iommu/arm-smmu-v3: Prevent any devices access to memory without registration
authorZhen Lei <thunder.leizhen@huawei.com>
Thu, 12 Jul 2018 09:28:43 +0000 (17:28 +0800)
committerWill Deacon <will.deacon@arm.com>
Fri, 27 Jul 2018 10:12:33 +0000 (11:12 +0100)
commita71792dee2a33d2e935d4b67dd63924f5ceb203d
treeda4d8a9ad7db123d88ddda6f9bd7ded1bb102615
parent0d535967ac658966c6ade8f82b5799092f7d5441
iommu/arm-smmu-v3: Prevent any devices access to memory without registration

Stream bypass is a potential security hole since a malicious device can be
hotplugged in without matching any drivers, yet be granted the ability to
access all of physical memory.

Now that we attach devices to domains by default, we can toggle the
disable_bypass default to "on", preventing DMA from unknown devices.

Signed-off-by: Zhen Lei <thunder.leizhen@huawei.com>
Signed-off-by: Will Deacon <will.deacon@arm.com>
drivers/iommu/arm-smmu-v3.c