iommu/dart: Require DMA or unmanaged domain for locked DARTs

Signed-off-by: Alyssa Rosenzweig <alyssa@rosenzweig.io>

Author: alyssarosenzweig

drivers/iommu/apple-dart.c

@@ -658,6 +658,9 @@ static int apple_dart_attach_dev(struct iommu_domain *domain,
 		return -EINVAL;
 	if (!dart0->supports_bypass && domain->type == IOMMU_DOMAIN_IDENTITY)
 		return -EINVAL;
+	if (dart0->locked && domain->type != IOMMU_DOMAIN_DMA &&
+	    domain->type != IOMMU_DOMAIN_UNMANAGED)
+		return -EINVAL;
 
 	ret = apple_dart_finalize_domain(domain, cfg);
 	if (ret)