From patchwork Thu May 11 12:05:45 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Jan Beulich X-Patchwork-Id: 13237831 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 52437C7EE22 for ; Thu, 11 May 2023 12:06:03 +0000 (UTC) Received: from list by lists.xenproject.org with outflank-mailman.533316.829861 (Exim 4.92) (envelope-from ) id 1px53Q-0008Bl-K9; Thu, 11 May 2023 12:05:52 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 533316.829861; Thu, 11 May 2023 12:05:52 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1px53Q-0008Be-HU; Thu, 11 May 2023 12:05:52 +0000 Received: by outflank-mailman (input) for mailman id 533316; Thu, 11 May 2023 12:05:51 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1px53P-0008BT-Cf for xen-devel@lists.xenproject.org; Thu, 11 May 2023 12:05:51 +0000 Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2062f.outbound.protection.outlook.com [2a01:111:f400:7e1b::62f]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id 2ba90d4c-eff4-11ed-b229-6b7b168915f2; Thu, 11 May 2023 14:05:50 +0200 (CEST) Received: from VE1PR04MB6560.eurprd04.prod.outlook.com (2603:10a6:803:122::25) by VI1PR04MB7072.eurprd04.prod.outlook.com (2603:10a6:800:12c::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6363.33; Thu, 11 May 2023 12:05:47 +0000 Received: from VE1PR04MB6560.eurprd04.prod.outlook.com ([fe80::8e41:82b6:a27f:2e0c]) by VE1PR04MB6560.eurprd04.prod.outlook.com ([fe80::8e41:82b6:a27f:2e0c%4]) with mapi id 15.20.6363.033; Thu, 11 May 2023 12:05:47 +0000 X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" X-Inumbo-ID: 2ba90d4c-eff4-11ed-b229-6b7b168915f2 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WdselYRAYcXbhpzaS6z2V0aX9Eb2tElMtKD/HI3zCG3yFxoEOgLxGPGoPWc+kBYzOVinix1he5Mey9uM4+6NIhwA/vt432E2Xo9dQoInvPI7flemYA1n3/HuGxG20iNQPl22oOjwDi34d6jLQa5Jb5qA0UmJhGxxNFaZHutw88VqCK4GTuSucNDf1Fj26JaxlLpT0B/f1rgvQ3aJDoURlxSmFdORnFsB5ECrtG8ogh9zgLbC7vmuTONiYwQvB9adDg8Yl+0F3Z5pN9fd7mh5pTwUlsRrYxqEGxHvN9sHF13Vg+XoURQZuOLQ+NuLLDVAMzzgi9zyw/+kEzh7s+Ejpg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=CR+eUbj/5Je+MQ4vbE1qFcIftH2nxRaJNZbDsHnTN30=; b=dEYNR9elkY97Kh/NWmiBiv7wYpgr1QixASMvbvXk8YxOW9IZjkHB/LmXp6yZT+xIvOmn7GnrpM0T/OhtRC3KDG8NuQV7czzcXyeopSzx6VirYUUfORKsZP0DnYcysMpNfdlGf8XeLnWG1pYU4WVq/eAp3fpZ3zPfF7rZ1ahqHM7FWAt3yVW6iioByk3qz1Q3X9P1J4wXav1ljMd0m7mE5k74HYrYfiXKrgN3ri2DgQI5C5ZwtVDS8BY+YuODkuYS0nDB1BIzhshb49wV3yye45O7TEu7DoxETsvLgedX0XqC2+we7tWHwT+mmJIeDKKRW8FZcgma4T17uCSK0k+sEg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=suse.com; dmarc=pass action=none header.from=suse.com; dkim=pass header.d=suse.