"External-facing" devices are internal devices that expose PCIe hierarchies such as Thunderbolt outside the platform [1]. Previously these internal devices were marked as "untrusted" the same as devices downstream from them. Use the ACPI or DT information to identify external-facing devices, but only mark the devices *downstream* from them as "untrusted" [2]. The external-facing device itself is no longer marked as untrusted. [1] https://docs.microsoft.com/en-us/windows-hardware/drivers/pci/dsd-for-pcie-root-ports#identifying-externally-exposed-pcie-root-ports [2] https://lore.kernel.org/linux-pci/20200610230906.GA1528594@bjorn-Precision-5520/ Link: https://lore.kernel.org/r/20200707224604.3737893-3-rajatja@google.com Signed-off-by: Rajat Jain <rajatja@google.com> Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
Showing the changes to include/linux (1 of 5 files). Show all
Unified · Split
| @@ -432,6 +432,12 @@ struct pci_dev { · 431 unmodified lines | ||
| 432 | 432 | * mappings to make sure they cannot access arbitrary memory. |
| 433 | 433 | */ |
| 434 | 434 | unsigned int untrusted:1; |
| 435 | + /* | |
| 436 | + * Info from the platform, e.g., ACPI or device tree, may mark a | |
| 437 | + * device as "external-facing". An external-facing device is | |
| 438 | + * itself internal but devices downstream from it are external. | |
| 439 | + */ | |
| 440 | + unsigned int external_facing:1; | |
| 435 | 441 | unsigned int broken_intx_masking:1; /* INTx masking can't be used */ |
| 436 | 442 | unsigned int io_window_1k:1; /* Intel bridge 1K I/O windows */ |
| 437 | 443 | unsigned int irq_managed:1; |