[dpdk-users] KNI & SIOCSIFFLAGS permission?

[dpdk-users] KNI & SIOCSIFFLAGS permission?

[Lazarenko, Vlad (WorldQuant)]

Howdy,

When using KNI, I'm trying to programmatically enable the port by bringing the interface up by calling ioctl with SIOCGIFFLAGS (thanks Dumitru Caera and Juniper's warp17 for great help getting KNI wrapped in PMD the right way!). However, kernel does not allow me to do this unless I am root or the executable has CAP_NET_ADMIN capability. Warp17 suggests to change user of the executable to root and give it SUI bit. Needless to say that configuring capabilities or running my process as root is a pain in the neck. So the question is how do you guys usually go about this? Also, since we already have access to rte_kni.ko, can we somehow add code there to enable us to bypass this kernel permission check just to make life easier?

Thanks,
Vlad



###################################################################################

The information contained in this communication is confidential, may be

subject to legal privilege, and is intended only for the individual named.

If you are not the named addressee, please notify the sender immediately and

delete this email from your system.  The views expressed in this email are

the views of the sender only.  Outgoing and incoming electronic communications

to this address are electronically archived and subject to review and/or disclosure

to someone other than the recipient.

###################################################################################