iommu/arm-smmu-v3: Prevent any devices access to memory without registration

Browse source

Stream bypass is a potential security hole since a malicious device can be
hotplugged in without matching any drivers, yet be granted the ability to
access all of physical memory.

Now that we attach devices to domains by default, we can toggle the
disable_bypass default to "on", preventing DMA from unknown devices.

Signed-off-by: Zhen Lei <thunder.leizhen@huawei.com>
Signed-off-by: Will Deacon <will.deacon@arm.com>

...

This commit is contained in:

Zhen Lei 2018-07-12 17:28:43 +08:00 • committed by Will Deacon

parent 0d535967ac

commit a71792dee2

1 changed files with 1 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/iommu/arm-smmu-v3.c

View file