lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20150207033115.GC34197@gospo.home.greyhouse.net>
Date:	Fri, 6 Feb 2015 22:31:15 -0500
From:	Andy Gospodarek <gospo@...ulusnetworks.com>
To:	Mahesh Bandewar <maheshb@...gle.com>
Cc:	Jay Vosburgh <jay.vosburgh@...onical.com>,
	Andy Gospodarek <andy@...yhouse.net>,
	Veaceslav Falico <vfalico@...il.com>,
	Nikolay Aleksandrov <nikolay@...hat.com>,
	David Miller <davem@...emloft.net>,
	netdev <netdev@...r.kernel.org>,
	Eric Dumazet <edumazet@...gle.com>,
	Maciej Żenczykowski <maze@...gle.com>
Subject: Re: [PATCH next 5/6] bonding: Allow userspace to set macaddr on
 bonding-dev

On Fri, Feb 06, 2015 at 10:22:07PM -0500, Andy Gospodarek wrote:
> On Fri, Feb 06, 2015 at 06:41:05PM -0800, Mahesh Bandewar wrote:
> > On Fri, Feb 6, 2015 at 5:54 PM, Jay Vosburgh <jay.vosburgh@...onical.com> wrote:
> > > Mahesh Bandewar <maheshb@...gle.com> wrote:
> > >
> > >>On Fri, Feb 6, 2015 at 5:20 PM, Jay Vosburgh <jay.vosburgh@...onical.com> wrote:
> > >>> Mahesh Bandewar <maheshb@...gle.com> wrote:
> > >>>
> > >>>>This patch allows user-space to set the mac-address on the bonding device.
> > >>>>This mac-address can not be NULL or a Multicast. If the mac-address is set
> > >>>>from user-space; kernel will honor it and will not overwrite it. In the
> > >>>>absense (value from user space); the logic will default to using the
> > >>>>masters' mac as the mac address for the bonding device.
> > >>>>
> > >>>>It can be set using example code below -
> > >>>>
> > >>>>   # modprobe bonding mode=4
> > >>>>   # sys_mac_addr=$(printf '%02x:%02x:%02x:%02x:%02x:%02x' \
> > >>>>                    $(( (RANDOM & 0xFE) | 0x02 )) \
> > >>>>                    $(( RANDOM & 0xFF )) \
> > >>>>                    $(( RANDOM & 0xFF )) \
> > >>>>                    $(( RANDOM & 0xFF )) \
> > >>>>                    $(( RANDOM & 0xFF )) \
> > >>>>                    $(( RANDOM & 0xFF )))
> > >>>>   # echo $sys_mac_addr > /sys/class/net/bond0/bonding/ad_actor_system_mac_address
> > >>>>   # echo +eth1 > /sys/class/net/bond0/bonding/slaves
> > >>>>   ...
> > >>>>   # ip link set bond0 up
> > >>>
> > >>>         How is this patch functionally different from setting the
> > >>> bonding master's MAC address to a particular value prior to adding any
> > >>> slaves?
> > >>>
> > >>
> > >>Maciej is correct but I think I was bit ambiguous about it in the
> > >>commit message which might have made you think this way. I'll reword
> > >>the commit message.
> > >
> > >         Thanks; presumably there is some administrative reason for this.
> > >
> > The idea is that in an AD system the actor-partner communication is a
> > business between them two only and no one in the L2 domain should
> > care. These enhancements should obscure that should anyone try to
> > sniff it. Probably I assumed too much and should add this idea behind
> > the implementation in the commit log.
> > 
> > >         Also, for patches 4, 5 and 6, I believe current practice is to
> > > provide a netlink / iproute2 facility for options.
> > >
> > OK. I'll add them (netlink enhancements) in a separate set of patch(s).
> > 
> 
> Mahesh,
> 
> Overall this looks good.  My only comment (other than the suggestion
> that was already made to also add netlink support), would be a slight
> change to the name.
> 
> Would you consider renaming 'ad_actor_sys_macaddr' to something a bit
> shorter?  That is really long name.  Maybe just 'sys_mac_addr' instead?

Ugh, I mean to say 'ad_sys_mac_addr' since this is 802.3ad-specific it
would be good to have the 'ad' on the front since that is the only mode
that uses it.

