Suzuki K Poulose wrote: [..] > > Ok, something like this? and iommufd will call tsm_bind()? > > Remember that there may be other devices, AMBA CHI based devices > being assigned. Not sure if they pretend to be PCI or not. I have been thinking about this especially with the relative ease of creating samples/devsec/ given the existing Linux infrastructure emulating PCI host bridges. Why not require PCI emulation for non-PCI devices? The tipping point is whether the relative maintenance burden of not needing to maintain multi-bus Device Security infrastructure outweighs the complexity of impedance matching those other buses to PCI. Make "PCI" the lingua franca of Device Security.