Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-17 Thread Tian, Kevin
> From: Paul Durrant > Sent: Friday, March 13, 2020 5:26 PM > > > -Original Message- > > From: Jan Beulich > > Sent: 13 March 2020 08:10 > > To: Tian, Kevin > > Cc: xen-devel@lists.xenproject.org; Andrew Cooper > ; Paul Durrant > > > > Subject: Re: [PATCH v3] IOMMU: make DMA

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-17 Thread Tian, Kevin
> From: Paul Durrant > Sent: Friday, March 13, 2020 5:26 PM > > > -Original Message- > > From: Tian, Kevin > > Sent: 13 March 2020 03:23 > > To: p...@xen.org; 'Jan Beulich' > > Cc: xen-devel@lists.xenproject.org; 'Andrew Cooper' > > >

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-13 Thread Paul Durrant
> -Original Message- > From: Jan Beulich > Sent: 13 March 2020 08:10 > To: Tian, Kevin > Cc: xen-devel@lists.xenproject.org; Andrew Cooper > ; Paul Durrant > > Subject: Re: [PATCH v3] IOMMU: make DMA containment of quarantined devices > optional > > On 13.03.2020 04:05, Tian, Kevin

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-13 Thread Paul Durrant
> -Original Message- > From: Tian, Kevin > Sent: 13 March 2020 03:23 > To: p...@xen.org; 'Jan Beulich' > Cc: xen-devel@lists.xenproject.org; 'Andrew Cooper' > > Subject: RE: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of > quarantined devices optional &

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-13 Thread Jan Beulich
On 13.03.2020 04:05, Tian, Kevin wrote: >> From: Jan Beulich >> Sent: Tuesday, March 10, 2020 6:31 PM >> >> On 10.03.2020 06:30, Tian, Kevin wrote: From: Jan Beulich Sent: Monday, March 9, 2020 7:09 PM Containing still in flight DMA was introduced to work around certain

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-12 Thread Tian, Kevin
> From: Paul Durrant > Sent: Wednesday, March 11, 2020 12:05 AM > [...] > > > > > > However, is a really saying that things will break if any of the > > > PTEs has their present bit clear? > > > > Well, you said that read faults are fatal (to the host). Reads will, > > for any address with an

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-12 Thread Tian, Kevin
> From: Jan Beulich > Sent: Tuesday, March 10, 2020 6:31 PM > > On 10.03.2020 06:30, Tian, Kevin wrote: > >> From: Jan Beulich > >> Sent: Monday, March 9, 2020 7:09 PM > >> > >> Containing still in flight DMA was introduced to work around certain > >> devices / systems hanging hard upon hitting

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-12 Thread Tian, Kevin
> From: Jan Beulich > Sent: Tuesday, March 10, 2020 6:27 PM > > On 10.03.2020 04:43, Tian, Kevin wrote: > >> From: Jan Beulich > >> Sent: Monday, March 9, 2020 7:09 PM > >> > >> I'm happy to take better suggestions to replace the "full" command line > >> option and Kconfig prompt tokens. I

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Jan Beulich
On 10.03.2020 17:05, Paul Durrant wrote: >> -Original Message- >> From: Jan Beulich >> Sent: 10 March 2020 15:44 >> To: p...@xen.org >> Cc: xen-devel@lists.xenproject.org; 'Tian, Kevin' ; >> 'Andrew Cooper' >> >> Subject: Re: [X

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Paul Durrant
> -Original Message- > From: Jan Beulich > Sent: 10 March 2020 15:44 > To: p...@xen.org > Cc: xen-devel@lists.xenproject.org; 'Tian, Kevin' ; > 'Andrew Cooper' > > Subject: Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of > quarantined devices option

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Jan Beulich
On 10.03.2020 16:13, Paul Durrant wrote: >> -Original Message- >> From: Jan Beulich >> Sent: 10 March 2020 15:05 >> To: p...@xen.org >> Cc: 'Tian, Kevin' ; xen-devel@lists.xenproject.org; >> 'Andrew Cooper' >> >> Subject: Re: [PATCH v3] IOMMU: make DMA containment of quarantined devices

