Messages in this thread | | | Date | Tue, 19 Mar 2013 20:22:32 -0700 | From | "H. Peter Anvin" <> | Subject | Re: [PATCH 01/12] Security: Add CAP_COMPROMISE_KERNEL |
| |
On 03/19/2013 08:18 PM, Alex Williamson wrote: >> >> The "pinning" process needs to involve a call to the kernel to process >> the page for DMA (pinning the page and opening it in the iommu) and >> return a transaction address, of course. >> >> I think we have the interface for that in vfio, but I haven't followed >> that work. > > Yes, vfio does this and is meant to provide a secure-boot-friendly PCI > passthrough interface. Thanks, >
Right, and presumably vfio does *not* require CAP_SYS_RAWIO, right?
-hpa
| |