3 ms·
IOMMUs can protect the RAM if configured to do so by the OS, udevd rules could let you opt-in to to the kernel using the devices - you wouldn't want your networ
by the8472 9y ago
IOMMUs can protect the RAM if configured to do so by the OS, udevd rules could let you opt-in to to the kernel using the devices - you wouldn't want your network connections hijacked through some plugged-in and auto-detected network device!
But I don't know what the PCIe security model is wrt. to accessing other devices, such as the HDDs.
- monocasa 9y ago> But I don't know what the PCIe security model is wrt. to accessing other devices, such as the HDDs. Should also be protected by the MMU for the most part. You might be able to forge interrupts from other devices though. PCI-E message signaled interrupts are just another memory write to a special part of address space, that unfortunately isn't separated by device at page granularity AFAIR.