[GIT PULL] Thunderbolt changes for v4.21

[GIT PULL] Thunderbolt changes for v4.21

[Mika Westerberg]

Hi Greg,

This includes automatic enabling of IOMMU based DMA protection from
possibly malicious devices connected through Thunderbolt ports. In
addition we make sure PCIe ATS (Address Translation Service) is not
enabled for such devices to prevent them from passing IOMMU protection.

Please pull, thanks!

The following changes since commit 2595646791c319cadfdbf271563aac97d0843dc7:

  Linux 4.20-rc5 (2018-12-02 15:07:55 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/westeri/thunderbolt.git tags/thunderbolt-for-v4.21

for you to fetch changes up to dcc3c9e37fbd70e728d08cce0e50121605390fa0:

  thunderbolt: Export IOMMU based DMA protection support to userspace (2018-12-05 12:01:56 +0300)

----------------------------------------------------------------
thunderbolt: Changes for v4.21 merge window

----------------------------------------------------------------
Lu Baolu (1):
      iommu/vt-d: Force IOMMU on for platform opt in hint

Mika Westerberg (3):
      PCI / ACPI: Identify untrusted PCI devices
      iommu/vt-d: Do not enable ATS for untrusted devices
      thunderbolt: Export IOMMU based DMA protection support to userspace

 Documentation/ABI/testing/sysfs-bus-thunderbolt |  9 ++++
 Documentation/admin-guide/thunderbolt.rst       | 20 +++++++++
 drivers/acpi/property.c                         | 11 +++++
 drivers/iommu/dmar.c                            | 25 +++++++++++
 drivers/iommu/intel-iommu.c                     | 56 +++++++++++++++++++++++--
 drivers/pci/pci-acpi.c                          | 19 +++++++++
 drivers/pci/probe.c                             | 15 +++++++
 drivers/thunderbolt/domain.c                    | 17 ++++++++
 include/linux/dmar.h                            |  8 ++++
 include/linux/pci.h                             |  8 ++++
 10 files changed, 185 insertions(+), 3 deletions(-)

Re: [GIT PULL] Thunderbolt changes for v4.21

[Greg Kroah-Hartman]

On Mon, Dec 10, 2018 at 12:23:03PM +0200, Mika Westerberg wrote:
> Hi Greg,
> 
> This includes automatic enabling of IOMMU based DMA protection from
> possibly malicious devices connected through Thunderbolt ports. In
> addition we make sure PCIe ATS (Address Translation Service) is not
> enabled for such devices to prevent them from passing IOMMU protection.

Oh, nice work with the "untrusted" PCI device thing, that's been a long
time in coming.

Now pulled and pushed out, thanks.

greg k-h