linux-kernel - Re: Using fixed LPI number for some Device ID

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <8ff6a30a-b51f-f9f0-4a18-307948f3519b@huawei.com>
Date:   Tue, 3 Nov 2020 13:22:31 +0800
From:   Dongjiu Geng <gengdongjiu@...wei.com>
To:     Marc Zyngier <maz@...nel.org>
CC:     Jason Cooper <jason@...edaemon.net>,
        Thomas Gleixner <tglx@...utronix.de>,
        <linux-kernel@...r.kernel.org>
Subject: Re: Using fixed LPI number for some Device ID

On 2020/10/31 17:55, Marc Zyngier wrote:
> Dongjiu,
> 
> On Sat, 31 Oct 2020 02:19:19 +0000,
> Dongjiu Geng <gengdongjiu@...wei.com> wrote:
>>
>> Hi Marc,
>> Sorry to disturb you, Currently the LPI number is not fixed for the
>> device. The LPI number is dynamically allocated start from 8092.
>> For two OS which shares the ITS, One OS needs to configure the
>> device interrupt required by another OS, and the other OS uses a
>> fixed interrupt ID to respond the interrupt. Therefore, the LPI IRQ
>> number of the device needed be fixed. I want to upstream this
>> feature that allocate fixed LPI number for the device that is
>> specified through the DTS. What is your meaning?  Thanks
> 
> I think you are starting from the wrong premises.
> 
> You can't "share" an ITS directly between two operating systems. The
> ITS can only be controlled by a single operating system, because its
> function goes way beyond allocating an LPI. How would you deal with
> simple things such as masking an interrupt, which requires:
> 
> - Access to memory (configuration table)
> - Access to the command queue (to insert an invalidation command)
> - Access to MMIO registers (to kick the command queue into action)
> 
> all of which needs to be exclusive of concurrent modifications. How do
> you propose this is implemented in a safe manner by two operating
> systems which, by nature, distrust each other? Allocating LPIs is the
> least of your problems, really.
Yes， I agree with you it . But in my HW platform, using virtualization, the performance
deteriorates greatly.  So I distributed the I/O devices to different operation systems. During the startup of one OS,
interrupts are bound to different OS in one OS, which can be exclusive of concurrent modifications.

In fact it has some limitations as you said, such mask/enable/route Interrupts, If want to
mask interrupts, need to mask interrupts on the source device.

If you think it is not a common feature, I will used it as a local customization function and not upstream.

> 
> If you need two concurrent OSs taking interrupts, use virtualization.
> That is its purpose. On your HW, you'll even get direct injection.
> 
> Thanks,
> 
> 	M.
>