KVM: IOMMU: Disable device assignment without interrupt remapping
authorAlex Williamson <alex.williamson@redhat.com>
Thu, 14 Jul 2011 19:27:03 +0000 (13:27 -0600)
committerAvi Kivity <avi@redhat.com>
Sun, 24 Jul 2011 08:50:42 +0000 (11:50 +0300)
commit3f68b0318bbbd61bf08478ab99a149f0d9e5156e
tree5caa009c012cee6b61de36f1aa643c9443684423
parent4f0226482d20f104e943ee9e6f1218b573953f63
KVM: IOMMU: Disable device assignment without interrupt remapping

IOMMU interrupt remapping support provides a further layer of
isolation for device assignment by preventing arbitrary interrupt
block DMA writes by a malicious guest from reaching the host.  By
default, we should require that the platform provides interrupt
remapping support, with an opt-in mechanism for existing behavior.

Both AMD IOMMU and Intel VT-d2 hardware support interrupt
remapping, however we currently only have software support on
the Intel side.  Users wishing to re-enable device assignment
when interrupt remapping is not supported on the platform can
use the "allow_unsafe_assigned_interrupts=1" module option.

[avi: break long lines]

Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
Signed-off-by: Avi Kivity <avi@redhat.com>
virt/kvm/iommu.c