From: "Roger Pau Monné" <roger.pau@citrix.com>
To: Jan Beulich <jbeulich@suse.com>
Cc: "xen-devel@lists.xenproject.org" <xen-devel@lists.xenproject.org>,
Andrew Cooper <andrew.cooper3@citrix.com>, Wei Liu <wl@xen.org>
Subject: Re: [PATCH 6/7] x86: don't allow Dom0 (direct) access to port F0
Date: Thu, 26 Oct 2023 12:48:15 +0200 [thread overview]
Message-ID: <ZTpD791YQsOY1d38@macbook> (raw)
In-Reply-To: <a8be0096-42af-6d7d-ff7b-b6128d996ccc@suse.com>
On Thu, May 11, 2023 at 02:07:40PM +0200, Jan Beulich wrote:
> This controls the driving of IGNNE# (if such emulation is enabled in
> hardware), and hence would need proper handling in the hypervisor to be
> safe to use by Dom0 (and fully emulating for PVH/HVM DomU-s).
>
> Signed-off-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Roger Pau Monné <roger.pau@citrix.com>
> ---
> RFC: Really this disabling of access would want to be conditional upon
> the functionality actually being enabled. For AMD this looks to be
> uniformly HWCR[8], but for Intel this is chipset-specific.
I'm afraid I'm not able to find much information about this, I've
found something in the Intel PCH datasheets, but I don't have a clear
picture of whether this port could be used by other functionality.
From my reading of the spec, the initial value in 0xF0 (COPROC_ERR)
will inhibit the generation of an IRQ13, and hence if the behavior
that most modern OSes rely on?
Mostly wanted to check which kind of logic and OS would use to figure
out whether 0xF0 exists and control IGNNE#
Thanks, Roger.
next prev parent reply other threads:[~2023-10-26 10:48 UTC|newest]
Thread overview: 33+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-05-11 12:03 [PATCH 0/7] x86: Dom0 I/O port access permissions Jan Beulich
2023-05-11 12:05 ` [PATCH 1/7] x86: don't allow Dom0 access to port CF9 Jan Beulich
2023-10-25 12:36 ` Roger Pau Monné
2023-10-25 13:59 ` Jan Beulich
2023-05-11 12:05 ` [PATCH 2/7] x86: don't allow Dom0 access to port 92 Jan Beulich
2023-10-25 12:49 ` Roger Pau Monné
2023-10-25 14:11 ` Jan Beulich
2023-05-11 12:06 ` [PATCH 3/7] x86/PVH: deny Dom0 access to the ISA DMA controller Jan Beulich
2023-10-25 13:22 ` Roger Pau Monné
2023-05-11 12:06 ` [PATCH 4/7] x86: detect PIC aliasing on ports other than 0x[2A][01] Jan Beulich
2023-10-26 8:34 ` Roger Pau Monné
2023-10-26 9:03 ` Jan Beulich
2023-10-26 13:24 ` Roger Pau Monné
2023-10-26 15:07 ` Jan Beulich
2023-10-26 15:19 ` Roger Pau Monné
2023-10-30 12:24 ` Jan Beulich
2023-10-30 15:14 ` Roger Pau Monné
2023-10-30 15:19 ` Jan Beulich
2023-10-30 15:23 ` Roger Pau Monné
2023-10-30 15:35 ` Jan Beulich
2023-10-30 16:25 ` Roger Pau Monné
2023-05-11 12:07 ` [PATCH 5/7] x86: detect PIT aliasing on ports other than 0x4[0-3] Jan Beulich
2023-10-26 10:25 ` Roger Pau Monné
2023-10-26 12:31 ` Jan Beulich
2023-10-26 13:57 ` Roger Pau Monné
2023-10-26 15:10 ` Jan Beulich
2023-10-26 15:13 ` Roger Pau Monné
2023-10-30 12:50 ` Jan Beulich
2023-05-11 12:07 ` [PATCH 6/7] x86: don't allow Dom0 (direct) access to port F0 Jan Beulich
2023-10-26 10:48 ` Roger Pau Monné [this message]
2023-05-11 12:08 ` [PATCH 7/7] x86: don't allow Dom0 access to ELCR ports Jan Beulich
2023-10-26 11:02 ` Roger Pau Monné
2023-10-26 12:51 ` Jan Beulich
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ZTpD791YQsOY1d38@macbook \
--to=roger.pau@citrix.com \
--cc=andrew.cooper3@citrix.com \
--cc=jbeulich@suse.com \
--cc=wl@xen.org \
--cc=xen-devel@lists.xenproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.