know about iommu_platform=on.
> 
> Shouldn't be hard to support: set up the iommu to allow everything
> and ack the feature. Right?

With the defaults we have (32bit window limited by 1GB and SLOF residing close to the end of the second GB), it is not
straight forward; also SLOF's XHCI and E1000 already use IOMMU so we should just do this for virtio as well, I am
hacking it now. Thanks,



> 
>>>
>>> Ram Pai (2):
>>>   powerpc/pseries/iommu: Share the per-cpu TCE page with the hypervisor.
>>>   powerpc/pseries/iommu: Use dma_iommu_ops for Secure VMs aswell.
>>>
>>>  arch/powerpc/platforms/pseries/iommu.c | 30 ++++++++++++++++++------------
>>>  1 file changed, 18 insertions(+), 12 deletions(-)
>>>
>>
>> -- 
>> Alexey
> 

-- 
Alexey