Commit e70594d4 authored by Slawomir Ptak's avatar Slawomir Ptak Committed by Tomasz Zawadzki
Browse files

scripts: Disable DSA and IAA default vfio-pci binding 



The DSA and IAA device IDs have been added to the vfio denylist,
due to an erratum (see INTEL-SA-01084 security advisory).
This patch disables the default behavior of vfio-pci binding
for these devices.

To force the binding, it is possible to use the PCI_ALLOWED variable.

Change-Id: I25be317156f19f400f76961c5928d602043125dc
Signed-off-by: default avatarSlawomir Ptak <slawomir.ptak@intel.com>
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/23196


Reviewed-by: default avatarSebastian Brzezinka <sebastian.brzezinka@intel.com>
Reviewed-by: default avatarTomasz Zawadzki <tomasz.zawadzki@intel.com>
Tested-by: default avatarSPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: default avatarKonrad Sztyber <konrad.sztyber@intel.com>
Community-CI: Mellanox Build Bot
parent 78b2f150

scripts/setup.sh

+8 −0
Original line number Diff line number Diff line
@@ -331,6 +331,14 @@ function collect_devices() { 
				MESSAGE

			fi

		fi

		if [[ -n ${dsa_d["$bdf"]} ]] && [[ $PCI_ALLOWED != *"$bdf"* ]]; then

			pci_dev_echo "$bdf" "Skipping not allowed DSA controller at $bdf"

			in_use=1

		fi

		if [[ -n ${iaa_d["$bdf"]} ]] && [[ $PCI_ALLOWED != *"$bdf"* ]]; then

			pci_dev_echo "$bdf" "Skipping not allowed IAA controller at $bdf"

			in_use=1

		fi

		# Update in-use for each bdf. Default from the map_supported_devices() is 0 == "not used"

		local -n type_ref=${all_devices_type_d["$bdf"]}_d

		type_ref["$bdf"]=$in_use