Skip to content
This repository has been archived by the owner on Sep 25, 2024. It is now read-only.

[Hardening aspect] Overall PCI subsystem hardening #147

Open
ereshetova opened this issue Mar 13, 2024 · 0 comments
Open

[Hardening aspect] Overall PCI subsystem hardening #147

ereshetova opened this issue Mar 13, 2024 · 0 comments

Comments

@ereshetova
Copy link
Contributor

Problem

The core PCI subsystem in a CoCo guest performs a lot of activity (mainly consuming data from host-controlled pci config space) where it can receive malicious input from untrusted host. In order to minimize the risk, we initially developed patches in that disable a lot of PCI functionality that is not needed in CoCo guest (early pci, pci quirks, etc). However, this is not a proper approach and instead we need to find a way to hardened the needed areas.
This potentially means creating solution to establish a trust in pci config space configuration that host provides.

@ereshetova ereshetova changed the title [Hardening aspect] Overall PCI config space hardening [Hardening aspect] Overall PCI subsystem hardening Mar 13, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant