From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 51556A04A5; Thu, 18 Jun 2020 15:51:06 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 9997D1BF44; Thu, 18 Jun 2020 15:51:05 +0200 (CEST) Received: from mga06.intel.com (mga06.intel.com [134.134.136.31]) by dpdk.org (Postfix) with ESMTP id C83531BED6 for ; Thu, 18 Jun 2020 15:51:03 +0200 (CEST) IronPort-SDR: p6/kyQa/ReSRezQ8D8+cUd3mlDVLOEfmphFzbj13D4Nce0CE8wsn11PAsLs6QrMRSQvpB3Rj/s Dx4VkG2V+oQw== X-IronPort-AV: E=McAfee;i="6000,8403,9655"; a="204065774" X-IronPort-AV: E=Sophos;i="5.73,526,1583222400"; d="scan'208";a="204065774" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga006.fm.intel.com ([10.253.24.20]) by orsmga104.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 18 Jun 2020 06:51:02 -0700 IronPort-SDR: f7AoGGEsXSUN65HnCDzbbN8G7rHPOS9z2rhJcJI7kAxaycJTus28y94cva6LIe+WJAWBJmGjUb J8RPHsrASVTg== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.73,526,1583222400"; d="scan'208";a="477200679" Received: from silpixa00399126.ir.intel.com ([10.237.222.84]) by fmsmga006.fm.intel.com with ESMTP; 18 Jun 2020 06:51:00 -0700 From: Bruce Richardson To: dev@dpdk.org Cc: thomas@monjalon.net, david.marchand@redhat.com, Bruce Richardson Date: Thu, 18 Jun 2020 14:50:45 +0100 Message-Id: <20200618135049.489773-1-bruce.richardson@intel.com> X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: [dpdk-dev] [PATCH 0/4] improve runtime loading of shared drivers X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" This set includes a number of small improvements for handling the loading of drivers at runtime using the EAL -d flag. It limits the loading of files to only those files which end in .so, which means that one can pass in the whole "drivers/" subfolder from a meson build and not get an error when DPDK trys to load a .a file. It also puts in some basic permission checking to ensure that no drivers are loaded from a world-writable location on the filesystem, which would be a potential security hole on a mis-configured system. Bruce Richardson (4): eal: remove unnecessary null-termination eal: only load shared libs from driver plugin directory eal: don't load drivers from insecure paths eal: cache last directory permissions checked lib/librte_eal/common/eal_common_options.c | 91 ++++++++++++++++++++-- 1 file changed, 83 insertions(+), 8 deletions(-) -- 2.25.1