On 07/12/17 21:51, Alex Williamson wrote: >> Agree, IOMMU driver cannot enforce it. I think VFIO layer can make sure >> page response come from the assigned device and its guest/container. > > Can we enforce it via the IOMMU/VFIO interface? If the response is for > a struct device, and not an rid/did embedded in a structure, then vfio > can pass it through w/o worrying about it, ie. response comes in via > ioctl with association to vfio device fd -> struct vfio_device -> struct > device, iommu driver fills in rid/did. Thanks,
Yes that's probably the best way, reporting faults and receiving responses on the device fd. Thanks, Jean
