On Thu, Jan 25, 2018 at 10:14:28AM -0500, Boris Lukashev wrote: > On Thu, Jan 25, 2018 at 6:59 AM, Igor Stoppa <igor.stoppa@xxxxxxxxxx> wrote: [...] > DMA/physmap access coupled with a knowledge of which virtual mappings > are in the physical space should be enough for an attacker to bypass > the gating mechanism this work imposes. Not trivial, but not > impossible. Since there's no way to prevent that sort of access in > current hardware (especially something like a NIC or GPU working > independently of the CPU altogether) I am not saying this is impossible but this is unlikely they are several mecanisms. First you have IOMMU it has been defaulted to on by OEM for last few years (it use to be enabled only on server for virtualization). Which means that a given device only can access memory that is mapped to it through the IOMMU page table (usualy each device get their own distinct IOMMU page table). Then on device like GPU you have an MMU (no GPU without an MMU for the last 10 years or more). The MMU is under the control of the kernel driver of the GPU and for the open source driver we try hard to make sure it can not be abuse and circumvent by userspace ie we restrict userspace process to only access memory they own. I am not saying that this can not happen but that we are trying our best to avoid it. Cheers, Jérôme -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx";> email@xxxxxxxxx </a>
