OK, here's chapter 3 in the story of "but I really just want to remove iommu_present()", which is the second go at this approach on the Thunderbolt end, but now improving the IOMMU end as well since the subtlety of why that still matters has been clarified. Previous thread here: https://lore.kernel.org/linux-iommu/f887686a-e7e4-f031-97e8-dbeb1c088095@xxxxxxx/T/ Thanks, Robin. Robin Murphy (2): iommu: Add capability for pre-boot DMA protection thunderbolt: Make iommu_dma_protection more accurate drivers/iommu/intel/iommu.c | 2 ++ drivers/thunderbolt/domain.c | 12 +++-------- drivers/thunderbolt/nhi.c | 41 ++++++++++++++++++++++++++++++++++++ include/linux/iommu.h | 7 ++++++ include/linux/thunderbolt.h | 2 ++ 5 files changed, 55 insertions(+), 9 deletions(-) -- 2.28.0.dirty