Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-24 Thread Tim Harvey
On Fri, Oct 4, 2019 at 4:27 PM Robin Murphy wrote: > > On 2019-10-04 9:37 pm, Tim Harvey wrote: > > On Fri, Oct 4, 2019 at 11:34 AM Robin Murphy wrote: > >> > >> On 04/10/2019 18:13, Tim Harvey wrote: > >> [...] > > No difference... still need 'arm-smmu.disable_bypass=n' to boot. Are > >

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-04 Thread Robin Murphy
On 2019-10-04 9:37 pm, Tim Harvey wrote: On Fri, Oct 4, 2019 at 11:34 AM Robin Murphy wrote: On 04/10/2019 18:13, Tim Harvey wrote: [...] No difference... still need 'arm-smmu.disable_bypass=n' to boot. Are all four iommu-map props above supposed to be the same? Seems to me they all point to

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-04 Thread Tim Harvey
On Fri, Oct 4, 2019 at 11:34 AM Robin Murphy wrote: > > On 04/10/2019 18:13, Tim Harvey wrote: > [...] > >>> No difference... still need 'arm-smmu.disable_bypass=n' to boot. Are > >>> all four iommu-map props above supposed to be the same? Seems to me > >>> they all point to the same thing which

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-04 Thread Robin Murphy
On 04/10/2019 18:13, Tim Harvey wrote: [...] No difference... still need 'arm-smmu.disable_bypass=n' to boot. Are all four iommu-map props above supposed to be the same? Seems to me they all point to the same thing which looks wrong. Hmm... :/ Those mappings just set Stream ID == PCI RID

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-04 Thread Tim Harvey
On Fri, Oct 4, 2019 at 9:36 AM Robin Murphy wrote: > > On 04/10/2019 16:23, Tim Harvey wrote: > > On Thu, Oct 3, 2019 at 3:24 PM Robin Murphy wrote: > >> > >> On 2019-10-03 9:51 pm, Tim Harvey wrote: > >>> On Thu, Oct 3, 2019 at 1:42 PM Robin Murphy wrote: > > Hi Tim, > > On

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-04 Thread Robin Murphy
On 04/10/2019 16:23, Tim Harvey wrote: On Thu, Oct 3, 2019 at 3:24 PM Robin Murphy wrote: On 2019-10-03 9:51 pm, Tim Harvey wrote: On Thu, Oct 3, 2019 at 1:42 PM Robin Murphy wrote: Hi Tim, On 2019-10-03 7:27 pm, Tim Harvey wrote: On Fri, Mar 1, 2019 at 11:21 AM Douglas Anderson wrote:

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-04 Thread Tim Harvey
On Thu, Oct 3, 2019 at 3:24 PM Robin Murphy wrote: > > On 2019-10-03 9:51 pm, Tim Harvey wrote: > > On Thu, Oct 3, 2019 at 1:42 PM Robin Murphy wrote: > >> > >> Hi Tim, > >> > >> On 2019-10-03 7:27 pm, Tim Harvey wrote: > >>> On Fri, Mar 1, 2019 at 11:21 AM Douglas Anderson > >>> wrote: >

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-03 Thread Robin Murphy
On 2019-10-03 9:51 pm, Tim Harvey wrote: On Thu, Oct 3, 2019 at 1:42 PM Robin Murphy wrote: Hi Tim, On 2019-10-03 7:27 pm, Tim Harvey wrote: On Fri, Mar 1, 2019 at 11:21 AM Douglas Anderson wrote: If you're bisecting why your peripherals stopped working, it's probably this CL.

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-03 Thread Tim Harvey
On Thu, Oct 3, 2019 at 1:42 PM Robin Murphy wrote: > > Hi Tim, > > On 2019-10-03 7:27 pm, Tim Harvey wrote: > > On Fri, Mar 1, 2019 at 11:21 AM Douglas Anderson > > wrote: > >> > >> If you're bisecting why your peripherals stopped working, it's > >> probably this CL. Specifically if you see

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-03 Thread Robin Murphy
Hi Tim, On 2019-10-03 7:27 pm, Tim Harvey wrote: On Fri, Mar 1, 2019 at 11:21 AM Douglas Anderson wrote: If you're bisecting why your peripherals stopped working, it's probably this CL. Specifically if you see this in your dmesg: Unexpected global fault, this could be serious ...then

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-10-03 Thread Tim Harvey
On Fri, Mar 1, 2019 at 11:21 AM Douglas Anderson wrote: > > If you're bisecting why your peripherals stopped working, it's > probably this CL. Specifically if you see this in your dmesg: > Unexpected global fault, this could be serious > ...then it's almost certainly this CL. > > Running your

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-04-04 Thread Will Deacon
On Fri, Mar 01, 2019 at 11:20:17AM -0800, Douglas Anderson wrote: > If you're bisecting why your peripherals stopped working, it's > probably this CL. Specifically if you see this in your dmesg: > Unexpected global fault, this could be serious > ...then it's almost certainly this CL. > >

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-04-02 Thread Marc Gonzalez
On 01/03/2019 20:20, Douglas Anderson wrote: > If you're bisecting why your peripherals stopped working, it's > probably this CL. Specifically if you see this in your dmesg: > Unexpected global fault, this could be serious > ...then it's almost certainly this CL. > > Running your

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-03-20 Thread Marc Gonzalez
On 01/03/2019 20:20, Douglas Anderson wrote: > If you're bisecting why your peripherals stopped working, it's > probably this CL. Specifically if you see this in your dmesg: > Unexpected global fault, this could be serious > ...then it's almost certainly this CL. > > Running your

Re: [PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-03-20 Thread Robin Murphy
On 20/03/2019 15:48, Marc Gonzalez wrote: On 01/03/2019 20:20, Douglas Anderson wrote: If you're bisecting why your peripherals stopped working, it's probably this CL. Specifically if you see this in your dmesg: Unexpected global fault, this could be serious ...then it's almost certainly

[PATCH v2] iommu/arm-smmu: Break insecure users by disabling bypass by default

2019-03-01 Thread Douglas Anderson
If you're bisecting why your peripherals stopped working, it's probably this CL. Specifically if you see this in your dmesg: Unexpected global fault, this could be serious ...then it's almost certainly this CL. Running your IOMMU-enabled peripherals with the IOMMU in bypass mode is insecure