From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qt1-f180.google.com (mail-qt1-f180.google.com [209.85.160.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id ACEF543E077 for ; Tue, 11 Aug 2026 13:59:28 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.160.180 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786456771; cv=none; b=IlIEXTtGldsUyEYg71LXY4lzTGLASaQDvRMB6Is4lahylnQkUGbOcUM3xS2W7OgVyWe5MyVqWioWAgyJvn30OZhEJ0nXZqkCnWbda860pwk3eom0Wm916CtPCR1d9flKT5m8/myjWNgRDmvZm6w/JxNf3cly717ZQHPXtvmOyZc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786456771; c=relaxed/simple; bh=QBMfK3eIkZi/jJl/oa48IFZJDBU0kclwX3To9OnzWTY=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=BCw8xSiMbuXoQRqhFu9hJfRlS7Mcwm6xWAIbJ+2sRVpxMIYzr/6mdmTKXBQV15+Pf1Iox5xLCELF2MaO/uinY1jwUrMCMy9XaZ8mwRXVXg3fyqCLGwaaVJOun/jYkk4hKzWqIFWOhlSmz67Oys9TbAtL2dJjCMgwHXz17xbhTO0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca; spf=pass smtp.mailfrom=ziepe.ca; dkim=pass (2048-bit key) header.d=ziepe.ca header.i=@ziepe.ca header.b=SB6P4UpH; arc=none smtp.client-ip=209.85.160.180 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=ziepe.ca header.i=@ziepe.ca header.b="SB6P4UpH" Received: by mail-qt1-f180.google.com with SMTP id d75a77b69052e-5218927884fso28993201cf.3 for ; Tue, 11 Aug 2026 06:59:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ziepe.ca; s=google; t=1786456766; x=1787061566; darn=vger.kernel.org; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:from:to:cc:subject :date:message-id:reply-to:content-type; bh=t5rMEoFMyC39ciFQHolbpCiBeUsGRE4zV/d+AHYh648=; b=SB6P4UpHZQaNwfylzE8hF3fIRSOI75D48jq4WZGphlHrA8t/ZruyQNpKz6NiinplLC HxC4IoH7JVnQ7JVY7/V6uZkKqZJf3elMZQ245c/0vrVzJN8O54vGgHIRWIiyaeR1iNBk MKh8BF1JalRqNsO7eQKC3bJ6ZYqegEeYlFyldjuvw6A5rwqtX2/r/mgxMrukhHKJo98U CyzFDOA1VIYDMvWmPXqsyO27o4RW7HKhF5tx1JdUh0VMA/bQ5/EBANgjnEB91Nt7nu5v 02Um7gihTQuSTk7fBPKNUbz01WHtdjAadhkE4g7hdXP791vdu1TGqIM/HUMFQfW7Bt0q DOeg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786456766; x=1787061566; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=t5rMEoFMyC39ciFQHolbpCiBeUsGRE4zV/d+AHYh648=; b=FHUxpFzuOIDU9J07eBubFgnkNia+gQz8wt+cHP9i2GR9seN3/HEsuB2RHp/v6APyRb ng3Hc538c68eJN0r/eDmIfz4SxxAR7r8UzDGVOQZoDG0qkHPRzBCMZA7owYJqBbTiq2I mR8bCv+uV9chpzHdyvUFB9erveDZmgEV62ZIU1baaJ5H0bKndQBVtvdIsmtLXu0dBKnX cApLYMDUX0RxDKsn5c+rFRnXBOjWedHfb11bIl9GULkqf/u0/SasILr0lVbOBIJ4zn6b Ea4EP+c4V5gsl60CalBFEKWgYwZCTqSDWinpxU13baTATqlzEwodC7hkgUcMsW/YZP+W YcLw== X-Forwarded-Encrypted: i=1; AHgh+Rp9el5eMpp2ivPdP0nk3OQeqnufDRL012AgtH4N1cblHHcvXQvzXWfAqD/A2Fq4BAVQOG3p6KRLF0y522I=@vger.kernel.org X-Gm-Message-State: AOJu0YzkVak3mNXIPO8alYJGpOt20e63oM39krFX9mMAF/LBYBufQ3rw 6LGFjCSQVox622FZkntFEeC6NOqkjeeEWPFewtEwqoydGOe8yYerWULAb/bO6wWDwKaMUGsaJWM CGrDQ X-Gm-Gg: AR+sD10mFSxa6xVXA6d1mWjibPRX9lH0Z4sdpZVEjHl1P0zb2TmLFcS1zrHOW5mbW34 PFVkLis4dMnZd4n8j7IT01xs8Ro+SmtAfArv7aEL3a/E/YIEn8db0aWSvgw+oYoVEJVo1vIiG9x WErhXmeo/WWOQyjQGdl3WdP3IJFm7ntoknCkFhrn1deADrwC3VB/yP69zBh8nAtCkiI1xYZt5mT lYlmTdtXIDj4wBicgobK2hy2jAZEyG2ZxVXvrOve56jDJyVJ4GW4B5wdO+FxPvu3S4iGiEcOd2h JNBkDXXsDZxtR4wj8I32rRWyxj0db3RMVHg/0kFNaV9ASi5BSVjUr3EKixO2lbq4zJTQbaA9n4f xLX8yk6yHG4obTM+wF6/uPofTxzwzS7eM3D0LUlhDUYUMGPPDul883EHVNdmaROv0o1izlJ+cMO issYhbRouB0sC8MXPHCANATo2OWKW0tlLThXH4Rrju4kekrNSG X-Received: by 2002:a05:622a:118d:b0:52c:dde9:5cd5 with SMTP id d75a77b69052e-52d585e7a53mr29953211cf.21.1786456766228; Tue, 11 Aug 2026 06:59:26 -0700 (PDT) Received: from ziepe.ca ([142.166.156.215]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-52d57bd2bd5sm11528161cf.17.2026.08.11.06.59.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 11 Aug 2026 06:59:25 -0700 (PDT) Received: from jgg by wakko with local (Exim 4.97) (envelope-from ) id 1wtn0m-00000002Une-3ZoM; Tue, 11 Aug 2026 10:59:24 -0300 Date: Tue, 11 Aug 2026 10:59:24 -0300 From: Jason Gunthorpe To: "Tian, Kevin" Cc: Alex Williamson , Samiullah Khawaja , "bhelgaas@google.com" , Leon Romanovsky , "dmatlack@google.com" , "kvm@vger.kernel.org" , "linux-kernel@vger.kernel.org" Subject: Re: [RFC PATCH 1/1] vfio/pci: Disable sriov on PF device close Message-ID: <20260811135924.GD544626@ziepe.ca> References: <20260805003355.728299-1-skhawaja@google.com> <20260805003355.728299-2-skhawaja@google.com> <20260805090323.01b1a36f@shazbot.org> <20260806194739.GH28508@ziepe.ca> <20260810093223.50dbc8d0@shazbot.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: On Tue, Aug 11, 2026 at 09:52:37AM +0000, Tian, Kevin wrote: > Before closing the open on reset, does it make sense to first fit it into > the coming trust infrastructure [1]? e.g. initially set to TRUST_NONE > for any VF with a PF owned by vfio-pci, preventing any bind to > in-kernel VF drivers. Then opt-in is allowed to promote the trust of > such VFs to TRUST_ADVERSARY, allowing driver binding but also put > it in precaution with IOMMU protection. So a malicious userspace > PF driver cannot indirectly affect VFs to do dma-based attack. > > somehow VFs in this scenario feel akin to Thunderbolt devices... That's certainly a novel idea that could make sense for drivers that support the trust level Jason