Hi Adam, > -----Original Message----- > From: Dybkowski, AdamX <[email protected]> > Sent: Tuesday, September 8, 2020 3:21 PM > To: [email protected]; Trahe, Fiona <[email protected]>; [email protected]; > Mcnamara, John > <[email protected]> > Cc: Dybkowski, AdamX <[email protected]> > Subject: [PATCH] doc: document vfio-pci usage with QAT PMD > > This patch marks the old igb-uio driver as unsecure when used > with the QAT PMD and updates all examples to recommend using > vfio-pci instead. > It also mentions security issues with the QAT CPM and provides > information about the new vfio-pci parameter 'disable_denylist' > available in Linux kernels 5.9 and later. > > Signed-off-by: Adam Dybkowski <[email protected]> > ---
//snip/// > +Load the vfio-pci driver, bind the VF PCI Device id to it and use lspci > +to confirm the VF devices are now in use by vfio-pci kernel driver, > e.g. for the C62x device:: > > cd to the top-level DPDK directory > modprobe uio > - insmod ./build/kmod/igb_uio.ko > - echo "8086 37c9" > /sys/bus/pci/drivers/igb_uio/new_id > + modprobe vfio-pci [Fiona] it would be useful to also add a note here - something like "Use modprobe vfio-pci disable_denylist=1" from kernel 5.9 onwards. See note in Section xxx above" Apart from this Acked-by: Fiona Trahe <[email protected]>
