The VFIO subsystem is about securely passing host PCI devices to a guest, so all the classes should be presumed to be offering a security boundary.
Acked-by: Marc-André Lureau <[email protected]> Acked-by: Cornelia Huck <[email protected]> #s390 types Signed-off-by: Daniel P. Berrangé <[email protected]> --- hw/vfio-user/pci.c | 1 + hw/vfio/ap.c | 1 + hw/vfio/ccw.c | 1 + hw/vfio/igd.c | 1 + hw/vfio/iommufd.c | 2 ++ hw/vfio/pci.c | 2 ++ hw/vfio/spapr.c | 1 + 7 files changed, 9 insertions(+) diff --git a/hw/vfio-user/pci.c b/hw/vfio-user/pci.c index 983e1d4ad47..d8965fd02ee 100644 --- a/hw/vfio-user/pci.c +++ b/hw/vfio-user/pci.c @@ -487,6 +487,7 @@ static const TypeInfo vfio_user_pci_info = { .class_init = vfio_user_pci_class_init, .instance_init = vfio_user_pci_init, .instance_finalize = vfio_user_pci_finalize, + .secure = true, }; static void register_vfio_user_dev_type(void) diff --git a/hw/vfio/ap.c b/hw/vfio/ap.c index 2926e04ad49..45d67b8ba70 100644 --- a/hw/vfio/ap.c +++ b/hw/vfio/ap.c @@ -356,6 +356,7 @@ static const TypeInfo vfio_ap_info = { .instance_size = sizeof(VFIOAPDevice), .instance_init = vfio_ap_instance_init, .class_init = vfio_ap_class_init, + .secure = true, }; static void vfio_ap_type_init(void) diff --git a/hw/vfio/ccw.c b/hw/vfio/ccw.c index 8e29a3ae613..6d71e196ee0 100644 --- a/hw/vfio/ccw.c +++ b/hw/vfio/ccw.c @@ -723,6 +723,7 @@ static const TypeInfo vfio_ccw_info = { .instance_size = sizeof(VFIOCCWDevice), .instance_init = vfio_ccw_instance_init, .class_init = vfio_ccw_class_init, + .secure = true, }; static void register_vfio_ccw_type(void) diff --git a/hw/vfio/igd.c b/hw/vfio/igd.c index 4c7d6545924..df70cdd9403 100644 --- a/hw/vfio/igd.c +++ b/hw/vfio/igd.c @@ -313,6 +313,7 @@ static const TypeInfo vfio_pci_igd_lpc_bridge_info = { .name = "vfio-pci-igd-lpc-bridge", .parent = TYPE_PCI_DEVICE, .class_init = vfio_pci_igd_lpc_bridge_class_init, + .secure = true, .interfaces = (const InterfaceInfo[]) { { INTERFACE_CONVENTIONAL_PCI_DEVICE }, { }, diff --git a/hw/vfio/iommufd.c b/hw/vfio/iommufd.c index de482128bf1..ab466b513ec 100644 --- a/hw/vfio/iommufd.c +++ b/hw/vfio/iommufd.c @@ -1061,10 +1061,12 @@ static const TypeInfo types[] = { .parent = TYPE_VFIO_IOMMU, .instance_size = sizeof(VFIOIOMMUFDContainer), .class_init = vfio_iommu_iommufd_class_init, + .secure = true, }, { .name = TYPE_HOST_IOMMU_DEVICE_IOMMUFD_VFIO, .parent = TYPE_HOST_IOMMU_DEVICE_IOMMUFD, .class_init = hiod_iommufd_vfio_class_init, + .secure = true, } }; diff --git a/hw/vfio/pci.c b/hw/vfio/pci.c index 428ab2f0698..03ab5bd0f48 100644 --- a/hw/vfio/pci.c +++ b/hw/vfio/pci.c @@ -4110,6 +4110,7 @@ static const TypeInfo vfio_pci_info = { .class_init = vfio_pci_class_init, .instance_init = vfio_pci_init, .instance_finalize = vfio_pci_finalize, + .secure = true, }; static const Property vfio_pci_nohotplug_properties[] = { @@ -4146,6 +4147,7 @@ static const TypeInfo vfio_pci_nohotplug_info = { .parent = TYPE_VFIO_PCI, .instance_size = sizeof(VFIOPCIDevice), .class_init = vfio_pci_nohotplug_class_init, + .secure = true, }; static void register_vfio_pci_dev_type(void) diff --git a/hw/vfio/spapr.c b/hw/vfio/spapr.c index 42690e4323d..1027c434c07 100644 --- a/hw/vfio/spapr.c +++ b/hw/vfio/spapr.c @@ -544,6 +544,7 @@ static const TypeInfo types[] = { .parent = TYPE_VFIO_IOMMU_LEGACY, .instance_size = sizeof(VFIOSpaprContainer), .class_init = vfio_iommu_spapr_class_init, + .secure = true, }, }; -- 2.56.0