> 
> Thanks,
> 
> -andy
> 
> > >         -J
> > >
> > >
> > >>>         -J
> > >>>
> > >>>>Signed-off-by: Mahesh Bandewar <maheshb@...gle.com>
> > >>>>---
> > >>>> drivers/net/bonding/bond_3ad.c     |  7 ++++++-
> > >>>> drivers/net/bonding/bond_main.c    |  1 +
> > >>>> drivers/net/bonding/bond_options.c | 29 +++++++++++++++++++++++++++++
> > >>>> drivers/net/bonding/bond_procfs.c  |  6 ++++++
> > >>>> drivers/net/bonding/bond_sysfs.c   | 16 ++++++++++++++++
> > >>>> include/net/bond_options.h         |  1 +
> > >>>> include/net/bonding.h              |  1 +
> > >>>> 7 files changed, 60 insertions(+), 1 deletion(-)
> > >>>>
> > >>>>diff --git a/drivers/net/bonding/bond_3ad.c b/drivers/net/bonding/bond_3ad.c
> > >>>>index 1177f96194dd..373d3db3809f 100644
> > >>>>--- a/drivers/net/bonding/bond_3ad.c
> > >>>>+++ b/drivers/net/bonding/bond_3ad.c
> > >>>>@@ -1914,7 +1914,12 @@ void bond_3ad_initialize(struct bonding *bond, u16 tick_resolution)
> > >>>>
> > >>>>               BOND_AD_INFO(bond).system.sys_priority =
> > >>>>                       bond->params.ad_actor_sysprio;
> > >>>>-              BOND_AD_INFO(bond).system.sys_mac_addr = *((struct mac_addr *)bond->dev->dev_addr);
> > >>>>+              if (is_zero_ether_addr(bond->params.ad_actor_sys_macaddr))
> > >>>>+                      BOND_AD_INFO(bond).system.sys_mac_addr =
> > >>>>+                          *((struct mac_addr *)bond->dev->dev_addr);
> > >>>>+              else
> > >>>>+                      BOND_AD_INFO(bond).system.sys_mac_addr =
> > >>>>+                          *((struct mac_addr *)bond->params.ad_actor_sys_macaddr);
> > >>>>
> > >>>>               /* initialize how many times this module is called in one
> > >>>>                * second (should be about every 100ms)
> > >>>>diff --git a/drivers/net/bonding/bond_main.c b/drivers/net/bonding/bond_main.c
> > >>>>index 561b2bde5aeb..1a6735ef2ea7 100644
> > >>>>--- a/drivers/net/bonding/bond_main.c
> > >>>>+++ b/drivers/net/bonding/bond_main.c
> > >>>>@@ -4440,6 +4440,7 @@ static int bond_check_params(struct bond_params *params)
> > >>>>       params->packets_per_slave = packets_per_slave;
> > >>>>       params->tlb_dynamic_lb = 1; /* Default value */
> > >>>>       params->ad_actor_sysprio = ad_actor_sysprio;
> > >>>>+      eth_zero_addr(params->ad_actor_sys_macaddr);
> > >>>>       if (packets_per_slave > 0) {
> > >>>>               params->reciprocal_packets_per_slave =
> > >>>>                       reciprocal_value(packets_per_slave);
> > >>>>diff --git a/drivers/net/bonding/bond_options.c b/drivers/net/bonding/bond_options.c
> > >>>>index d8f6760143ae..330d48b6a1e6 100644
> > >>>>--- a/drivers/net/bonding/bond_options.c
> > >>>>+++ b/drivers/net/bonding/bond_options.c
> > >>>>@@ -72,6 +72,8 @@ static int bond_option_tlb_dynamic_lb_set(struct bonding *bond,
> > >>>>                                 const struct bond_opt_value *newval);
> > >>>> static int bond_option_ad_actor_sysprio_set(struct bonding *bond,
> > >>>>                                 const struct bond_opt_value *newval);
> > >>>>+static int bond_option_ad_actor_sys_macaddr_set(struct bonding *bond,
> > >>>>+                                const struct bond_opt_value *newval);
> > >>>>
> > >>>>
> > >>>> static const struct bond_opt_value bond_mode_tbl[] = {
> > >>>>@@ -396,6 +398,13 @@ static const struct bond_option bond_opts[BOND_OPT_LAST] = {
