I'm running Qubes-OS 4.1.0
While looking through the /var/log/xen/console/hypervisor.log
I stumbled over the following messages:
...
(XEN) [VT-D] It's risky to assign 0000:00:14.0 with shared RMRR at c9f42000 for Dom40.
(XEN) [VT-D] It's risky to assign 0000:00:1d.0 with shared RMRR at c9f42000 for Dom40.
In my case those PCI devices in question are USB controllers. They are handled
by a VM called sys-usb
in order to protect the bare metal carrier system from the
risks of any malicious USB device being plugged in.
My questions are: What is the meaning of the acronym RMRR in this context? And what are the risks involved with this so called "shared RMRR"?
sys-usb
. This domain is considered less trust worthy in Qubes-OS because a malicious USB device might sometime somehow intrude und conquer this particular domain. more info: cvedetails.com/cve/CVE-2021-28702 and ...