Re: [PATCH v3 2/5] iommu/amd: Fix DTE clearing and rename iommu_ignore_device()

[Jason Gunthorpe]

On Fri, Aug 28, 2026 at 10:46:48AM +0530, Vasant Hegde wrote:
> > Having the driver boot up with all DTEs programmed to identity (eg
> > 0'd) and then try to fix them to blocking after the iommu probes
> > devices is security backwards.
> 
> During boot, it only sets dte.v bit.

First it clears it to fully 0, what does 0 do in HW?

It doesn't make sense that you'd pass over the DTEs after
probing if the original 0'd DTE was actually blocking?

Jason