mbox series

[v2,0/3] x86: Dom0 I/O port access permissions

Message ID 0c45155a-2beb-4e69-bca3-cdf42ba22f2b@suse.com (mailing list archive)
Headers show
Series x86: Dom0 I/O port access permissions | expand

Message

Jan Beulich Dec. 18, 2023, 2:45 p.m. UTC
Following on from the CMOS/RTC port aliasing change, there are some
more missing restrictions; in particular there's more port aliasing to
be aware of. But first of all introduce a command line option to allow
suppressing this probing of aliases, as was requested.

Of course an alternative to all of this would be to do away with all
policy-only ioports_deny_access() in dom0_setup_permissions(), leaving
in place only ones which are truly required for functionality reasons.

1: allow to suppress port-alias probing
2: detect PIC aliasing on ports other than 0x[2A][01]
3: detect PIT aliasing on ports other than 0x4[0-3]

Jan