linux-kernel - Re: [PATCH 0/5] soc: ti: Add and use PVU on K3-AM65 for DMA isolation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3dcaee19-3671-4658-a2e7-247e42b85805@siemens.com>
Date: Mon, 26 Aug 2024 21:25:23 +0200
From: Jan Kiszka <jan.kiszka@...mens.com>
To: Krzysztof Kozlowski <krzysztof.kozlowski@...aro.org>,
 Nishanth Menon <nm@...com>, Santosh Shilimkar <ssantosh@...nel.org>,
 Vignesh Raghavendra <vigneshr@...com>, Rob Herring <robh+dt@...nel.org>,
 Krzysztof Kozlowski <krzysztof.kozlowski+dt@...aro.org>,
 Conor Dooley <conor+dt@...nel.org>
Cc: linux-arm-kernel@...ts.infradead.org, linux-kernel@...r.kernel.org,
 devicetree@...r.kernel.org, Siddharth Vadapalli <s-vadapalli@...com>,
 Bao Cheng Su <baocheng.su@...mens.com>, Hua Qian Li
 <huaqian.li@...mens.com>, Diogo Ivo <diogo.ivo@...mens.com>,
 Bjorn Helgaas <bhelgaas@...gle.com>, Krzysztof Wilczyński
 <kw@...ux.com>, linux-pci@...r.kernel.org,
 Lorenzo Pieralisi <lpieralisi@...nel.org>
Subject: Re: [PATCH 0/5] soc: ti: Add and use PVU on K3-AM65 for DMA isolation

On 26.08.24 20:53, Krzysztof Kozlowski wrote:
> On 26/08/2024 19:56, Jan Kiszka wrote:
>> Only few of the K3 SoCs have an IOMMU and, thus, can isolate the system
>> against DMA-based attacks of external PCI devices. The AM65 is without
>> an IOMMU, but it comes with something close to it: the Peripheral
>> Virtualization Unit (PVU).
>>
>> The PVU was originally designed to establish static compartments via a
>> hypervisor, isolate those DMA-wise against each other and the host and
>> even allow remapping of guest-physical addresses. But it only provides
>> a static translation region, not page-granular mappings. Thus, it cannot
>> be handled transparently like an IOMMU.
> 
> You keep developing on some old kernel. I noticed it on few patchsets
> last days. Please work on mainline.
> 

How did you come to this conclusion? This patch set was written for
mainline, just rebased and tested again over next-20240826 before
sending today.

Jan

-- 
Siemens AG, Technology
Linux Expert Center