x86: don't allow Dom0 (direct) access to port F0

This controls the driving of IGNNE# (if such emulation is enabled in
hardware), and hence would need proper handling in the hypervisor to be
safe to use by Dom0 (and fully emulating for PVH/HVM DomU-s).

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Roger Pau Monné <roger.pau@citrix.com>
This commit is contained in:
Jan Beulich committed 2023-11-02 10:45:39 +01:00
1 parent 306e3dc919
commit 86266162fc
1 file changed
+3
+3
View File
@@ -492,6 +492,9 @@ int __init dom0_setup_permissions(struct domain *d)
/* INIT# and alternative A20M# control. */
rc |= ioports_deny_access(d, 0x92, 0x92);
/* IGNNE# control. */
rc |= ioports_deny_access(d, 0xF0, 0xF0);
/* ACPI PM Timer. */
if ( pmtmr_ioport )
rc |= ioports_deny_access(d, pmtmr_ioport, pmtmr_ioport + 3);
Reference in new issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.