From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:33400) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b6oOH-00040M-PO for qemu-devel@nongnu.org; Sat, 28 May 2016 20:15:38 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b6oOF-0006mu-Co for qemu-devel@nongnu.org; Sat, 28 May 2016 20:15:36 -0400 Received: from mga01.intel.com ([192.55.52.88]:6080) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b6oOF-0006kP-3v for qemu-devel@nongnu.org; Sat, 28 May 2016 20:15:35 -0400 From: Wei Wang Date: Sun, 29 May 2016 16:11:33 +0800 Message-Id: <1464509494-159509-6-git-send-email-wei.w.wang@intel.com> In-Reply-To: <1464509494-159509-1-git-send-email-wei.w.wang@intel.com> References: <1464509494-159509-1-git-send-email-wei.w.wang@intel.com> Subject: [Qemu-devel] [PATCH 5/6 Resend] Vhost-pci RFC: Future Security Enhancement List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: kvm@vger.kernel.org, qemu-devel@nongnu.org, virtio-comment@lists.oasis-open.org, mst@redhat.com, stefanha@redhat.com, pbonzini@redhat.com Cc: Wei Wang Signed-off-by: Wei Wang --- FutureWorks | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 FutureWorks diff --git a/FutureWorks b/FutureWorks new file mode 100644 index 0000000..210edcd --- /dev/null +++ b/FutureWorks @@ -0,0 +1,21 @@ +The vhost-pci design is currently suitable for a group of VMs who trust each +other. To extend it to a more general use case, two security features can be +added in the future. + +1 vIOMMU +vIOMMU provides the driver VM with the ability to restrict the device VM to +transiently access a specified portion of its memory. The vhost-pci design +proposed in this RFC can be extended to access the driver VM's memory with +vIOMMU. Precisely, the vIOMMU engine in the driver VM configures access +permissions (R/W) for the vhost-pci device to access its memory. More details +can be found at https://wiki.opnfv.org/display/kvm/Vm2vm+Mst and +https://lists.gnu.org/archive/html/qemu-devel/2015-08/msg03993.html + +2 eptp switching +The idea of eptp swithing allows a vhost-pci device driver to access the mapped +driver VM's memory in an alternative view, where only a piece of trusted code +can access the driver VM's memory. More details can be found at +http://events.linuxfoundation.org/sites/events/files/slides/ +Jun_Nakajima_NFV_KVM%202015_final.pdf + + -- 1.8.3.1