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CR+eUbj/5Je+MQ4vbE1qFcIftH2nxRaJNZbDsHnTN30=; b=gmvVD31Uzhmc3065LJVJD9vi3aSZRZ0SRr0ZKUUEJ4jDyYLsDie5v7UqSL1pdf9Vgf+kpazZ5/256oLgfhqcxswyI9hi3L2F/pja4Li0dHYZmk+Xl/37tSOs3VM0D7zUjVfPCZ0NrrkhSGQvBP+cfijzmhDqmi3qdimIWhAOdEsWW1b9UNMVUx8X+h9S7ewjqeelfLY2mfbgDemyPF6U4q+l1nzJ0rWllCAAnjhyKGEfUxA0rQIroNw24cU7nFPu8AsPYZkzj+ub0Lv362uX/EBKVPUruF1gIFalYs0uVURuNjmGeytL76RidoHWg1Da1SjoUvC6DQNUjtcACVfBRw== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=suse.com; Message-ID: Date: Thu, 11 May 2023 14:05:45 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.10.1 Subject: [PATCH 2/7] x86: don't allow Dom0 access to port 92 Content-Language: en-US From: Jan Beulich To: "xen-devel@lists.xenproject.org" Cc: Andrew Cooper , Wei Liu , =?utf-8?q?Roger_Pau_Monn=C3=A9?= References: <95129c04-f37c-9e26-e65d-786a1db2f003@suse.com> In-Reply-To: <95129c04-f37c-9e26-e65d-786a1db2f003@suse.com> X-ClientProxiedBy: FR3P281CA0023.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:1c::7) To VE1PR04MB6560.eurprd04.prod.outlook.com (2603:10a6:803:122::25) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: VE1PR04MB6560:EE_|VI1PR04MB7072:EE_ X-MS-Office365-Filtering-Correlation-Id: 33aa4a28-5125-4ced-661a-08db52180e4a X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:VE1PR04MB6560.eurprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230028)(376002)(366004)(39860400002)(136003)(396003)(346002)(451199021)(31686004)(36756003)(2906002)(41300700001)(86362001)(38100700002)(8676002)(31696002)(5660300002)(4744005)(8936002)(4326008)(316002)(83380400001)(478600001)(66946007)(6506007)(6916009)(186003)(6486002)(66476007)(66556008)(26005)(54906003)(6512007)(2616005)(43740500002)(45980500001);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?q?MUc36wfl0qhJPLS0q7FIrBdM5Asq?= =?utf-8?q?0VNmtCKIUjv5RyuprZNyaDF0FyLIxvnyTe0OrZimyNOYhjTc1NSw0Jk8m9MjRXNHk?= =?utf-8?q?Ob/xbGmEJjypyH0inuehrIxMkg2SuMrEi+q1c25oPamw4F7dkVNqhILisEDCAubKp?= =?utf-8?q?BMfUswerrLjaEd586fLqdeUOBRzstk/O8kmKGmrVb4KkXL7ArpNkZyomdVSHkGkFu?= =?utf-8?q?mg4wDn3lRQSaYYlBhLkSxuOnmCip8axq3f8d5XpLjzxWnUYg39yX3EWIUh5nlVgzx?= =?utf-8?q?pndKgUUioBKRA7aV4+3Ou5oLR3qUnZAgnpLWQlWUP8oTAnyf8t0WjrCkEgBeUqb9w?= =?utf-8?q?+GMVrh0jdV0GxalSDmNIJifrBWHeo+108sIVT5IA/lNWCR4uZnGpdSeI62QmfpIfZ?= =?utf-8?q?xOaNhEmTiwXLJ7wTOeIiED3iab6AO94Y1ridF7F1oWCNibUKQhvOZF1WW/B6TznZ1?= =?utf-8?q?vtT7apSmTacOAoUVidBRDYfZuP3ktnggQCxW1dP4pF65V8+t51NdhkTx0mPaxCY9d?