"External-facing" devices are internal devices that expose PCIe hierarchies such as Thunderbolt outside the platform [1]. Previously these internal devices were marked as "untrusted" the same as devices downstream from them. Use the ACPI or DT information to identify external-facing devices, but only mark the devices *downstream* from them as "untrusted" [2]. The external-facing device itself is no longer marked as untrusted. [1] https://docs.microsoft.com/en-us/windows-hardware/drivers/pci/dsd-for-pcie-root-ports#identifying-externally-exposed-pcie-root-ports [2] https://lore.kernel.org/linux-pci/20200610230906.GA1528594@bjorn-Precision-5520/ Link: https://lore.kernel.org/r/20200707224604.3737893-3-rajatja@google.com Signed-off-by: Rajat Jain <rajatja@google.com> Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
Showing the changes to include/linux (1 of 5 files). Show all
Unified · Split
| @@ -432,6 +432,12 @@ struct pci_dev { · 431 unmodified lines | |||
| 432 | * mappings to make sure they cannot access arbitrary memory. | 432 | * mappings to make sure they cannot access arbitrary memory. |
| 433 | */ | 433 | */ |
| 434 | unsigned int untrusted:1; | 434 | unsigned int untrusted:1; |
| 435 | /* | ||
| 436 | * Info from the platform, e.g., ACPI or device tree, may mark a | ||
| 437 | * device as "external-facing". An external-facing device is | ||
| 438 | * itself internal but devices downstream from it are external. | ||
| 439 | */ | ||
| 440 | unsigned int external_facing:1; | ||
| 435 | unsigned int broken_intx_masking:1; /* INTx masking can't be used */ | 441 | unsigned int broken_intx_masking:1; /* INTx masking can't be used */ |
| 436 | unsigned int io_window_1k:1; /* Intel bridge 1K I/O windows */ | 442 | unsigned int io_window_1k:1; /* Intel bridge 1K I/O windows */ |
| 437 | unsigned int irq_managed:1; | 443 | unsigned int irq_managed:1; |