From: Mark Kettenis <mark.kettenis@xs4all.nl>
To: Arnd Bergmann <arnd@kernel.org>
Cc: sven@svenpeter.dev, robh@kernel.org,
iommu@lists.linux-foundation.org, joro@8bytes.org,
will@kernel.org, robin.murphy@arm.com, marcan@marcan.st,
maz@kernel.org, mohamed.mediouni@caramail.com,
stan@corellium.com, linux-arm-kernel@lists.infradead.org,
linux-kernel@vger.kernel.org, devicetree@vger.kernel.org
Subject: Re: [PATCH 0/3] Apple M1 DART IOMMU driver
Date: Fri, 26 Mar 2021 22:13:35 +0100 (CET) [thread overview]
Message-ID: <c1bcda5b25b1f37d@bloch.sibelius.xs4all.nl> (raw)
In-Reply-To: <CAK8P3a1CFHgjuzmefKcbC3MPeBD0USeTe7oZsTcQ=6tagG3Cvw@mail.gmail.com> (message from Arnd Bergmann on Fri, 26 Mar 2021 21:03:32 +0100)
> From: Arnd Bergmann <arnd@kernel.org>
> Date: Fri, 26 Mar 2021 21:03:32 +0100
>
> On Fri, Mar 26, 2021 at 6:28 PM Mark Kettenis <mark.kettenis@xs4all.nl> wrote:
>
> > I haven't figured out how the bypass stuff really works. Corellium
> > added support for it in their codebase when they added support for
> > Thunderbolt, and some of the DARTs that seem to be related to
> > Thunderbolt do indeed have a "bypass" property. But it is unclear to
> > me how the different puzzle pieces fit together for Thunderbolt.
>
> As a general observation, bypass mode for Thunderbolt is what enabled
> the http://thunderclap.io/ attack. This is extremely useful for debugging
> a running kernel from another machine, but it's also something that
> should never be done in a production kernel.
No kidding! I was surprised to see the bypass support on the
Thunderbolt-related nodes.
WARNING: multiple messages have this Message-ID (diff)
From: Mark Kettenis <mark.kettenis@xs4all.nl>
To: Arnd Bergmann <arnd@kernel.org>
Cc: robh@kernel.org, sven@svenpeter.dev, devicetree@vger.kernel.org,
will@kernel.org, marcan@marcan.st, linux-kernel@vger.kernel.org,
iommu@lists.linux-foundation.org, maz@kernel.org,
mohamed.mediouni@caramail.com, robin.murphy@arm.com,
linux-arm-kernel@lists.infradead.org, stan@corellium.com
Subject: Re: [PATCH 0/3] Apple M1 DART IOMMU driver
Date: Fri, 26 Mar 2021 22:13:35 +0100 (CET) [thread overview]
Message-ID: <c1bcda5b25b1f37d@bloch.sibelius.xs4all.nl> (raw)
In-Reply-To: <CAK8P3a1CFHgjuzmefKcbC3MPeBD0USeTe7oZsTcQ=6tagG3Cvw@mail.gmail.com> (message from Arnd Bergmann on Fri, 26 Mar 2021 21:03:32 +0100)
> From: Arnd Bergmann <arnd@kernel.org>
> Date: Fri, 26 Mar 2021 21:03:32 +0100
>
> On Fri, Mar 26, 2021 at 6:28 PM Mark Kettenis <mark.kettenis@xs4all.nl> wrote:
>
> > I haven't figured out how the bypass stuff really works. Corellium
> > added support for it in their codebase when they added support for
> > Thunderbolt, and some of the DARTs that seem to be related to
> > Thunderbolt do indeed have a "bypass" property. But it is unclear to
> > me how the different puzzle pieces fit together for Thunderbolt.
>
> As a general observation, bypass mode for Thunderbolt is what enabled
> the http://thunderclap.io/ attack. This is extremely useful for debugging
> a running kernel from another machine, but it's also something that
> should never be done in a production kernel.
No kidding! I was surprised to see the bypass support on the
Thunderbolt-related nodes.
