From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wi0-f170.google.com (mail-wi0-f170.google.com [209.85.212.170]) by dpdk.org (Postfix) with ESMTP id 8736F5921 for ; Tue, 6 Oct 2015 10:23:14 +0200 (CEST) Received: by wicgb1 with SMTP id gb1so153700238wic.1 for ; Tue, 06 Oct 2015 01:23:14 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:cc:from:message-id:date :user-agent:mime-version:in-reply-to:content-type :content-transfer-encoding; bh=xU8W8DcPiiscGzWDNnrVNrKEU/lTTqFgbGguGgB3ri0=; b=ZEbKuUmXGhCoOnnJfcp3OIFNN3uVDyz64ooN84I5n/tvKbtF6nJU94qVCduBldsbI2 tcfe022Hwp0hItPCzZFU4Zx6RtZ1eKdXI2ED0J/wKvZKfdjDR4JxVPi0XrYnhvvcOp9X OEwdEBpeikcJYQnQiBi46qhdYrlfQ4D4RPb8Nj8HaKyMVmZOGx7apCiyWZibC24bNpTB pbyO3Z2svTvDiESDWW89oML4fD8iwCZ3zmAV1HD+SjKJZTM97WkAfKH+QN1b5wOEzOk4 Znymb13hQLvozujLmkOOCeKyq1xMJ3UGNtQxDxvqr6wLF4sAr8o0fKsB+MhmTCY49w2f 0d4A== X-Gm-Message-State: ALoCoQly8rd9kBW/je018RKXEm9H4wlTMNDrCOZHRTnJb0QMnx78sc2VgLX5K6L92sZ8Y+a9WQOB X-Received: by 10.180.198.48 with SMTP id iz16mr17040212wic.63.1444119794265; Tue, 06 Oct 2015 01:23:14 -0700 (PDT) Received: from [10.0.0.165] ([37.142.229.250]) by smtp.googlemail.com with ESMTPSA id 12sm368602wjw.15.2015.10.06.01.23.12 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 06 Oct 2015 01:23:13 -0700 (PDT) To: "Michael S. Tsirkin" References: <1443652138-31782-1-git-send-email-stephen@networkplumber.org> <1443652138-31782-3-git-send-email-stephen@networkplumber.org> <20151001104505-mutt-send-email-mst@redhat.com> <20151005215455.GA7608@redhat.com> <20151006013000-mutt-send-email-mst@redhat.com> From: Vlad Zolotarov Message-ID: <561384EF.8020100@cloudius-systems.com> Date: Tue, 6 Oct 2015 11:23:11 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.1.0 MIME-Version: 1.0 In-Reply-To: <20151006013000-mutt-send-email-mst@redhat.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Cc: dev@dpdk.org, hjk@hansjkoch.de, gregkh@linux-foundation.org, linux-kernel@vger.kernel.org Subject: Re: [dpdk-dev] [PATCH 2/2] uio: new driver to support PCI MSI-X X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: patches and discussions about DPDK List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 08:23:14 -0000 On 10/06/15 01:49, Michael S. Tsirkin wrote: > On Tue, Oct 06, 2015 at 01:09:55AM +0300, Vladislav Zolotarov wrote: >> How about instead of trying to invent the wheel just go and attack the problem >> directly just like i've proposed already a few times in the last days: instead >> of limiting the UIO limit the users that are allowed to use UIO to privileged >> users only (e.g. root). This would solve all clearly unresolvable issues u are >> raising here all together, wouldn't it? > No - root or no root, if the user can modify the addresses in the MSI-X > table and make the chip corrupt random memory, this is IMHO a non-starter. Michael, how this or any other related patch is related to the problem u r describing? The above ability is there for years and if memory serves me well it was u who wrote uio_pci_generic with this "security flaw". ;) This patch in general only adds the ability to receive notifications per MSI-X interrupt and it has nothing to do with the ability to reprogram the MSI-X related registers from the user space which was always there. > > And tainting kernel is not a solution - your patch adds a pile of > code that either goes completely unused or taints the kernel. > Not just that - it's a dedicated userspace API that either > goes completely unused or taints the kernel. > >>> -- >>> MST