diff options
| author | Lu Baolu <[email protected]> | 2019-03-01 11:23:10 +0800 |
|---|---|---|
| committer | Joerg Roedel <[email protected]> | 2019-03-01 10:23:35 +0100 |
| commit | d8b8591054575f33237556c32762d54e30774d28 (patch) | |
| tree | 2cfcf6e571666e190f487838b3e494576b007c36 /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | fff42928ade591969836ff49888d063b829ac888 (diff) | |
iommu/vt-d: Disable ATS support on untrusted devices
Commit fb58fdcd295b9 ("iommu/vt-d: Do not enable ATS for untrusted
devices") disables ATS support on the devices which have been marked
as untrusted. Unfortunately this is not enough to fix the DMA attack
vulnerabiltiies because IOMMU driver allows translated requests as
long as a device advertises the ATS capability. Hence a malicious
peripheral device could use this to bypass IOMMU.
This disables the ATS support on untrusted devices by clearing the
internal per-device ATS mark. As the result, IOMMU driver will block
any translated requests from any device marked as untrusted.
Cc: Jacob Pan <[email protected]>
Cc: Mika Westerberg <[email protected]>
Suggested-by: Kevin Tian <[email protected]>
Suggested-by: Ashok Raj <[email protected]>
Fixes: fb58fdcd295b9 ("iommu/vt-d: Do not enable ATS for untrusted devices")
Signed-off-by: Lu Baolu <[email protected]>
Signed-off-by: Joerg Roedel <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions