Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-09-04 Thread Jan Beulich
>>> On 04.09.17 at 17:06, wrote: > On Mon, Sep 04, 2017 at 04:52:35PM +0800, Chao Gao wrote: >> On Mon, Sep 04, 2017 at 10:26:04AM +0100, Roger Pau Monné wrote: >> >On Mon, Sep 04, 2017 at 10:00:00AM +0100, Roger Pau Monné wrote: >> >> So your box seems to be capable of

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-09-04 Thread Roger Pau Monné
OK, I know why my MUA doesn't add your email to the To or Cc when replying, this is because your original email contain the following header tag: Mail-Followup-To: Roger Pau =?iso-8859-1?Q?Monn=E9?= , "Tian, Kevin" , Jan Beulich

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-09-04 Thread Roger Pau Monné
On Mon, Sep 04, 2017 at 04:52:35PM +0800, Chao Gao wrote: > On Mon, Sep 04, 2017 at 10:26:04AM +0100, Roger Pau Monné wrote: > >(Adding Chao again because my MUA seems to drop him each time) > > > >On Mon, Sep 04, 2017 at 10:00:00AM +0100, Roger Pau Monné wrote: > >> On Mon, Sep 04, 2017 at

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-09-04 Thread Chao Gao
On Mon, Sep 04, 2017 at 10:26:04AM +0100, Roger Pau Monné wrote: >(Adding Chao again because my MUA seems to drop him each time) > >On Mon, Sep 04, 2017 at 10:00:00AM +0100, Roger Pau Monné wrote: >> On Mon, Sep 04, 2017 at 02:25:10PM +0800, Chao Gao wrote: >> > On Thu, Aug 31, 2017 at 11:09:48AM

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-09-04 Thread Roger Pau Monné
(Adding Chao again because my MUA seems to drop him each time) On Mon, Sep 04, 2017 at 10:00:00AM +0100, Roger Pau Monné wrote: > On Mon, Sep 04, 2017 at 02:25:10PM +0800, Chao Gao wrote: > > On Thu, Aug 31, 2017 at 11:09:48AM +0100, Roger Pau Monne wrote: > > >I tested Nehalem, Sandy Bridge and

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-09-04 Thread Roger Pau Monné
On Mon, Sep 04, 2017 at 02:25:10PM +0800, Chao Gao wrote: > On Thu, Aug 31, 2017 at 11:09:48AM +0100, Roger Pau Monne wrote: > >I tested Nehalem, Sandy Bridge and Haswell, but sadly not Ivy Bridge > >(in fact I didn't even know about Ivy Bridge, that's why I said all > >pre-Haswell). > > > >In

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-09-04 Thread Chao Gao
On Thu, Aug 31, 2017 at 11:09:48AM +0100, Roger Pau Monne wrote: >On Thu, Aug 31, 2017 at 04:45:23PM +0800, Chao Gao wrote: >> On Thu, Aug 31, 2017 at 10:03:19AM +0100, Roger Pau Monne wrote: >> >On Thu, Aug 31, 2017 at 03:32:42PM +0800, Chao Gao wrote: >> >> On Tue, Aug 29, 2017 at 08:33:25AM

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-31 Thread Roger Pau Monne
On Thu, Aug 31, 2017 at 04:45:23PM +0800, Chao Gao wrote: > On Thu, Aug 31, 2017 at 10:03:19AM +0100, Roger Pau Monne wrote: > >On Thu, Aug 31, 2017 at 03:32:42PM +0800, Chao Gao wrote: > >> On Tue, Aug 29, 2017 at 08:33:25AM +0100, Roger Pau Monne wrote: > >> >On Mon, Aug 28, 2017 at 06:18:13AM

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-31 Thread Chao Gao
On Thu, Aug 31, 2017 at 10:03:19AM +0100, Roger Pau Monne wrote: >On Thu, Aug 31, 2017 at 03:32:42PM +0800, Chao Gao wrote: >> On Tue, Aug 29, 2017 at 08:33:25AM +0100, Roger Pau Monne wrote: >> >On Mon, Aug 28, 2017 at 06:18:13AM +, Tian, Kevin wrote: >> >> > From: Roger Pau Monne

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-31 Thread Roger Pau Monne
On Thu, Aug 31, 2017 at 03:32:42PM +0800, Chao Gao wrote: > On Tue, Aug 29, 2017 at 08:33:25AM +0100, Roger Pau Monne wrote: > >On Mon, Aug 28, 2017 at 06:18:13AM +, Tian, Kevin wrote: > >> > From: Roger Pau Monne [mailto:roger@citrix.com] > >> > Sent: Friday, August 25, 2017 9:59 PM > >>

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-31 Thread Roger Pau Monne
On Thu, Aug 31, 2017 at 03:32:42PM +0800, Chao Gao wrote: > On Tue, Aug 29, 2017 at 08:33:25AM +0100, Roger Pau Monne wrote: > >On Mon, Aug 28, 2017 at 06:18:13AM +, Tian, Kevin wrote: > >> > From: Roger Pau Monne [mailto:roger@citrix.com] > >> > Sent: Friday, August 25, 2017 9:59 PM > >>

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-31 Thread Chao Gao
On Tue, Aug 29, 2017 at 08:33:25AM +0100, Roger Pau Monne wrote: >On Mon, Aug 28, 2017 at 06:18:13AM +, Tian, Kevin wrote: >> > From: Roger Pau Monne [mailto:roger@citrix.com] >> > Sent: Friday, August 25, 2017 9:59 PM >> > >> > On Fri, Aug 25, 2017 at 06:25:36AM -0600, Jan Beulich wrote:

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-29 Thread Roger Pau Monne
On Mon, Aug 28, 2017 at 06:18:13AM +, Tian, Kevin wrote: > > From: Roger Pau Monne [mailto:roger@citrix.com] > > Sent: Friday, August 25, 2017 9:59 PM > > > > On Fri, Aug 25, 2017 at 06:25:36AM -0600, Jan Beulich wrote: > > > >>> On 25.08.17 at 14:15, wrote: > > > >

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-28 Thread Tian, Kevin
> From: Roger Pau Monne [mailto:roger@citrix.com] > Sent: Friday, August 25, 2017 9:59 PM > > On Fri, Aug 25, 2017 at 06:25:36AM -0600, Jan Beulich wrote: > > >>> On 25.08.17 at 14:15, wrote: > > > On Wed, Aug 23, 2017 at 02:16:38AM -0600, Jan Beulich wrote: > > >> >>>

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-28 Thread Tian, Kevin
> From: Roger Pau Monne [mailto:roger@citrix.com] > Sent: Thursday, August 17, 2017 5:32 PM > > On Thu, Aug 17, 2017 at 03:12:02AM +, Tian, Kevin wrote: > > > From: Roger Pau Monne > > > Sent: Saturday, August 12, 2017 12:43 AM > > > > > > They are emulated by Xen, so they must not be

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-25 Thread Roger Pau Monne
On Fri, Aug 25, 2017 at 06:25:36AM -0600, Jan Beulich wrote: > >>> On 25.08.17 at 14:15, wrote: > > On Wed, Aug 23, 2017 at 02:16:38AM -0600, Jan Beulich wrote: > >> >>> On 22.08.17 at 15:54, wrote: > >> > On Tue, Aug 22, 2017 at 06:26:23AM -0600, Jan

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-25 Thread Jan Beulich
>>> On 25.08.17 at 14:15, wrote: > On Wed, Aug 23, 2017 at 02:16:38AM -0600, Jan Beulich wrote: >> >>> On 22.08.17 at 15:54, wrote: >> > On Tue, Aug 22, 2017 at 06:26:23AM -0600, Jan Beulich wrote: >> >> >>> On 11.08.17 at 18:43,

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-25 Thread Roger Pau Monne
On Wed, Aug 23, 2017 at 02:16:38AM -0600, Jan Beulich wrote: > >>> On 22.08.17 at 15:54, wrote: > > On Tue, Aug 22, 2017 at 06:26:23AM -0600, Jan Beulich wrote: > >> >>> On 11.08.17 at 18:43, wrote: > >> > --- a/xen/arch/x86/dom0_build.c > >> > +++

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-23 Thread Jan Beulich
>>> On 22.08.17 at 15:54, wrote: > On Tue, Aug 22, 2017 at 06:26:23AM -0600, Jan Beulich wrote: >> >>> On 11.08.17 at 18:43, wrote: >> > They are emulated by Xen, so they must not be mapped into Dom0 p2m. >> > Introduce a helper function to add the

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-22 Thread Roger Pau Monne
On Tue, Aug 22, 2017 at 06:26:23AM -0600, Jan Beulich wrote: > >>> On 11.08.17 at 18:43, wrote: > > They are emulated by Xen, so they must not be mapped into Dom0 p2m. > > Introduce a helper function to add the MMCFG areas to the list of > > denied iomem regions for PVH

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-22 Thread Jan Beulich
>>> On 11.08.17 at 18:43, wrote: > They are emulated by Xen, so they must not be mapped into Dom0 p2m. > Introduce a helper function to add the MMCFG areas to the list of > denied iomem regions for PVH Dom0. "They are" or "They are going to be"? > ---

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-17 Thread Roger Pau Monne
On Thu, Aug 17, 2017 at 03:12:02AM +, Tian, Kevin wrote: > > From: Roger Pau Monne > > Sent: Saturday, August 12, 2017 12:43 AM > > > > They are emulated by Xen, so they must not be mapped into Dom0 p2m. > > Introduce a helper function to add the MMCFG areas to the list of > > denied iomem

Re: [Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-16 Thread Tian, Kevin
> From: Roger Pau Monne > Sent: Saturday, August 12, 2017 12:43 AM > > They are emulated by Xen, so they must not be mapped into Dom0 p2m. > Introduce a helper function to add the MMCFG areas to the list of > denied iomem regions for PVH Dom0. > > Signed-off-by: Roger Pau Monné

[Xen-devel] [PATCH v2 1/4] x86/dom0: prevent access to MMCFG areas for PVH Dom0

2017-08-11 Thread Roger Pau Monne
They are emulated by Xen, so they must not be mapped into Dom0 p2m. Introduce a helper function to add the MMCFG areas to the list of denied iomem regions for PVH Dom0. Signed-off-by: Roger Pau Monné --- Cc: Jan Beulich Cc: Andrew Cooper