On Mon, Nov 09 2020 at 12:14, Thomas Gleixner wrote:

On Sun, Nov 08 2020 at 15:58, Ashok Raj wrote:

quoted

On Sun, Nov 08, 2020 at 07:47:24PM +0100, Thomas Gleixner wrote:
But for SIOV devices there is no PASID filtering at the remap level since
interrupt messages don't carry PASID in the TLP.

Why do we need PASID for VMM integrity?

If the device sends a message then the remap unit will see the requester
ID of the device and if the message it sends is not 

That made me look at patch 4/17 which adds DEVMSI support to the
remap code:

+       case X86_IRQ_ALLOC_TYPE_DEV_MSI:
+              irte_prepare_msg(msg, index, sub_handle);
               break;

It does not setup any requester-id filter in IRTE. How is that supposed
to be correct?

Thanks,

        tglx