f007e99c8e
To support domain-isolation usages, the platform hardware must be capable of uniquely identifying the requestor (source-id) for each interrupt message. Without source-id checking for interrupt remapping , a rouge guest/VM with assigned devices can launch interrupt attacks to bring down anothe guest/VM or the VMM itself. This patch adds source-id checking for interrupt remapping, and then really isolates interrupts for guests/VMs with assigned devices. Because PCI subsystem is not initialized yet when set up IOAPIC entries, use read_pci_config_byte to access PCI config space directly. Signed-off-by: Weidong Han <weidong.han@intel.com> Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
11 lines
240 B
C
11 lines
240 B
C
#include <linux/intel-iommu.h>
|
|
|
|
struct ioapic_scope {
|
|
struct intel_iommu *iommu;
|
|
unsigned int id;
|
|
unsigned int bus; /* PCI bus number */
|
|
unsigned int devfn; /* PCI devfn number */
|
|
};
|
|
|
|
#define IR_X2APIC_MODE(mode) (mode ? (1 << 11) : 0)
|