Re: Disabling PCI "hot-unplug" for a guest (and/or a single PCI device)

2020-02-05 Thread Laine Stump
On 2/4/20 1:43 PM, Daniel P. Berrangé wrote: On Mon, Feb 03, 2020 at 05:19:51PM -0500, Laine Stump wrote: Although I've never experienced it, due to not running Windows guests, I've recently learned that a Windows guest permits a user (hopefully only one with local admin privileges??!) to

Re: Disabling PCI "hot-unplug" for a guest (and/or a single PCI device)

2020-02-05 Thread Michael S. Tsirkin
On Wed, Feb 05, 2020 at 11:36:37AM +, Daniel P. Berrangé wrote: > On Tue, Feb 04, 2020 at 11:35:37AM -0500, Michael S. Tsirkin wrote: > > On Tue, Feb 04, 2020 at 05:13:54PM +0100, Julia Suvorova wrote: > > > On Tue, Feb 4, 2020 at 11:26 AM Michael S. Tsirkin > > > wrote: > > > > > > > > On

Re: Disabling PCI "hot-unplug" for a guest (and/or a single PCI device)

2020-02-05 Thread Daniel P . Berrangé
On Tue, Feb 04, 2020 at 11:35:37AM -0500, Michael S. Tsirkin wrote: > On Tue, Feb 04, 2020 at 05:13:54PM +0100, Julia Suvorova wrote: > > On Tue, Feb 4, 2020 at 11:26 AM Michael S. Tsirkin wrote: > > > > > > On Mon, Feb 03, 2020 at 05:19:51PM -0500, Laine Stump wrote: > > > > 3) qemu could add a

Re: Disabling PCI "hot-unplug" for a guest (and/or a single PCI device)

2020-02-04 Thread Daniel P . Berrangé
On Mon, Feb 03, 2020 at 05:19:51PM -0500, Laine Stump wrote: > Although I've never experienced it, due to not running Windows guests, I've > recently learned that a Windows guest permits a user (hopefully only one > with local admin privileges??!) to "hot-unplug" any PCI device. I've also >

Re: Disabling PCI "hot-unplug" for a guest (and/or a single PCI device)

2020-02-04 Thread Michael S. Tsirkin
On Tue, Feb 04, 2020 at 05:13:54PM +0100, Julia Suvorova wrote: > On Tue, Feb 4, 2020 at 11:26 AM Michael S. Tsirkin wrote: > > > > On Mon, Feb 03, 2020 at 05:19:51PM -0500, Laine Stump wrote: > > > 3) qemu could add a "hotpluggable=no" commandline option to all PCI > > > devices > > >

Re: Disabling PCI "hot-unplug" for a guest (and/or a single PCI device)

2020-02-04 Thread Julia Suvorova
On Tue, Feb 4, 2020 at 11:26 AM Michael S. Tsirkin wrote: > > On Mon, Feb 03, 2020 at 05:19:51PM -0500, Laine Stump wrote: > > 3) qemu could add a "hotpluggable=no" commandline option to all PCI devices > > (including vfio-pci) and then do whatever is necessary to make sure this is > > honored in

Re: Disabling PCI "hot-unplug" for a guest (and/or a single PCI device)

2020-02-04 Thread Michael S. Tsirkin
On Mon, Feb 03, 2020 at 05:19:51PM -0500, Laine Stump wrote: > 3) qemu could add a "hotpluggable=no" commandline option to all PCI devices > (including vfio-pci) and then do whatever is necessary to make sure this is > honored in the emulated hardware (is it possible to set this on a per-slot >

Disabling PCI "hot-unplug" for a guest (and/or a single PCI device)

2020-02-03 Thread Laine Stump
Although I've never experienced it, due to not running Windows guests, I've recently learned that a Windows guest permits a user (hopefully only one with local admin privileges??!) to "hot-unplug" any PCI device. I've also learned that some hypervisor admins don't want to permit admins of the