From mboxrd@z Thu Jan 1 00:00:00 1970 From: Bjorn Helgaas Subject: Re: [PATCH 1/2] dt-bindings: Add external-facing PCIe port property Date: Mon, 25 Mar 2019 08:53:12 -0500 Message-ID: <20190325135312.GQ251185@google.com> References: <20190318182124.53859-1-jean-philippe.brucker@arm.com> <20190318182124.53859-2-jean-philippe.brucker@arm.com> <20190320220338.GH251185@google.com> <598b0675-38b2-9e52-d903-016dc548756c@arm.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: <598b0675-38b2-9e52-d903-016dc548756c@arm.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=m.gmane.org@lists.infradead.org To: Jean-Philippe Brucker Cc: Mark Rutland , "devicetree@vger.kernel.org" , Grant Likely , "linux-pci@vger.kernel.org" , Jeremy Linton , "robh+dt@kernel.org" , Robin Murphy , "linux-arm-kernel@lists.infradead.org" List-Id: devicetree@vger.kernel.org On Mon, Mar 25, 2019 at 12:59:48PM +0000, Jean-Philippe Brucker wrote: > On 20/03/2019 22:03, Bjorn Helgaas wrote: > > On Mon, Mar 18, 2019 at 06:21:23PM +0000, Jean-Philippe Brucker wrote: > >> +- external-facing: > >> + When present, the port is external facing. All bridges and endpoints > >> + downstream of this port are external to the machine. > > > > Maybe include a note about why this is important, ie, we care because > > malicious devices may be attached to an external port? I know you > > have that in the commit log but it would be more visible here. > > > > Elsewhere you use "external-facing", here too for consistency? > > Makes sense, I'll add a note. I currently have: > > - external-facing: > When present, the port is external-facing. All bridges and endpoints > downstream of this port are external to the machine. The OS can, for > example, use this information to identify devices that cannot be > trusted with relaxed DMA protection, as users could easily attach > malicious devices to this port. Looks good to me!