{"id":2226578,"url":"http://patchwork.ozlabs.org/api/patches/2226578/?format=json","web_url":"http://patchwork.ozlabs.org/project/linuxppc-dev/patch/20260422161407.118748-12-kwilczynski@kernel.org/","project":{"id":2,"url":"http://patchwork.ozlabs.org/api/projects/2/?format=json","name":"Linux PPC development","link_name":"linuxppc-dev","list_id":"linuxppc-dev.lists.ozlabs.org","list_email":"linuxppc-dev@lists.ozlabs.org","web_url":"https://github.com/linuxppc/wiki/wiki","scm_url":"https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git","webscm_url":"https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/","list_archive_url":"https://lore.kernel.org/linuxppc-dev/","list_archive_url_format":"https://lore.kernel.org/linuxppc-dev/{}/","commit_url_format":"https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?id={}"},"msgid":"<20260422161407.118748-12-kwilczynski@kernel.org>","list_archive_url":"https://lore.kernel.org/linuxppc-dev/20260422161407.118748-12-kwilczynski@kernel.org/","date":"2026-04-22T16:13:54","name":"[v6,11/24] alpha/PCI: Add security_locked_down() check to pci_mmap_resource()","commit_ref":null,"pull_url":null,"state":"handled-elsewhere","archived":false,"hash":"85e255e201157199e03ea2f72ba06095bcdd518e","submitter":{"id":86709,"url":"http://patchwork.ozlabs.org/api/people/86709/?format=json","name":"Krzysztof Wilczyński","email":"kwilczynski@kernel.org"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/linuxppc-dev/patch/20260422161407.118748-12-kwilczynski@kernel.org/mbox/","series":[{"id":501040,"url":"http://patchwork.ozlabs.org/api/series/501040/?format=json","web_url":"http://patchwork.ozlabs.org/project/linuxppc-dev/list/?series=501040","date":"2026-04-22T16:13:43","name":"[v6,01/24] PCI/sysfs: Use PCI resource accessor macros","version":6,"mbox":"http://patchwork.ozlabs.org/series/501040/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2226578/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2226578/checks/","tags":{},"related":[],"headers":{"Return-Path":"\n <linuxppc-dev+bounces-19959-incoming=patchwork.ozlabs.org@lists.ozlabs.org>","X-Original-To":["incoming@patchwork.ozlabs.org","linuxppc-dev@lists.ozlabs.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=kernel.org header.i=@kernel.org header.a=rsa-sha256\n header.s=k20201202 header.b=GhKrrLTT;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ozlabs.org\n (client-ip=2404:9400:21b9:f100::1; helo=lists.ozlabs.org;\n envelope-from=linuxppc-dev+bounces-19959-incoming=patchwork.ozlabs.org@lists.ozlabs.org;\n receiver=patchwork.ozlabs.org)","lists.ozlabs.org;\n arc=none smtp.remote-ip=\"2600:3c04:e001:324:0:1991:8:25\"","lists.ozlabs.org;\n dmarc=pass (p=quarantine dis=none) header.from=kernel.org","lists.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=kernel.org header.i=@kernel.org header.a=rsa-sha256\n header.s=k20201202 header.b=GhKrrLTT;\n\tdkim-atps=neutral","lists.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=kernel.org\n (client-ip=2600:3c04:e001:324:0:1991:8:25; helo=tor.source.kernel.org;\n envelope-from=kwilczynski@kernel.org; receiver=lists.ozlabs.org)"],"Received":["from lists.ozlabs.org (lists.ozlabs.org\n [IPv6:2404:9400:21b9:f100::1])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g148K68K5z1y2d\n\tfor <incoming@patchwork.ozlabs.org>; Thu, 23 Apr 2026 02:15:45 +1000 (AEST)","from boromir.ozlabs.org (localhost [127.0.0.1])\n\tby lists.ozlabs.org (Postfix) with ESMTP id 4g147L0m1Hz3bYG;\n\tThu, 23 Apr 2026 02:14:54 +1000 (AEST)","from tor.source.kernel.org (tor.source.kernel.org\n [IPv6:2600:3c04:e001:324:0:1991:8:25])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby lists.ozlabs.org (Postfix) with ESMTPS id 4g147J41rqz2yr9\n\tfor <linuxppc-dev@lists.ozlabs.org>; Thu, 23 Apr 2026 02:14:52 +1000 (AEST)","from smtp.kernel.org (transwarp.subspace.kernel.org [100.75.92.58])\n\tby tor.source.kernel.org (Postfix) with ESMTP id 7A3E36012A;\n\tWed, 22 Apr 2026 16:14:50 +0000 (UTC)","by smtp.kernel.org (Postfix) with ESMTPSA id 10EDAC2BCAF;\n\tWed, 22 Apr 2026 16:14:46 +0000 (UTC)"],"ARC-Seal":"i=1; a=rsa-sha256; d=lists.ozlabs.org; s=201707; t=1776874493;\n\tcv=none;\n b=DTyjQjPfony2Mis14Vyg0oXQvIdGqqhI1t04LTtMWvng3TNZa086nVWcziHr6xri0a48EILXlWiz5tAzbhvJBS3pJFsGSrpNaXsuAsUYFQrjUODCFUEOv9vtSKMxQctLVtW0UMCVcTTdYyj/oIgnfrezy0liyX//nAUsjLeqNPuwgn4MUx7ouaYilqP6WTfwFoRlHB0FsiWo+wzkO+uxkloS4legHg0jUfa0Goh4BadqrxwAIhOrOVghP3WgQDOupNnergZRtCs7rdClmmowJLO+pdgcidIHLQjXP7cf8z79zZzs6VPTeDVjNa4613U2Zf2tt7ZNFqJ4ft8s9goL8A==","ARC-Message-Signature":"i=1; a=rsa-sha256; d=lists.ozlabs.org; s=201707;\n\tt=1776874493; c=relaxed/relaxed;\n\tbh=8hynRy6TmK58aWbYnFQGqModmwP+3PNQbC7o/HJkS9k=;\n\th=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References:\n\t MIME-Version:Content-Type;\n b=e8Fe10hHqKgW1Q/aYIxifUtKzixZiaxJoj2ARrt03x3iY6MfxlUtbHGA5aguA0QIvUidvSUeA+HBZkSvJpCnsIx+cjPhh0I5K8idl9AiL1etHRlzH4Cp5b0VJhmkhEN0USuiuF7OMXD2ZQeAAhHLjVIq/pLphzxkQFgoGRi7XYCAusiNg+NwofvOUCFRdzZNEH93+KHPuNgNLJ0NacALTYcozBANfwxvq97QEf3jN7AUbfArmwIv3/Fej/+rfn96jMU7ZEhhCK57PDi5jaIw86lBRUntqhNBJcviyjEAQFEACRpfBdrfhlmJ5xUPp5K+WU0+C/aguya2Xk0O8N98pg==","ARC-Authentication-Results":"i=1; lists.ozlabs.org;\n dmarc=pass (p=quarantine dis=none) header.from=kernel.org;\n dkim=pass (2048-bit key;\n unprotected) header.d=kernel.org header.i=@kernel.org header.a=rsa-sha256\n header.s=k20201202 header.b=GhKrrLTT; dkim-atps=neutral;\n spf=pass (client-ip=2600:3c04:e001:324:0:1991:8:25;\n helo=tor.source.kernel.org; envelope-from=kwilczynski@kernel.org;\n receiver=lists.ozlabs.org) smtp.mailfrom=kernel.org","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org;\n\ts=k20201202; t=1776874490;\n\tbh=G9J13TW73xutdYdnp+hqNnYui77KfP+Wzlkm8iI4IbM=;\n\th=From:To:Cc:Subject:Date:In-Reply-To:References:From;\n\tb=GhKrrLTTQzUJd8oryNF9cvyIUBhElsLD4y/1HGPKupzEibiJ5WObIQimuKDXqgUdE\n\t hiZE/Nmbt9b5ligXi1K0HzJlcrclXWh2v9xIYCvtR1Qc2G0hvky1RG06yjEN/Kd2VA\n\t uuQOV2f7fNJE9ysHJyOsYSejRC5SdRa6BNOew0+8iodDX52QTTSrtQZ7wYSfhU5gpU\n\t 7owy4FcH4+VGzkbBVsLMkLaCPnH1vvxf4fqzZaueYwS2FTYFJ85C3bJe/b3N+AYC0h\n\t aD9ImRlkz6ojbok6thc3YuoguRrChzW/5HrJX9wGEy+XGuJ+QHSjBhahQ9mzV3A2Em\n\t 5+S4vv/DvRv4g==","From":"=?utf-8?q?Krzysztof_Wilczy=C5=84ski?= <kwilczynski@kernel.org>","To":"Bjorn Helgaas <bhelgaas@google.com>","Cc":"Bjorn Helgaas <helgaas@kernel.org>,\n Manivannan Sadhasivam <mani@kernel.org>,\n Lorenzo Pieralisi <lpieralisi@kernel.org>,\n Magnus Lindholm <linmag7@gmail.com>, Matt Turner <mattst88@gmail.com>,\n Richard Henderson <richard.henderson@linaro.org>,\n Christophe Leroy <chleroy@kernel.org>,\n Madhavan Srinivasan <maddy@linux.ibm.com>,\n Michael Ellerman <mpe@ellerman.id.au>, Nicholas Piggin <npiggin@gmail.com>,\n Dexuan Cui <decui@microsoft.com>,\n =?utf-8?q?Krzysztof_Ha=C5=82asa?= <khalasa@piap.pl>,\n Lukas Wunner <lukas@wunner.de>, \"Oliver O'Halloran\" <oohall@gmail.com>,\n Saurabh Singh Sengar <ssengar@microsoft.com>,\n Shuan He <heshuan@bytedance.com>, Srivatsa Bhat <srivatsabhat@microsoft.com>,\n\t=?utf-8?q?Ilpo_J=C3=A4rvinen?= <ilpo.jarvinen@linux.intel.com>,\n linux-pci@vger.kernel.org, linux-alpha@vger.kernel.org,\n linuxppc-dev@lists.ozlabs.org","Subject":"[PATCH v6 11/24] alpha/PCI: Add security_locked_down() check to\n pci_mmap_resource()","Date":"Wed, 22 Apr 2026 16:13:54 +0000","Message-ID":"<20260422161407.118748-12-kwilczynski@kernel.org>","X-Mailer":"git-send-email 2.54.0","In-Reply-To":"<20260422161407.118748-1-kwilczynski@kernel.org>","References":"<20260422161407.118748-1-kwilczynski@kernel.org>","X-Mailing-List":"linuxppc-dev@lists.ozlabs.org","List-Id":"<linuxppc-dev.lists.ozlabs.org>","List-Help":"<mailto:linuxppc-dev+help@lists.ozlabs.org>","List-Owner":"<mailto:linuxppc-dev+owner@lists.ozlabs.org>","List-Post":"<mailto:linuxppc-dev@lists.ozlabs.org>","List-Archive":"<https://lore.kernel.org/linuxppc-dev/>,\n  <https://lists.ozlabs.org/pipermail/linuxppc-dev/>","List-Subscribe":"<mailto:linuxppc-dev+subscribe@lists.ozlabs.org>,\n  <mailto:linuxppc-dev+subscribe-digest@lists.ozlabs.org>,\n  <mailto:linuxppc-dev+subscribe-nomail@lists.ozlabs.org>","List-Unsubscribe":"<mailto:linuxppc-dev+unsubscribe@lists.ozlabs.org>","Precedence":"list","MIME-Version":"1.0","Content-Type":"text/plain; charset=UTF-8","Content-Transfer-Encoding":"8bit","X-Spam-Status":"No, score=-0.2 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED,\n\tDKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS\n\tautolearn=disabled version=4.0.1 OzLabs 8","X-Spam-Checker-Version":"SpamAssassin 4.0.1 (2024-03-25) on lists.ozlabs.org"},"content":"Currently, Alpha's pci_mmap_resource() does not check\nsecurity_locked_down(LOCKDOWN_PCI_ACCESS) before allowing\nuserspace to mmap PCI BARs.\n\nThe generic version has had this check since commit eb627e17727e\n(\"PCI: Lock down BAR access when the kernel is locked down\") to\nprevent DMA attacks when the kernel is locked down.\n\nAdd the same check to Alpha's pci_mmap_resource().\n\nFixes: eb627e17727e (\"PCI: Lock down BAR access when the kernel is locked down\")\nTested-by: Magnus Lindholm <linmag7@gmail.com>\nReviewed-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>\nAcked-by: Magnus Lindholm <linmag7@gmail.com>\nSigned-off-by: Krzysztof Wilczyński <kwilczynski@kernel.org>\n---\n arch/alpha/kernel/pci-sysfs.c | 7 ++++++-\n 1 file changed, 6 insertions(+), 1 deletion(-)","diff":"diff --git a/arch/alpha/kernel/pci-sysfs.c b/arch/alpha/kernel/pci-sysfs.c\nindex 3048758304b5..2324720c3e83 100644\n--- a/arch/alpha/kernel/pci-sysfs.c\n+++ b/arch/alpha/kernel/pci-sysfs.c\n@@ -11,6 +11,7 @@\n  */\n \n #include <linux/sched.h>\n+#include <linux/security.h>\n #include <linux/stat.h>\n #include <linux/slab.h>\n #include <linux/pci.h>\n@@ -71,7 +72,11 @@ static int pci_mmap_resource(struct kobject *kobj,\n \tstruct resource *res = attr->private;\n \tenum pci_mmap_state mmap_type;\n \tstruct pci_bus_region bar;\n-\tint i;\n+\tint i, ret;\n+\n+\tret = security_locked_down(LOCKDOWN_PCI_ACCESS);\n+\tif (ret)\n+\t\treturn ret;\n \n \tfor (i = 0; i < PCI_STD_NUM_BARS; i++)\n \t\tif (res == &pdev->resource[i])\n","prefixes":["v6","11/24"]}