Weidong Han f007e99c8e Intel-IOMMU, intr-remap: source-id checking
To support domain-isolation usages, the platform hardware must be
capable of uniquely identifying the requestor (source-id) for each
interrupt message. Without source-id checking for interrupt remapping
, a rouge guest/VM with assigned devices can launch interrupt attacks
to bring down anothe guest/VM or the VMM itself.

This patch adds source-id checking for interrupt remapping, and then
really isolates interrupts for guests/VMs with assigned devices.

Because PCI subsystem is not initialized yet when set up IOAPIC
entries, use read_pci_config_byte to access PCI config space directly.

Signed-off-by: Weidong Han <weidong.han@intel.com>
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
2009-06-23 22:09:17 +01:00
..
2009-06-18 14:02:23 -07:00
2009-06-16 14:29:33 -07:00
2009-05-12 12:17:36 +02:00
2008-10-15 14:24:08 +02:00
2009-06-11 12:04:06 -07:00
2009-04-05 02:14:15 -04:00
2009-04-22 14:49:33 -07:00
2009-02-13 12:01:56 -08:00
2008-06-25 16:05:13 -07:00