lkml.org 
[lkml]   [2021]   [Oct]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH v5 12/16] PCI: Add pci_iomap_host_shared(), pci_iomap_host_shared_range()
    On Tue, Oct 12, 2021 at 11:35:04AM -0700, Andi Kleen wrote:
    > > I'd rather see more concerted efforts focused/limited core changes
    > > rather than leaf driver changes until there is a clearer definition of
    > > hardened.
    >
    > A hardened driver is a driver that

    Ah, you do define this, thank you!

    > - Had similar security (not API) oriented review of its IO operations
    > (mainly MMIO access, but also PCI config space) as a non privileged user
    > interface (like a ioctl). That review should be focused on memory safety.

    Where is this review done? Where is is documented? Who is responsible
    for keeping it up to date with every code change to the driver, and to
    the code that the driver calls and the code that calls the driver?

    > - Had some fuzzing on these IO interfaces using to be released tools.

    "some"? What tools? What is the input, and where is that defined? How
    much fuzzing do you claim is "good enough"?

    > Right now it's only three virtio drivers (console, net, block)

    Where was this work done and published? And why only 3?

    > Really it's no different than what we do for every new unprivileged user
    > interface.

    Really? I have seen loads of new drivers from Intel submitted in the
    past months that would fail any of the above things just based on
    obvious code reviews that I end up having to do...

    If you want to start a "hardened driver" effort, there's a lot of real
    work that needs to be done here and documented, and explained why it can
    not just be done for the whole kernel...

    greg k-h

    \
     
     \ /
      Last update: 2021-10-18 14:13    [W:7.533 / U:0.028 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site