_______________________________________________
iommu mailing list
iommu@lists.linux-foundation.org
https://lists.linuxfoundation.org/mailman/listinfo/iommu
WARNING: multiple messages have this Message-ID (diff)
From: Mark Kettenis <mark.kettenis@xs4all.nl>
To: Arnd Bergmann <arnd@kernel.org>
Cc: sven@svenpeter.dev, robh@kernel.org,
iommu@lists.linux-foundation.org, joro@8bytes.org,
will@kernel.org, robin.murphy@arm.com, marcan@marcan.st,
maz@kernel.org, mohamed.mediouni@caramail.com,
stan@corellium.com, linux-arm-kernel@lists.infradead.org,
linux-kernel@vger.kernel.org, devicetree@vger.kernel.org
Subject: Re: [PATCH 0/3] Apple M1 DART IOMMU driver
Date: Fri, 26 Mar 2021 22:13:35 +0100 (CET) [thread overview]
Message-ID: <c1bcda5b25b1f37d@bloch.sibelius.xs4all.nl> (raw)
In-Reply-To: <CAK8P3a1CFHgjuzmefKcbC3MPeBD0USeTe7oZsTcQ=6tagG3Cvw@mail.gmail.com> (message from Arnd Bergmann on Fri, 26 Mar 2021 21:03:32 +0100)
> From: Arnd Bergmann <arnd@kernel.org>
> Date: Fri, 26 Mar 2021 21:03:32 +0100
>
> On Fri, Mar 26, 2021 at 6:28 PM Mark Kettenis <mark.kettenis@xs4all.nl> wrote:
>
> > I haven't figured out how the bypass stuff really works. Corellium
> > added support for it in their codebase when they added support for
> > Thunderbolt, and some of the DARTs that seem to be related to
> > Thunderbolt do indeed have a "bypass" property. But it is unclear to
> > me how the different puzzle pieces fit together for Thunderbolt.
>
> As a general observation, bypass mode for Thunderbolt is what enabled
> the http://thunderclap.io/ attack. This is extremely useful for debugging
> a running kernel from another machine, but it's also something that
> should never be done in a production kernel.
No kidding! I was surprised to see the bypass support on the
Thunderbolt-related nodes.
_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel
next prev parent reply other threads:[~2021-03-26 21:14 UTC|newest]
Thread overview: 106+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-03-20 15:19 [PATCH 0/3] Apple M1 DART IOMMU driver Sven Peter
2021-03-20 15:19 ` Sven Peter
2021-03-20 15:19 ` Sven Peter via iommu
2021-03-20 15:19 ` [PATCH 1/3] iommu: io-pgtable: add DART pagetable format Sven Peter
2021-03-20 15:19 ` Sven Peter
2021-03-20 15:19 ` Sven Peter via iommu
2021-03-24 16:37 ` Robin Murphy
2021-03-24 16:37 ` Robin Murphy
2021-03-24 16:37 ` Robin Murphy
2021-03-25 20:47 ` Sven Peter
2021-03-25 20:47 ` Sven Peter
2021-03-25 20:47 ` Sven Peter via iommu
2021-03-20 15:20 ` [PATCH 2/3] dt-bindings: iommu: add DART iommu bindings Sven Peter
2021-03-20 15:20 ` Sven Peter
2021-03-20 15:20 ` Sven Peter via iommu
2021-03-22 0:15 ` Rob Herring
2021-03-22 0:15 ` Rob Herring
2021-03-22 0:15 ` Rob Herring
2021-03-22 18:16 ` Sven Peter
2021-03-22 18:16 ` Sven Peter
2021-03-22 18:16 ` Sven Peter via iommu
2021-03-21 16:00 ` [PATCH 0/3] Apple M1 DART IOMMU driver Mark Kettenis
2021-03-21 16:00 ` Mark Kettenis
2021-03-21 16:00 ` Mark Kettenis
2021-03-21 17:22 ` Sven Peter via iommu
2021-03-21 18:35 ` Mark Kettenis
2021-03-21 18:35 ` Mark Kettenis
2021-03-21 18:35 ` Mark Kettenis
2021-03-22 22:17 ` Sven Peter
