Re: [Qemu-devel] fw_cfg DMA security

2015-10-23 Thread Marc MarĂ­
On Fri, 23 Oct 2015 08:56:26 +0200 Gerd Hoffmann wrote: > Hi, > > > One complication I thought of was that it might be tricky to deal > > with the implications of allowing this DMA to specify any old > > address to fill with fw_cfg data. > > > > So, for example, since Red Hat is working on SM

Re: [Qemu-devel] fw_cfg DMA security

2015-10-23 Thread Paolo Bonzini
On 23/10/2015 08:56, Gerd Hoffmann wrote: >> > >> > So, for example, since Red Hat is working on SMM. Would a DMA to SMRAM >> > be protected? >> > >> > I haven't watched the fw_cfg DMA discussion too closely, but has this >> > been thought about? > Yes. That problem isn't new and it isn't spec

Re: [Qemu-devel] fw_cfg DMA security

2015-10-22 Thread Gerd Hoffmann
Hi, > One complication I thought of was that it might be tricky to deal with > the implications of allowing this DMA to specify any old address to > fill with fw_cfg data. > > So, for example, since Red Hat is working on SMM. Would a DMA to SMRAM > be protected? > > I haven't watched the fw_cf

[Qemu-devel] fw_cfg DMA security

2015-10-22 Thread Jordan Justen
Back when I was looking at fw_cfg support for -kernel in OVMF, I noted that it took a while to read the kernel. We improved the perf substantially by using a 'rep insb' instruction, which I think kvm special cases to minimize VM traps. Nevertheless, I thought that it would be good to implement a D