[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] frontend and backend devices and different types of hw - pci for example


  • To: Mark Williamson <mark.williamson@xxxxxxxxxxxx>
  • From: Sting Zax <zstingx@xxxxxxxxx>
  • Date: Mon, 29 Aug 2005 02:57:07 -0400
  • Cc: xen-devel@xxxxxxxxxxxxxxxxxxx
  • Delivery-date: Mon, 29 Aug 2005 06:55:08 +0000
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=hO5ipQHJfVf5uNbRUxN7Dz26Sq3QTZ2E9GlaFlSH0EKdpBt3Oi1uAoQMKHI60Ssu66B1dt+vn39at4pJDXtRBpT91vw3PbUraa3VpEMlSQqkaIYFRJjRL570/vhvPYV3HXBVYlJAg09gPh94WY+AjUqQ+k52RRYPWC+9PB7VYTA=
  • List-id: Xen developer discussion <xen-devel.lists.xensource.com>

Hello, 

 I had looked at the code of 2.0.*  under xen/arch/x86 saw 
pci-irq.c and pci-pc.c and pci-x86.c which as I understand handle pci devices 
other than net/usb.
However, I did not saw such modules in the unstable version. 
May I ask : is this PCI support for non net/usb PCI devices  removed
(or temporarily removed) from the unstable version? or maybe I simply
missed it ?


>Note that giving direct physical access to a PCI device has security
>implications since the guest can potentially use the cards' DMA capabilities
>to access all of physical memory.  

Will IOMMU support help solving this security problems ? 


Regards,
Sting

On 8/28/05, Mark Williamson <mark.williamson@xxxxxxxxxxxx> wrote:
> > What about other devices ? let's say a PCI sound card (or any other PCI
> > device). Where is the software that should handle it ? I remember I saw
> > somewhere some discussion about PCI configuration space, but I don't
> > remember where.
> 
> That code is in Xen itself in Xen 2.0.  Xen controls access to the PCI
> configuration spaces so that guests can only see the devices they have access
> to.  It also controls the IO memory / ports that domains are allowed to
> access in order to control PCI devices.
> 
> Note that giving direct physical access to a PCI device has security
> implications since the guest can potentially use the cards' DMA capabilities
> to access all of physical memory.  The front/back-style devices do not have
> this limitation.
> 
> Btw, I've laid some groundwork for a virtual sound device but haven't had much
> time to hack on it yet.
> 
> Cheers,
> Mark
>

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.