netdev - RE: [Intel-wired-lan] [PATCH iwl-next v2] ice: add drop rule matching on not active lport

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 11 Sep 2023 04:59:38 +0000
From: "Buvaneswaran, Sujai" <sujai.buvaneswaran@...el.com>
To: Michal Swiatkowski <michal.swiatkowski@...ux.intel.com>,
	"intel-wired-lan@...ts.osuosl.org" <intel-wired-lan@...ts.osuosl.org>
CC: "Szycik, Marcin" <marcin.szycik@...el.com>, "netdev@...r.kernel.org"
	<netdev@...r.kernel.org>, Simon Horman <horms@...nel.org>
Subject: RE: [Intel-wired-lan] [PATCH iwl-next v2] ice: add drop rule matching
 on not active lport

> -----Original Message-----
> From: Intel-wired-lan <intel-wired-lan-bounces@...osl.org> On Behalf Of
> Michal Swiatkowski
> Sent: Friday, August 25, 2023 12:43 PM
> To: intel-wired-lan@...ts.osuosl.org
> Cc: Szycik, Marcin <marcin.szycik@...el.com>; netdev@...r.kernel.org;
> Simon Horman <horms@...nel.org>
> Subject: [Intel-wired-lan] [PATCH iwl-next v2] ice: add drop rule matching on
> not active lport
> 
> Inactive LAG port should not receive any packets, as it can cause adding
> invalid FDBs (bridge offload). Add a drop rule matching on inactive lport in
> LAG.
> 
> Reviewed-by: Simon Horman <horms@...nel.org>
> Co-developed-by: Marcin Szycik <marcin.szycik@...el.com>
> Signed-off-by: Marcin Szycik <marcin.szycik@...el.com>
> Signed-off-by: Michal Swiatkowski <michal.swiatkowski@...ux.intel.com>
> ---
> v1 --> v2 (based on Olek comments):
>  * remove zeroes from tabels
>  * style changes
> ---
>  .../net/ethernet/intel/ice/ice_eswitch_br.c   |  6 +-
>  drivers/net/ethernet/intel/ice/ice_lag.c      | 87 +++++++++++++++----
>  drivers/net/ethernet/intel/ice/ice_lag.h      |  2 +
>  3 files changed, 75 insertions(+), 20 deletions(-)
> 
Tested-by: Sujai Buvaneswaran <sujai.buvaneswaran@...el.com>