> > >>>>               .values = bond_ad_actor_sysprio_tbl,
> > >>>>               .set = bond_option_ad_actor_sysprio_set,
> > >>>>       },
> > >>>>+      [BOND_OPT_AD_ACTOR_SYS_MACADDR] = {
> > >>>>+              .id = BOND_OPT_AD_ACTOR_SYS_MACADDR,
> > >>>>+              .name = "ad_actor_system_mac_address",
> > >>>>+              .unsuppmodes = BOND_MODE_ALL_EX(BIT(BOND_MODE_8023AD)),
> > >>>>+              .flags = BOND_OPTFLAG_RAWVAL | BOND_OPTFLAG_IFDOWN,
> > >>>>+              .set = bond_option_ad_actor_sys_macaddr_set,
> > >>>>+      },
> > >>>> };
> > >>>>
> > >>>> /* Searches for an option by name */
> > >>>>@@ -1376,3 +1385,23 @@ static int bond_option_ad_actor_sysprio_set(struct bonding *bond,
> > >>>>       bond->params.ad_actor_sysprio = newval->value;
> > >>>>       return 0;
> > >>>> }
> > >>>>+
> > >>>>+static int bond_option_ad_actor_sys_macaddr_set(struct bonding *bond,
> > >>>>+                                          const struct bond_opt_value *newval)
> > >>>>+{
> > >>>>+      u8 macaddr[ETH_ALEN];
> > >>>>+      int i;
> > >>>>+
> > >>>>+      i = sscanf(newval->string, "%hhx:%hhx:%hhx:%hhx:%hhx:%hhx",
> > >>>>+                 &macaddr[0], &macaddr[1], &macaddr[2],
> > >>>>+                 &macaddr[3], &macaddr[4], &macaddr[5]);
> > >>>>+
> > >>>>+      if (i != ETH_ALEN || !is_valid_ether_addr(macaddr)) {
> > >>>>+              netdev_err(bond->dev, "Invalid MAC address.\n");
> > >>>>+              return -EINVAL;
> > >>>>+      }
> > >>>>+
> > >>>>+      ether_addr_copy(bond->params.ad_actor_sys_macaddr, macaddr);
> > >>>>+
> > >>>>+      return 0;
> > >>>>+}
> > >>>>diff --git a/drivers/net/bonding/bond_procfs.c b/drivers/net/bonding/bond_procfs.c
> > >>>>index 9e33c48886ef..81452ced852f 100644
> > >>>>--- a/drivers/net/bonding/bond_procfs.c
> > >>>>+++ b/drivers/net/bonding/bond_procfs.c
> > >>>>@@ -136,6 +136,8 @@ static void bond_info_show_master(struct seq_file *seq)
> > >>>>                          optval->string);
> > >>>>               seq_printf(seq, "System priority: %d\n",
> > >>>>                               BOND_AD_INFO(bond).system.sys_priority);
> > >>>>+              seq_printf(seq, "System MAC address: %pM\n",
> > >>>>+                              &BOND_AD_INFO(bond).system.sys_mac_addr);
> > >>>>
> > >>>>               if (__bond_3ad_get_active_agg_info(bond, &ad_info)) {
> > >>>>                       seq_printf(seq, "bond %s has no active aggregator\n",
> > >>>>@@ -198,6 +200,8 @@ static void bond_info_show_slave(struct seq_file *seq,
> > >>>>                       seq_puts(seq, "details actor lacp pdu:\n");
> > >>>>                       seq_printf(seq, "    system priority: %d\n",
> > >>>>                                  port->actor_system_priority);
> > >>>>+                      seq_printf(seq, "    system mac address: %pM\n",
> > >>>>+                                 &port->actor_system);
> > >>>>                       seq_printf(seq, "    port key: %d\n",
> > >>>>                                  port->actor_oper_port_key);
> > >>>>                       seq_printf(seq, "    port priority: %d\n",
> > >>>>@@ -210,6 +214,8 @@ static void bond_info_show_slave(struct seq_file *seq,
> > >>>>                       seq_puts(seq, "details partner lacp pdu:\n");
> > >>>>                       seq_printf(seq, "    system priority: %d\n",
