[openstack-dev] "Evil" Firmware
robertc at robertcollins.net
Fri Jan 17 08:12:19 UTC 2014
> The physical function is the one with the "real" PCI config space, so as
> long as the host controls it then there should be minimal risk from the
> guests since they have limited access via the virtual functions--typically
> mostly just message-passing to the physical function.
As long as its a whitelist of audited message handlers, thats fine. Of
course, if the message handlers haven't been audited, who knows whats
lurking in there.
Robert Collins <rbtcollins at hp.com>
HP Converged Cloud
More information about the OpenStack-dev