Ich wollte mal versuchen, wie es ist in einer virtuellen Maschine zu zocken, aber ohne die Möglichkeit auch nur die #iGPU durchzureichen (Der #Pentium G4560 unterstützt dies leider nicht), wird das wohl nichts. Nicht mal #Steam will richtig starten.

Ist wohl ein Projekt, dass ich etwas zurückstellen muss.

#Proxmox #IOMMU #GPUPassthrough

@dekkzz76 https://en.wikipedia.org/wiki/Principle_of_least_privilege in contrast to having no separation (the wikipedia page on #AmbientAuthority is misleading and terrible).

A malicious driver in the Linux kernel essentially has the keys to the kingdom, there is *nothing* it cannot do if it feels like it.

That's not the case for firmware (insofar as the #IOMMU is working, #DMA isn't broken and other hardware implementation details also aren't).

@dekkzz76 I'd greatly prefer if we could have #FreeFirmware but I'm less worried about the firmware blobs that are ostensibly isolated by the #IOMMU than drivers in the #AmbientAuthority nightmare that is the usual unix-like kernel.

Does #linux put devices like hard drives and GPUs behind #IOMMU to limit their access to main memory for #DMA attacks?

#Thunderspy : l'ensemble des versions #Thunderbolt affecté par 7 vulnérabilités !

https://blog.sosordi.net/2020/05/thunderspy-lensemble-des-versions-thunderbolt-affectees-par-7-vulnerabilites.html

#securite #DMA #IOMMU #materiel #logiciel