[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 09/28] hw/net: mark e1000, e1000e, IGB, rtl8139 & sPAPR VLAN as secure
- To: Daniel P. Berrangé <berrange@xxxxxxxxxx>
- From: Peter Maydell <peter.maydell@xxxxxxxxxx>
- Date: Fri, 30 Oct 2026 11:12:55 +0000
- Arc-authentication-results: i=1; mx.google.com; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=5LUWZT5k5KvOS94ligsCtD+U9+DDcG+IL6eyG0y0saE=; fh=3EgVbjOIb5K9tD+0KroAY8Fz8mPHYGh8aQONqXayqLk=; b=gQOuOxDfrcvzetgU2Q6rq4EBDYFfzGB9I0SiGm4a4GFmXQAd4IQJwpv7tTxbXCjAr5 W9/ANVBL0q37+bGlAFCrB7Vh04ps3jmpu+1pm6GCYL1lSBfFrfN+dscXSB30U19E8RdP pzommA7XKCK4dlPQiItL3Wu0Xfen+SMOpOoI4ikRN6QfAZo5+hiYDhWjPMJdp7lAnMCD 4iaaF72iUtGN2Op2m+uHdQ6hZB4sOZI4GKu6W892K6nTeEsOJWg4J4ZWkDtuibLqcyd0 +WZvCTlWlKdsiA6y79rmVksv83LfFq3xhEbwElQH6YdERsVSGAElqWKWfdrvGWJXLnjK G0wQ==; darn=lists.xenproject.org
- Arc-seal: i=1; a=rsa-sha256; t=1793358788; cv=none; d=google.com; s=arc-20260327; b=Na1GaoRi1eGZrn3g5vqFilW/4j874AQ3hj5iXQTk4gnLtpTroytsDyXxwvbrnpGZ4I zyQ2bqt3Ppec5wyz6jfI8qT2EzH/hiIXamaxam+Z2FS7tbDy8KgO7gPVxswyQAblJycY 7k9DWOZt3rQlzF1LcA4uDUqNsrkQxb8wurEMhNSz1Ry+wqxjIQ4Bf+aHf5BAamlQq9DL Mt+N2717Zon0w5/HIUApW28lHYkiDqpchlFkmyRNhr2qOM/mrbnpoy+oJFRvZyXeKJAE 5IeKL2FgCcG6BfKISx32M9lOoRzfZ2ZFIptJWZWKpqe/4evYkz6rC1m12Sammg9ayW7Q z1Cw==
- Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=google header.d=linaro.org header.i="@linaro.org" header.h="Content-Transfer-Encoding:Content-Type:Cc:To:Subject:Message-ID:Date:From:In-Reply-To:References:MIME-Version"
- Cc: qemu-devel@xxxxxxxxxx, xen-devel@xxxxxxxxxxxxxxxxxxxx, qemu-riscv@xxxxxxxxxx, qemu-ppc@xxxxxxxxxx, qemu-block@xxxxxxxxxx, qemu-s390x@xxxxxxxxxx, qemu-arm@xxxxxxxxxx
- Delivery-date: Fri, 30 Oct 2026 11:13:16 +0000
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
On Fri, 11 Sept 2026 at 15:42, Daniel P. Berrangé <berrange@xxxxxxxxxx> wrote:
>
> Historically most NICs are only interesting for non-virtualization
> use cases and have not been written with malicious guests in mind.
>
> As a general rule either virtio-net or xen-net should be used in
> all virtualized guests requiring a security boundary.
>
> There are a handful of exceptions resulting from historical usage
> in the x86 world, to support virtualized guests lacking virtio
> support.
>
> Thus the rtl8139, e1000, e1000e & IGB NICs are declared to provide
> a security boundary.
You've said in several bugs (e.g.
https://gitlab.com/qemu-project/qemu/-/work_items/3872 )
that igb wasn't covered by the virtualization use case.
I don't care either way, but I wanted to check since I've been
marking igb bugs as non-confidential when triaging on the
basis of that...
thanks
-- PMM
|
