]> git.baikalelectronics.ru Git - kernel.git/commit
Intel-IOMMU, intr-remap: source-id checking
authorWeidong Han <weidong.han@intel.com>
Fri, 22 May 2009 16:41:15 +0000 (00:41 +0800)
committerDavid Woodhouse <David.Woodhouse@intel.com>
Tue, 23 Jun 2009 21:09:17 +0000 (22:09 +0100)
commit941b6f1ba3685e232be715233fab19e6dc2cb7fd
tree616bfcdda74341dc8b5d9ea1013bb7506407a961
parent4190af92eb9d49253e37754e686b72c37c2b3315
Intel-IOMMU, intr-remap: source-id checking

To support domain-isolation usages, the platform hardware must be
capable of uniquely identifying the requestor (source-id) for each
interrupt message. Without source-id checking for interrupt remapping
, a rouge guest/VM with assigned devices can launch interrupt attacks
to bring down anothe guest/VM or the VMM itself.

This patch adds source-id checking for interrupt remapping, and then
really isolates interrupts for guests/VMs with assigned devices.

Because PCI subsystem is not initialized yet when set up IOAPIC
entries, use read_pci_config_byte to access PCI config space directly.

Signed-off-by: Weidong Han <weidong.han@intel.com>
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
arch/x86/kernel/apic/io_apic.c
drivers/pci/intr_remapping.c
drivers/pci/intr_remapping.h
include/linux/dmar.h