Re: [PATCH v4 1/3] PCI: Allow ATS to be always on for CXL.cache capable devices

[Yi Liu]

On 5/21/26 21:05, Jason Gunthorpe wrote:
> On Thu, May 21, 2026 at 03:31:46PM +0800, Yi Liu wrote:
>
> > Does this hardware behavior satisfy the security expectation you have in
> > mind? Or do you still require that both the DTE bit and the PCI ATS
> > capability be explicitly disabled when a blocking domain is in effect?
>
> If the HW rejects translated TLPs then you should be clearing the ATS
> enable bit in the device config space prior to rejecting them
>
> But it does seem secure enough as-is.

got it. thanks for the thoughts.