Re: [Qemu-devel] [PATCH 0/5] ATAPI pass through v2

[Anthony Liguori <anthony@codemonkey.ws>]

Alexandre Bique wrote:
> On Tue, Jul 7, 2009 at 10:44 PM, Paul Brook<paul@codesourcery.com> wrote:
>   
>>>> I expect that running qemu as root counts as a 'bad idea' (I gather
>>>> that commands are filtered when running as a regular user), but even so,
>>>> I wonder if guests should be prevented from performing firmware updates?
>>>>         
>>> Yeps.
>>>       
>> I disagree.  Upgrading the firmware from within the guest sounds like a
>> legitimate use,  especially given the proliferation of proprietary windows-
>> only upgrade utilities.
>>     
>
> Maybe we could agree on a switch to forward/block this command ?
>   

No need for a switch IMHO.  If a user is doing pass through, they ought 
to expect that the guest has direct access to the device.

The fact that we can prevent this with ATAPI is a special case.  When we 
eventually merge in VT-d based PCI pass through, we would not be able to 
enforce this sort of switch.  That would result in confusion on the part 
of users.

Regards,

Anthony Liguori