On Mon, 01 Dec 2008 16:33:11 +0200 Avi Kivity <[EMAIL PROTECTED]> wrote:
> Joerg Roedel wrote: > > Hmm, is there any hardware IOMMU with which we can't emulate domains by > > partitioning the IO address space? This concept works for GART and > > Calgary. > > > > > > Is partitioning secure? Domain X's user could program its hardware to > dma to domain Y's addresses, zapping away Domain Y's user's memory. It can't be secure. So what's the point to emulate the domain partitioning in many traditional hardware IOMMUs that doesn't support it. The emulated domain support with the DMA mapping debugging feature might be useful to debug drivers but it doesn't mean that we need to add the emulated domain support to every hardware IOMMU. If you add it to swiotlb, everyone can enjoy the debugging. -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