2021-03-22 22:17 ` Sven Peter
2021-03-22 22:17 ` Sven Peter via iommu
2021-03-23 20:00 ` Mark Kettenis
2021-03-23 20:00 ` Mark Kettenis
2021-03-23 20:00 ` Mark Kettenis
2021-03-23 21:03 ` Sven Peter
2021-03-23 21:03 ` Sven Peter
2021-03-23 21:03 ` Sven Peter via iommu
2021-03-21 17:28 ` Sven Peter
2021-03-21 17:28 ` Sven Peter
2021-03-21 17:28 ` Sven Peter via iommu
2021-03-23 20:53 ` Rob Herring
2021-03-23 20:53 ` Rob Herring
2021-03-23 20:53 ` Rob Herring
2021-03-23 22:33 ` Mark Kettenis
2021-03-23 22:33 ` Mark Kettenis
2021-03-23 22:33 ` Mark Kettenis
2021-03-25 7:53 ` Sven Peter
2021-03-25 7:53 ` Sven Peter
2021-03-25 7:53 ` Sven Peter via iommu
2021-03-25 11:50 ` Robin Murphy
2021-03-25 11:50 ` Robin Murphy
2021-03-25 11:50 ` Robin Murphy
2021-03-25 20:49 ` Sven Peter
2021-03-25 20:49 ` Sven Peter
2021-03-25 20:49 ` Sven Peter via iommu
2021-03-27 15:33 ` Sven Peter
2021-03-27 15:33 ` Sven Peter
2021-03-27 15:33 ` Sven Peter via iommu
2021-03-25 21:41 ` Arnd Bergmann
2021-03-25 21:41 ` Arnd Bergmann
2021-03-25 21:41 ` Arnd Bergmann
2021-03-26 15:59 ` Mark Kettenis
2021-03-26 15:59 ` Mark Kettenis
2021-03-26 15:59 ` Mark Kettenis
2021-03-26 16:09 ` Arnd Bergmann
2021-03-26 16:09 ` Arnd Bergmann
2021-03-26 16:09 ` Arnd Bergmann
2021-03-26 16:10 ` Sven Peter
2021-03-26 16:10 ` Sven Peter
2021-03-26 16:10 ` Sven Peter via iommu
2021-03-26 16:38 ` Arnd Bergmann
2021-03-26 16:38 ` Arnd Bergmann
2021-03-26 16:38 ` Arnd Bergmann
2021-03-26 17:06 ` Sven Peter
2021-03-26 17:06 ` Sven Peter
2021-03-26 17:06 ` Sven Peter via iommu
2021-03-26 17:26 ` Mark Kettenis
2021-03-26 17:26 ` Mark Kettenis
2021-03-26 17:26 ` Mark Kettenis
2021-03-26 17:34 ` Robin Murphy
2021-03-26 17:34 ` Robin Murphy
2021-03-26 17:34 ` Robin Murphy
2021-03-26 17:51 ` Sven Peter
2021-03-26 17:51 ` Sven Peter
2021-03-26 17:51 ` Sven Peter via iommu
2021-03-26 19:59 ` Arnd Bergmann
2021-03-26 19:59 ` Arnd Bergmann
2021-03-26 19:59 ` Arnd Bergmann
2021-03-26 21:16 ` Mark Kettenis
2021-03-26 21:16 ` Mark Kettenis
2021-03-26 21:16 ` Mark Kettenis
2021-03-27 15:30 ` Sven Peter
2021-03-27 15:30 ` Sven Peter
2021-03-27 15:30 ` Sven Peter via iommu
2021-03-26 20:03 ` Arnd Bergmann
2021-03-26 20:03 ` Arnd Bergmann
2021-03-26 20:03 ` Arnd Bergmann
2021-03-26 21:13 ` Mark Kettenis [this message]
2021-03-26 21:13 ` Mark Kettenis
2021-03-26 21:13 ` Mark Kettenis
2021-03-24 15:29 ` Robin Murphy
2021-03-24 15:29 ` Robin Murphy
2021-03-24 15:29 ` Robin Murphy
2021-03-25 7:58 ` Sven Peter
2021-03-25 7:58 ` Sven Peter
2021-03-25 7:58 ` Sven Peter via iommu
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=c1bcda5b25b1f37d@bloch.sibelius.xs4all.nl \
--to=mark.kettenis@xs4all.nl \
--cc=arnd@kernel.org \
--cc=devicetree@vger.kernel.org \
--cc=iommu@lists.linux-foundation.org \
--cc=joro@8bytes.org \
--cc=linux-arm-kernel@lists.infradead.org \
--cc=linux-kernel@vger.kernel.org \
--cc=marcan@marcan.st \
--cc=maz@kernel.org \
--cc=mohamed.mediouni@caramail.com \
--cc=robh@kernel.org \
--cc=robin.murphy@arm.com \
--cc=stan@corellium.com \
--cc=sven@svenpeter.dev \
--cc=will@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.