[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 1/7] x86: don't allow Dom0 access to port CF9


  • To: Roger Pau Monné <roger.pau@xxxxxxxxxx>
  • From: Jan Beulich <jbeulich@xxxxxxxx>
  • Date: Wed, 25 Oct 2023 15:59:31 +0200
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=suse.com; dmarc=pass action=none header.from=suse.com; dkim=pass header.d=suse.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aZJUxIbGiXB/O8MtGTmUAigWKMIU0D8qXzzMMFhtR1w=; b=HmJu1fVfolMt5IoV7ZmJRaUgcBIQpEdybnUc0ssct0qvLAwAaSMhx7V4cKpSG/zyoYbIFtfipFdLkDt6AoM/GG5zYsaBayxcohVo9mGHv6Uv+l0eChxzrN5gQnyHgaXGaODRqFknbhr+3ZXFvB+Mc6vFUlWCky8qHJ2WQm+7KJN3QgIeOpACAF/M92RpuIA/MYuiwfUu/QYLTKGajRngD6hscNIQDyIVNGbH62SR3n3UGc4lU5Kdhup3PEekk/qTjEMCgd49sLQSvJvx0izJE19Ba8UD3RmwxvKnSfmhJ4NGNwPe8BMTYYs9EpfzyIniiw+qeOAbyHvnowOVBJwmHA==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RKHlhEiWtMR6V2jqvGgvWVnCYVpucDNDMNp0bS1i/qX7gE0ApMwYTOU4KkTdpm8X3NIhofizu/zTfRx+YjpJ0KrxRgrLWrCWYOy0fljrYr8qX2HwtwNITIiPkFnVUp72ubiK9HOy1wsznKdCRGEfdG3hjHyY9B0YMm3MTbkiZqu3vR7bESTv/KXXItvHFLsGZ/KLKlikt7RoziggdXB28aah7rGBL9DItL00CXxWGlJ4fkFuY/+QwhTRSjPCTJot9JjYYoY5A2iKqb84xPA+/2apuL6Az+7cmxjqc76trGQIwctPR3/vp0a4GmGx6a5x0NoAXp0LIRW5isLdYv0GqA==
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=suse.com;
  • Cc: "xen-devel@xxxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxxx>, Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Wei Liu <wl@xxxxxxx>
  • Delivery-date: Wed, 25 Oct 2023 13:59:39 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On 25.10.2023 14:36, Roger Pau Monné wrote:
> On Thu, May 11, 2023 at 02:05:11PM +0200, Jan Beulich wrote:
>> This allows to initiate machine reset, which we don't want to permit
>> Dom0 to invoke that way.
>>
>> While there insert blank lines and convert the sibling PCI config space
>> port numbers to upper case, matching style earlier in the function.
>>
>> Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
> 
> Acked-by: Roger Pau Monné <roger.pau@xxxxxxxxxx>

Thanks.

> Should we also do something about port 0x64?

That would be more involved, as its reset (and A20) functionality is
only a small subset of what it is used for. IOW we'd have to intercept
accesses and pass through the majority of the operations.

Jan



 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.