From: Paul Durrant <pdurr...@amazon.com> This series introduces a pool of memory analogous to the shadow/HAP pool, accounted to the guest domain, from which IOMMU page-tables are allocated.
Paul Durrant (5): libxl: remove separate calculation of IOMMU memory overhead iommu / domctl: introduce XEN_DOMCTL_iommu_ctl libxl / iommu / domctl: introduce XEN_DOMCTL_IOMMU_SET_ALLOCATION... iommu: set 'hap_pt_share' and 'need_sync' flags earlier in iommu_domain_init() x86 / iommu: create a dedicated pool of page-table pages tools/flask/policy/modules/dom0.te | 2 + tools/libs/ctrl/include/xenctrl.h | 5 + tools/libs/ctrl/xc_domain.c | 16 ++++ tools/libs/light/libxl_create.c | 22 +---- tools/libs/light/libxl_x86.c | 10 ++ xen/arch/x86/domain.c | 4 +- xen/drivers/passthrough/iommu.c | 63 +++++++++--- xen/drivers/passthrough/x86/iommu.c | 132 ++++++++++++++++++++++---- xen/include/asm-arm/iommu.h | 6 ++ xen/include/asm-x86/iommu.h | 7 +- xen/include/public/domctl.h | 22 +++++ xen/include/xsm/dummy.h | 17 +++- xen/include/xsm/xsm.h | 26 +++-- xen/xsm/dummy.c | 6 +- xen/xsm/flask/hooks.c | 26 +++-- xen/xsm/flask/policy/access_vectors | 7 ++ xen/xsm/flask/policy/security_classes | 1 + 17 files changed, 300 insertions(+), 72 deletions(-) --- Cc: Andrew Cooper <andrew.coop...@citrix.com> Cc: Anthony PERARD <anthony.per...@citrix.com> Cc: Daniel De Graaf <dgde...@tycho.nsa.gov> Cc: George Dunlap <george.dun...@citrix.com> Cc: Ian Jackson <i...@xenproject.org> Cc: Jan Beulich <jbeul...@suse.com> Cc: Julien Grall <jul...@xen.org> Cc: "Roger Pau Monné" <roger....@citrix.com> Cc: Stefano Stabellini <sstabell...@kernel.org> Cc: Volodymyr Babchuk <volodymyr_babc...@epam.com> Cc: Wei Liu <w...@xen.org> -- 2.20.1