> > >>>>                                  port->partner_oper.system_priority);
> > >>>>+                      seq_printf(seq, "    system mac address: %pM\n",
> > >>>>+                                 &port->partner_oper.system);
> > >>>>                       seq_printf(seq, "    oper key: %d\n",
> > >>>>                                  port->partner_oper.key);
> > >>>>                       seq_printf(seq, "    port priority: %d\n",
> > >>>>diff --git a/drivers/net/bonding/bond_sysfs.c b/drivers/net/bonding/bond_sysfs.c
> > >>>>index 4350aa06f867..91713d0b6685 100644
> > >>>>--- a/drivers/net/bonding/bond_sysfs.c
> > >>>>+++ b/drivers/net/bonding/bond_sysfs.c
> > >>>>@@ -706,6 +706,21 @@ static ssize_t bonding_show_ad_actor_sysprio(struct device *d,
> > >>>> static DEVICE_ATTR(ad_actor_system_priority, S_IRUGO | S_IWUSR,
> > >>>>                  bonding_show_ad_actor_sysprio, bonding_sysfs_store_option);
> > >>>>
> > >>>>+static ssize_t bonding_show_ad_actor_sys_macaddr(struct device *d,
> > >>>>+                                               struct device_attribute *attr,
> > >>>>+                                               char *buf)
> > >>>>+{
> > >>>>+      struct bonding *bond = to_bond(d);
> > >>>>+
> > >>>>+      if (BOND_MODE(bond) == BOND_MODE_8023AD)
> > >>>>+              return sprintf(buf, "%pM\n", bond->params.ad_actor_sys_macaddr);
> > >>>>+
> > >>>>+      return 0;
> > >>>>+}
> > >>>>+static DEVICE_ATTR(ad_actor_system_mac_address, S_IRUGO | S_IWUSR,
> > >>>>+                 bonding_show_ad_actor_sys_macaddr,
> > >>>>+                 bonding_sysfs_store_option);
> > >>>>+
> > >>>> static struct attribute *per_bond_attrs[] = {
> > >>>>       &dev_attr_slaves.attr,
> > >>>>       &dev_attr_mode.attr,
> > >>>>@@ -740,6 +755,7 @@ static struct attribute *per_bond_attrs[] = {
> > >>>>       &dev_attr_packets_per_slave.attr,
> > >>>>       &dev_attr_tlb_dynamic_lb.attr,
> > >>>>       &dev_attr_ad_actor_system_priority.attr,
> > >>>>+      &dev_attr_ad_actor_system_mac_address.attr,
> > >>>>       NULL,
> > >>>> };
> > >>>>
> > >>>>diff --git a/include/net/bond_options.h b/include/net/bond_options.h
> > >>>>index c2af1db37354..993ef73cd050 100644
> > >>>>--- a/include/net/bond_options.h
> > >>>>+++ b/include/net/bond_options.h
> > >>>>@@ -64,6 +64,7 @@ enum {
> > >>>>       BOND_OPT_SLAVES,
> > >>>>       BOND_OPT_TLB_DYNAMIC_LB,
> > >>>>       BOND_OPT_AD_ACTOR_SYSPRIO,
> > >>>>+      BOND_OPT_AD_ACTOR_SYS_MACADDR,
> > >>>>       BOND_OPT_LAST
> > >>>> };
> > >>>>
> > >>>>diff --git a/include/net/bonding.h b/include/net/bonding.h
> > >>>>index 7a5c79fcf866..cd2092e6bc71 100644
> > >>>>--- a/include/net/bonding.h
> > >>>>+++ b/include/net/bonding.h
> > >>>>@@ -144,6 +144,7 @@ struct bond_params {
> > >>>>       int tlb_dynamic_lb;
> > >>>>       struct reciprocal_value reciprocal_packets_per_slave;
> > >>>>       u16 ad_actor_sysprio;
> > >>>>+      u8 ad_actor_sys_macaddr[ETH_ALEN];
> > >>>> };
> > >>>>
> > >>>> struct bond_parm_tbl {
> > >>>>--
> > >>>>2.2.0.rc0.207.ga3a616c
> > >>>>
> > >
> > > ---
> > >         -Jay Vosburgh, jay.vosburgh@...onical.com
> > --
> > To unsubscribe from this list: send the line "unsubscribe netdev" in
> > the body of a message to majordomo@...r.kernel.org
> > More majordomo info at  http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Powered by blists - more mailing lists