[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 7 Jul 2020 13:19:31 +0200
From: Pierre Morel <pmorel@...ux.ibm.com>
To: "Michael S. Tsirkin" <mst@...hat.com>,
Cornelia Huck <cohuck@...hat.com>
Cc: linux-kernel@...r.kernel.org, pasic@...ux.ibm.com,
borntraeger@...ibm.com, frankja@...ux.ibm.com, jasowang@...hat.com,
kvm@...r.kernel.org, linux-s390@...r.kernel.org,
virtualization@...ts.linux-foundation.org, thomas.lendacky@....com,
david@...son.dropbear.id.au, linuxram@...ibm.com,
heiko.carstens@...ibm.com, gor@...ux.ibm.com
Subject: Re: [PATCH v4 2/2] s390: virtio: PV needs VIRTIO I/O device
protection
On 2020-07-07 13:14, Michael S. Tsirkin wrote:
> On Tue, Jul 07, 2020 at 11:46:33AM +0200, Cornelia Huck wrote:
>> On Tue, 7 Jul 2020 10:44:37 +0200
>> Pierre Morel <pmorel@...ux.ibm.com> wrote:
>>
>>> S390, protecting the guest memory against unauthorized host access
>>> needs to enforce VIRTIO I/O device protection through the use of
>>> VIRTIO_F_VERSION_1 and VIRTIO_F_IOMMU_PLATFORM.
>>
>> Hm... what about:
>>
>> "If protected virtualization is active on s390, the virtio queues are
>> not accessible to the host, unless VIRTIO_F_IOMMU_PLATFORM has been
>> negotiated. Use the new arch_validate_virtio_features() interface to
>> enforce this."
>
> s/enforce this/fail probe if that's not the case, preventing a host error on access attempt/
>
yes, more complete, thanks.
regards,
Pierre
--
Pierre Morel
IBM Lab Boeblingen
Powered by blists - more mailing lists