WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

RE: [Xen-devel] pciback: question about the permissive flag

To: Keir Fraser <Keir.Fraser@xxxxxxxxxxxxx>, Joanna Rutkowska <joanna@xxxxxxxxxxxxxxxxxxxxxx>, "xen-devel@xxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxx>
Subject: RE: [Xen-devel] pciback: question about the permissive flag
From: Ian Pratt <Ian.Pratt@xxxxxxxxxxxxx>
Date: Wed, 7 Jul 2010 14:30:51 +0100
Accept-language: en-US
Acceptlanguage: en-US
Cc: Ian Pratt <Ian.Pratt@xxxxxxxxxxxxx>
Delivery-date: Wed, 07 Jul 2010 06:32:09 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <C859DDFC.1996A%keir.fraser@xxxxxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
References: <4C33A217.3050006@xxxxxxxxxxxxxxxxxxxxxx> <C859DDFC.1996A%keir.fraser@xxxxxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index: AcsdU4wfDkDrtaCtQii+KcOZj/rnAAASpW62AA5vmxA=
Thread-topic: [Xen-devel] pciback: question about the permissive flag
> I think the fear was that there could be class- or device-specific config
> registers that we wouldn't know how to handle, and which could have
> unexpected effects if they are passed through naively. Concrete examples
> were never given, and this was all pre-vtd so as you say pass-through of a
> DMA-capable device was insecure anyway. I've always thought the permissive
> flag stuff was pretty useless, and I always suggest people to enable the
> permissive flag.

There are some devices (typically integrated ones, e.g. igfx) that use PCI 
config space in nasty ways, such as to describe additional BARs, or to trigger 
SMIs. Allowing free access to these seems dangerous. 

Ian

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel