Re: [Qemu-devel] [PATCH] mark nic as trusted

[Anthony Liguori]

Gleb Natapov wrote:
> On Wed, Jan 07, 2009 at 10:34:19AM -0600, Anthony Liguori wrote:
>   
> > Gleb Natapov wrote:
> >     
> > > This patch allows to mark specific nic as trusted by adding special
> > > PCI capability. "Trusted" means that it is used for communication
> > > between host and guest and no malicious entity can inject traffic
> > > to the nic.
> > >
> > > Signed-off-by: Gleb Natapov <address@hidden>
> > >   
> > >       
> > What utility does this have?  Does this make Windows happy in some  
> > special way?
> >
> >     
> That is for secure guest<->host communication over network. Guest has to
> know somehow which link host uses for communication. If guest has no way
> to know this, another computer on untrusted network can pretend it is real
> host and "own" a guest. 
>   

So this is for vmchannel?  How do you differentiate a real device with 
that bit set compared to the vmchannel device?

Regards,

Anthony Liguori

> --
>                         Gleb.
>
>
>