Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752882AbbKVXEK (ORCPT ); Sun, 22 Nov 2015 18:04:10 -0500 Received: from twosheds.infradead.org ([90.155.92.209]:34068 "EHLO twosheds.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752193AbbKVXEJ (ORCPT ); Sun, 22 Nov 2015 18:04:09 -0500 X-Greylist: delayed 2537 seconds by postgrey-1.27 at vger.kernel.org; Sun, 22 Nov 2015 18:04:08 EST Message-ID: <899d2ad12a8a5f8d54f8e08c290101ee.squirrel@twosheds.infradead.org> In-Reply-To: <20151122231622-mutt-send-email-mst@redhat.com> References: <20151119153821-mutt-send-email-mst@redhat.com> <1447976286.145626.122.camel@infradead.org> <20151120085658-mutt-send-email-mst@redhat.com> <1448207908.89124.54.camel@infradead.org> <20151122231622-mutt-send-email-mst@redhat.com> Date: Sun, 22 Nov 2015 22:21:37 -0000 Subject: Re: [PATCH v3 0/3] virtio DMA API core stuff From: "David Woodhouse" To: "Michael S. Tsirkin" Cc: "David Woodhouse" , "Andy Lutomirski" , "Benjamin Herrenschmidt" , "Christian Borntraeger" , "Paolo Bonzini" , "linux-kernel@vger.kernel.org" , "Martin Schwidefsky" , "Sebastian Ott" , "linux-s390" , "Cornelia Huck" , "Joerg Roedel" , "Linux Virtualization" , "Christoph Hellwig" , "KVM" , "Marcel Apfelbaum" User-Agent: SquirrelMail/1.4.22-15.fc21 MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-SRS-Rewrite: SMTP reverse-path rewritten from by twosheds.infradead.org. See http://www.infradead.org/rpr.html Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 894 Lines: 23 > There's that, and there's an "I care about security, but > do not want to burn up cycles on fake protections that > do not work" case. It would seem to make most sense for this use case simply *not* to expose virtio devices to guests as being behind an IOMMU at all. Sure, there are esoteric use cases where the guest actually nests and runs further guests inside itself and wants to pass through the virtio devices from the real hardware host. But presumably those configurations will have multiple virtio devices assigned by the host anyway, and further tweaking the configuration to put them behind an IOMMU shouldn't be hard. -- dwmw2 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/