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Paul Durrant
> -Original Message- > From: Jan Beulich > Sent: 10 March 2020 15:05 > To: p...@xen.org > Cc: 'Tian, Kevin' ; xen-devel@lists.xenproject.org; > 'Andrew Cooper' > > Subject: Re: [PATCH v3] IOMMU: make DMA containment of quarantined devices > optional > > On 10.03.2020 13:30, Paul

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Jan Beulich
On 10.03.2020 13:30, Paul Durrant wrote: >> -Original Message- >> From: Jan Beulich >> Sent: 10 March 2020 10:27 >> To: Tian, Kevin ; Paul Durrant >> Cc: xen-devel@lists.xenproject.org; Andrew Cooper >> Subject: Re: [PATCH v3] IOMMU: make DMA containment of quarantined devices >>

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Paul Durrant
> -Original Message- > From: Jan Beulich > Sent: 10 March 2020 10:27 > To: Tian, Kevin ; Paul Durrant > Cc: xen-devel@lists.xenproject.org; Andrew Cooper > Subject: Re: [PATCH v3] IOMMU: make DMA containment of quarantined devices > optional > > On 10.03.2020 04:43, Tian, Kevin wrote:

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Jan Beulich
On 10.03.2020 06:30, Tian, Kevin wrote: >> From: Jan Beulich >> Sent: Monday, March 9, 2020 7:09 PM >> >> Containing still in flight DMA was introduced to work around certain >> devices / systems hanging hard upon hitting a "not-present" IOMMU fault. >> Passing through (such) devices (on such

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Jan Beulich
On 10.03.2020 04:43, Tian, Kevin wrote: >> From: Jan Beulich >> Sent: Monday, March 9, 2020 7:09 PM >> >> I'm happy to take better suggestions to replace the "full" command line >> option and Kconfig prompt tokens. I don't think though that "fault" and >> "write-fault" are really suitable there.

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Jan Beulich
On 10.03.2020 09:58, Paul Durrant wrote: >> -Original Message- >> From: Jan Beulich >> Sent: 09 March 2020 11:09 >> >> @@ -1276,11 +1276,15 @@ boolean (e.g. `iommu=no`) can override t >> will prevent Xen from booting if IOMMUs aren't discovered and enabled >> successfully. >> >>

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-10 Thread Paul Durrant
> -Original Message- > From: Jan Beulich > Sent: 09 March 2020 11:09 > To: xen-devel@lists.xenproject.org > Cc: Andrew Cooper ; Paul Durrant ; > Kevin Tian > > Subject: [PATCH v3] IOMMU: make DMA containment of quarantined devices > optional > > Containing still in flight DMA was

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-09 Thread Tian, Kevin
> From: Jan Beulich > Sent: Monday, March 9, 2020 7:09 PM > > Containing still in flight DMA was introduced to work around certain > devices / systems hanging hard upon hitting a "not-present" IOMMU fault. > Passing through (such) devices (on such systems) is inherently insecure > (as guests

Re: [Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-09 Thread Tian, Kevin
> From: Jan Beulich > Sent: Monday, March 9, 2020 7:09 PM > > Containing still in flight DMA was introduced to work around certain > devices / systems hanging hard upon hitting a "not-present" IOMMU fault. > Passing through (such) devices (on such systems) is inherently insecure > (as guests

[Xen-devel] [PATCH v3] IOMMU: make DMA containment of quarantined devices optional

2020-03-09 Thread Jan Beulich
Containing still in flight DMA was introduced to work around certain devices / systems hanging hard upon hitting a "not-present" IOMMU fault. Passing through (such) devices (on such systems) is inherently insecure (as guests could easily arrange for IOMMU faults of any kind to occur). Defaulting