netdev - Re: [PATCH netdev-2.6] jme: JMicron Gigabit Ethernet Driver

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20080825162125.GU7908@solarflare.com>
Date:	Mon, 25 Aug 2008 17:21:26 +0100
From:	Ben Hutchings <bhutchings@...arflare.com>
To:	Guo-Fu Tseng <cooldavid@...ldavid.org>
Cc:	Jeff Garzik <jgarzik@...ox.com>, Ethan <ethanhsiao@...cron.com>,
	akeemting <akeem@...cron.com>, netdev@...r.kernel.org
Subject: Re: [PATCH netdev-2.6] jme: JMicron Gigabit Ethernet Driver

Guo-Fu Tseng wrote:
> Jeff Garzik wrote:
[...]
> >* we prefer not to add custom ioctls, but rather add functionality to 
> >ethtool.  in particular, JMESPIIOCTL does not appear to have any 
> >security checks, and is a potential security hole that permits an 
> >unpriveleged user direct access to hardware
> >
> 
> Should I add privilege check, or should(could?) I send a patch that add 
> ethtool interface for flash(For storing PXE code) read/write?

Flash devices are normally handled by MTD drivers.  However an MTD
driver that works through a network controller will normally need to
coordinate with the network driver.  We have an MTD driver for exactly
the purpose of updating boot code, but the coordinating mechanism
("driverlink") has not been accepted in-tree.

I think we would be happy to implement an ethtool API for flash
memory if this was agreed to be the right interface.  It just seems
like it would be duplicating the MTD API.

Ben.

-- 
Ben Hutchings, Senior Software Engineer, Solarflare Communications
Not speaking for my employer; that's the marketing department's job.
They asked us to note that Solarflare product names are trademarked.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html