From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTP id A58004D3 for ; Tue, 13 May 2014 10:06:04 +0000 (UTC) Received: from mail-ie0-f180.google.com (mail-ie0-f180.google.com [209.85.223.180]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id BB5A01FA97 for ; Tue, 13 May 2014 10:06:03 +0000 (UTC) Received: by mail-ie0-f180.google.com with SMTP id as1so82102iec.25 for ; Tue, 13 May 2014 03:06:03 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <20140512174029.GT12376@8bytes.org> References: <1399552623.17118.22.camel@i7.infradead.org> <3908561D78D1C84285E8C5FCA982C28F328000EE@ORSMSX114.amr.corp.intel.com> <1399666748.2166.68.camel@dabdike.int.hansenpartnership.com> <4433093.MSzoqdJDMf@avalon> <20140512150722.GO12376@8bytes.org> <20140512162814.GR12376@8bytes.org> <20140512174029.GT12376@8bytes.org> Date: Tue, 13 May 2014 12:06:03 +0200 Message-ID: From: Daniel Vetter To: Joerg Roedel Content-Type: text/plain; charset=UTF-8 Cc: James Bottomley , "ksummit-discuss@lists.linuxfoundation.org" Subject: Re: [Ksummit-discuss] [CORE TOPIC] Device error handling / reporting / isolation List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Mon, May 12, 2014 at 7:40 PM, Joerg Roedel wrote: > On Mon, May 12, 2014 at 07:11:46PM +0200, Daniel Vetter wrote: >> I was actually thinking of fully disabling the IOMMU if it only has >> one child device to isolate the possible damage. > > If you disable the IOMMU you also disable the protection from the child. > This also changes the address space of the device by disabling the IOTLB > and might make the device overwrite random memory. Oh, I think I'm using confusing language here. By disable I mean fully isolate the device by dropping all dma silently onto the floor. Disabling the iommu as in allowing the device direct access to the unremapping memory so it can scribble all over is ofc not what I want, ever ;-) So maybe I should say "disable all DMA by isolating the device". -Daniel -- Daniel Vetter Software Engineer, Intel Corporation +41 (0) 79 365 57 48 - http://blog.ffwll.ch