3 ms·

I've had intel_iommu=on in my boot cmdline on my personal machines (ones I do my banking on!) for 5 years without issue (board+CPU for all machines both suppor

I've had intel_iommu=on in my boot cmdline on my personal machines (ones I do my banking on!) for 5 years without issue (board+CPU for all machines both support it, dmesg confirms it is indeed on)

hedora 7y ago
From the article: > Does not work if the OS uses the IOMMU/VT-d. This is the default on macOS (unless disabled in recovery mode). Windows 10 with Virtualization based security features enabled does not work fully - this is however not the default setting in Windows 10 or Linux. For PCI (shared bus) the device could just spoof packets, but for PCIe, there are dedicated lanes for each device. I wonder if a physical MITM device is practical.