diff options
| author | Alex Williamson <alex.williamson@redhat.com> | 2011-12-20 23:59:03 -0500 |
|---|---|---|
| committer | Avi Kivity <avi@redhat.com> | 2011-12-25 10:13:31 -0500 |
| commit | 423873736b78f549fbfa2f715f2e4de7e6c5e1e9 (patch) | |
| tree | 62526563ccca81957a4c100aa0bc359dcd10af08 /Documentation/virtual | |
| parent | 0924ab2cfa98b1ece26c033d696651fd62896c69 (diff) | |
KVM: Remove ability to assign a device without iommu support
This option has no users and it exposes a security hole that we
can allow devices to be assigned without iommu protection. Make
KVM_DEV_ASSIGN_ENABLE_IOMMU a mandatory option.
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
Diffstat (limited to 'Documentation/virtual')
| -rw-r--r-- | Documentation/virtual/kvm/api.txt | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/Documentation/virtual/kvm/api.txt b/Documentation/virtual/kvm/api.txt index 7945b0bd35e..ee2c96b3ba5 100644 --- a/Documentation/virtual/kvm/api.txt +++ b/Documentation/virtual/kvm/api.txt | |||
| @@ -1151,6 +1151,9 @@ following flags are specified: | |||
| 1151 | /* Depends on KVM_CAP_IOMMU */ | 1151 | /* Depends on KVM_CAP_IOMMU */ |
| 1152 | #define KVM_DEV_ASSIGN_ENABLE_IOMMU (1 << 0) | 1152 | #define KVM_DEV_ASSIGN_ENABLE_IOMMU (1 << 0) |
| 1153 | 1153 | ||
| 1154 | The KVM_DEV_ASSIGN_ENABLE_IOMMU flag is a mandatory option to ensure | ||
| 1155 | isolation of the device. Usages not specifying this flag are deprecated. | ||
| 1156 | |||
| 1154 | 4.49 KVM_DEASSIGN_PCI_DEVICE | 1157 | 4.49 KVM_DEASSIGN_PCI_DEVICE |
| 1155 | 1158 | ||
| 1156 | Capability: KVM_CAP_DEVICE_DEASSIGNMENT | 1159 | Capability: KVM_CAP_DEVICE_DEASSIGNMENT |