Messages in this thread | | | Date | Tue, 19 Jul 2011 11:43:04 -0300 | From | Marcelo Tosatti <> | Subject | Re: [PATCH] kvm: Disable device assignment without interrupt remapping |
| |
On Thu, Jul 14, 2011 at 01:27:03PM -0600, Alex Williamson wrote: > IOMMU interrupt remapping support provides a further layer of > isolation for device assignment by preventing arbitrary interrupt > block DMA writes by a malicious guest from reaching the host. By > default, we should require that the platform provides interrupt > remapping support, with an opt-in mechanism for existing behavior. > > Both AMD IOMMU and Intel VT-d2 hardware support interrupt > remapping, however we currently only have software support on > the Intel side. Users wishing to re-enable device assignment > when interrupt remapping is not supported on the platform can > use the "allow_unsafe_assigned_interrupts=1" module option. > > Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
Applied, thanks.
| |