= =?utf-8?q?ZSe8jq8+fbmbAJLoG/mQDWipynZr1KPQreqTAr86i5tuaFR7Ei6fMvn0L/Z424dMr?= =?utf-8?q?P0Q+KSf2CkYsWJ+O9Q8VguN2F20+rD/+6FhRwAglGkgiW6g7GK+GXM7sWSdj3XJLb?= =?utf-8?q?HQWN86oekUzMmrIO6O6yMdahKkivgJZC6px5XTmscX6nMaluW9FkQhd6rG6y8Jf+J?= =?utf-8?q?AKhrJtI66gwfs6nzqDYsrMgWGa2lCFUbv4hQkxcq92W4eBOjLT7PH5zFJyxCcDbQI?= =?utf-8?q?X/4jTflargK9KVH36VEN/9psvp7T7tAtYtOj+ePK28fzhON9yaKHxxvKpBrCFq1Y8?= =?utf-8?q?/EQ+8LSuVZCFboKpvbSu7sDYgjIDWaNuoFuLg2OINUrAggyv52BvVBu+nyVQwe7UX?= =?utf-8?q?rgUjYxW6UI2pc9YT4kY1uz19Wyzbbeny2BBTWGguYzUPFDMyWLvwseLD7mWbpE2pD?= =?utf-8?q?1NiY72ClqWhaMhT5z/Y8KZDGoruqEf1yUDKI4zVOvdwJ+QPri4rgFXOenA6v7MiWj?= =?utf-8?q?eKOpMLwMo6FLskLWVTaoUsY+bLP7QW1LWQm66u+qv2Pg3etOeI2BI20XHZRqaomyJ?= =?utf-8?q?kXfmFVbrqUZFpbuCpFSbODcG0cHTUp0gx5zrF6braPCXBJwYFmGdYS8X8ocsYDOxU?= =?utf-8?q?0vGtW0ITeDVrdSiKe5624DUbQPxttespsilUkcJT7cWkcl+OdpRadVdp0q/l5j7J0?= =?utf-8?q?0j9MjqVX9oEhp8nnseNcm58BYBmlyCiZzSqsNmpzbrntNhgARMcldz29A2dOtpIYO?= =?utf-8?q?p2OAa/6ay5YXUKySHEAITK0dktKRihCy/mFC/BdmWbRJRQD2EHqpV0pf+GbpcfL0Z?= =?utf-8?q?7hiKzkmYgTotOp5Lf/HCySkXGuxKaL3T5eZyasQo8kPvXzNCV0086fOoWoJCqNXpv?= =?utf-8?q?dQMvPvlLZudGimGUXCH2OxDqiX35JwntK+RLn3iDe55ofN3rgUEDSay5XuaoFjZL0?= =?utf-8?q?+G9pRobKJdeKpadFr2tdjr0nQnpGFkGn2D25gyDTsK5VZYDedUxcFRp6Wq2q1EAL9?= =?utf-8?q?fjrPLn8QTOYI?= X-OriginatorOrg: suse.com X-MS-Exchange-CrossTenant-Network-Message-Id: 33aa4a28-5125-4ced-661a-08db52180e4a X-MS-Exchange-CrossTenant-AuthSource: VE1PR04MB6560.eurprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 May 2023 12:05:47.6798 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: f7a17af6-1c5c-4a36-aa8b-f5be247aa4ba X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 9nbRYqbki1naMA/9xJWjk8F753BmG7VTR0U/KIGTSvkEF5vVfyrveuwMg7Xv2T7ChHxEMrWfqPEO0VSg/Aj61Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR04MB7072 Somewhat like port CF9 this may have a bit controlling the CPU's INIT# signal, and it also may have a bit involved in the driving of A20M#. Neither of these - just like CF9 - we want to allow Dom0 to drive. Signed-off-by: Jan Beulich Acked-by: Roger Pau Monné --- a/xen/arch/x86/dom0_build.c +++ b/xen/arch/x86/dom0_build.c @@ -500,6 +500,10 @@ int __init dom0_setup_permissions(struct rc |= ioports_deny_access(d, 0x40, 0x43); /* PIT Channel 2 / PC Speaker Control. */ rc |= ioports_deny_access(d, 0x61, 0x61); + + /* INIT# and alternative A20M# control. */ + rc |= ioports_deny_access(d, 0x92, 0x92); + /* ACPI PM Timer. */ if ( pmtmr_ioport ) rc |= ioports_deny_access(d, pmtmr_ioport, pmtmr_ioport + 3);