Re: [PATCH 17/28] hw/display: mark bochs, cirrus, qxl, VGA, ramfb as secure

[Daniel P. Berrangé <berrange@xxxxxxxxxx>]

On Fri, Oct 02, 2026 at 09:21:01PM +0400, marcandre.lureau@xxxxxxxxxx wrote:
> > Most of the display adapters are emulating old hardware which is not
> > relevant to virtualization use cases.
> > 
> > The exceptions that should be considered secure are Cirrus (PCI, not
> > ISA), Bochs, QXL, RAMFB, VGA (PCI, MMIO, not ISA) and VMWare VGA.
> 
> I don't think we should support all those display devices as security 
> boundaries.

Opps, this bit of the commit message was not quite right, as I did
NOT in fact include VMWare VGA.

The Cirrus & QXL is an area where my downstream wishlist conflicts
with my upstream wishlist, because both were widely used for a long
time in virt scenarios, and they still exist in supported RHEL
versions, even if gone from the latest releases.

> I would shorten the list to: bochs, ramfb, vga, and virtio-gpu*
> (excluding virgl & rutabaga). Anything else has been known to
> have various risks and is much higher complexity..

NB, anything virtio related is handled elsewhere in this series.a



With regards,
Daniel
-- 
|: https://berrange.com       ~~        https://hachyderm.io/@berrange :|
|: https://libvirt.org          ~~          https://entangle-photo.org :|
|: https://pixelfed.art/berrange   ~~    https://fstop138.berrange.com :|