Messages in this thread | | | Date | Tue, 26 Mar 2019 15:19:03 -0600 | From | Alex Williamson <> | Subject | Re: [PATCH V31 10/25] PCI: Lock down BAR access when the kernel is locked down |
| |
On Tue, 26 Mar 2019 13:55:39 -0700 Andy Lutomirski <luto@kernel.org> wrote:
> On Tue, Mar 26, 2019 at 11:28 AM Matthew Garrett > <matthewgarrett@google.com> wrote: > > > > From: Matthew Garrett <mjg59@srcf.ucam.org> > > > > Any hardware that can potentially generate DMA has to be locked down in > > order to avoid it being possible for an attacker to modify kernel code, > > allowing them to circumvent disabled module loading or module signing. > > Default to paranoid - in future we can potentially relax this for > > sufficiently IOMMU-isolated devices. > > Does this break vfio?
No, vfio provides its own interface to pci config space. Thanks,
Alex
| |