From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <users-bounces@dpdk.org>
Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124])
	by inbox.dpdk.org (Postfix) with ESMTP id A4C8AA0093
	for <public@inbox.dpdk.org>; Wed, 31 Aug 2022 18:02:02 +0200 (CEST)
Received: from [217.70.189.124] (localhost [127.0.0.1])
	by mails.dpdk.org (Postfix) with ESMTP id 7560A40F17;
	Wed, 31 Aug 2022 18:02:02 +0200 (CEST)
Received: from mail-lj1-f180.google.com (mail-lj1-f180.google.com
 [209.85.208.180])
 by mails.dpdk.org (Postfix) with ESMTP id DA31A40395
 for <users@dpdk.org>; Wed, 31 Aug 2022 18:02:00 +0200 (CEST)
Received: by mail-lj1-f180.google.com with SMTP id by6so15101278ljb.11
 for <users@dpdk.org>; Wed, 31 Aug 2022 09:02:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
 h=content-transfer-encoding:mime-version:references:in-reply-to
 :message-id:subject:cc:to:from:date:from:to:cc;
 bh=VfYcAYkrqs0MdYE6TwQ4VGouCYRzvW/xNuHRac7eHMI=;
 b=GIgW1jbU/XJdqKj9IGtJIC8joZkVmMYfzorfnFLIi3KAihCp/AyZ2cD5aZbhTQK8pI
 j8VKB/ijpD1cm6QWpTZ5PD+QkkjnazncKfb6HdP+yUteeo4GYC5SN/9ytYhvkrB0jZ9W
 f5nPL0IyYjhG5ftENobjP+TKrHL+Mm0cVNDNk5XHXkaAJnGO7dm2mU65wetK+oEndcFJ
 TBoZ9q9/OOROal6vxespXI58MQgdkhmeCXMwPEWnyLvDWjz00uznndaItGoQORrCKJLo
 GXWm1B7YP6lCovBGnm7xu+5AzNDo1RslbN90/rcmtaeepEg6oWYb4p+n2cSKWJmv4qsT
 Dh/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20210112;
 h=content-transfer-encoding:mime-version:references:in-reply-to
 :message-id:subject:cc:to:from:date:x-gm-message-state:from:to:cc;
 bh=VfYcAYkrqs0MdYE6TwQ4VGouCYRzvW/xNuHRac7eHMI=;
 b=7SjIvxwK2qLbFlhvi5c+3w0LGfPUALdX81DAXv/WFBJVnYnEGyjI2myOGJbF26e1QK
 CKcN587pJOivgKUtLnHl+gzqc+FHKeXKY/pZz7M5To/bhPuVAkLqWrn5N2ETyBs9sXGY
 RluaxfhQrxwmY3wTgThPeVhc5LP909GYkC/RAFEyJgoV0QyFQ6neUG9mo54jDGP5uqrX
 R7xOjVLm7ErhWchTQMk8RcirRDGblGgrWOjnhB27oEcb8rrkt61bqDHdm4bmeIDeD5X3
 hBBsTmTz9TrGdrXUrslazSx6MyJ8YwqLlLnEBZjpzXxsR2z4vignCxem8lpchjlNlgZQ
 5SQg==
X-Gm-Message-State: ACgBeo1ZJ0bvkVczqlqYyMHwTBI8QdgyejiYtz7IzdF0qs7mbHKqh4lx
 Fm93DXVXAwH6kBY9BpG5L5UM/P7siRk=
X-Google-Smtp-Source: AA6agR4UV6pDsV9v4AIpOhwefl/CfB3TXWiELSbqpHfCSA7PepVRssse9ht7wenmPu2rI7g8wTMomw==
X-Received: by 2002:a05:651c:246:b0:267:6ec1:ff61 with SMTP id
 x6-20020a05651c024600b002676ec1ff61mr2556520ljn.87.1661961720224; 
 Wed, 31 Aug 2022 09:02:00 -0700 (PDT)
Received: from sovereign (broadband-37-110-65-23.ip.moscow.rt.ru.
 [37.110.65.23]) by smtp.gmail.com with ESMTPSA id
 be18-20020a05651c171200b0025e41bbf225sm2146547ljb.39.2022.08.31.09.01.58
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Wed, 31 Aug 2022 09:01:59 -0700 (PDT)
Date: Wed, 31 Aug 2022 19:01:58 +0300
From: Dmitry Kozlyuk <dmitry.kozliuk@gmail.com>
To: Boris Ouretskey <borisusun@gmail.com>
Cc: users@dpdk.org
Subject: Re: Issue setting up the DPDK development with non-privileged user
Message-ID: <20220831190158.44dd76de@sovereign>
In-Reply-To: <CAG4AAQ21hn_Ogi0-gfUjXVhtWU19Bk634BT6Ue1bpYZjRXFJjg@mail.gmail.com>
References: <CAG4AAQ21hn_Ogi0-gfUjXVhtWU19Bk634BT6Ue1bpYZjRXFJjg@mail.gmail.com>
X-Mailer: Claws Mail 3.18.0 (GTK+ 2.24.33; x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-BeenThere: users@dpdk.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: DPDK usage discussions <users.dpdk.org>
List-Unsubscribe: <https://mails.dpdk.org/options/users>,
 <mailto:users-request@dpdk.org?subject=unsubscribe>
List-Archive: <http://mails.dpdk.org/archives/users/>
List-Post: <mailto:users@dpdk.org>
List-Help: <mailto:users-request@dpdk.org?subject=help>
List-Subscribe: <https://mails.dpdk.org/listinfo/users>,
 <mailto:users-request@dpdk.org?subject=subscribe>
Errors-To: users-bounces@dpdk.org

Hi Boris,

1. Tests on Ubuntu 20.04 kernel 5.4.0-96-generic
   show that CAP_DAC_OVERRIDE is missing from the list.
   Unfortunately, this capability guards quite a lot.

2. If the process lack privileges,
   it will see /proc/self/pagemap zero-filled.

I assume you understand that using physical addresses
allows to effectively bypass any OS restrictions.

Please tell if CAP_DAC_OVERRIDE helps, I will update the doc.