netdev - Re: [PATCH bpf-next 1/4] xdp: Support specifying expected existing program when attaching XDP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 31 Mar 2020 15:16:13 -0700
From:   Alexei Starovoitov <alexei.starovoitov@...il.com>
To:     Edward Cree <ecree@...arflare.com>
Cc:     David Ahern <dsahern@...il.com>, Lorenz Bauer <lmb@...udflare.com>,
        Andrii Nakryiko <andrii.nakryiko@...il.com>,
        Toke Høiland-Jørgensen <toke@...hat.com>,
        John Fastabend <john.fastabend@...il.com>,
        Jakub Kicinski <kuba@...nel.org>,
        Alexei Starovoitov <ast@...nel.org>,
        Daniel Borkmann <daniel@...earbox.net>,
        Martin KaFai Lau <kafai@...com>,
        Song Liu <songliubraving@...com>, Yonghong Song <yhs@...com>,
        Andrii Nakryiko <andriin@...com>,
        "David S. Miller" <davem@...emloft.net>,
        Jesper Dangaard Brouer <brouer@...hat.com>,
        Andrey Ignatov <rdna@...com>,
        Networking <netdev@...r.kernel.org>, bpf <bpf@...r.kernel.org>
Subject: Re: [PATCH bpf-next 1/4] xdp: Support specifying expected existing
 program when attaching XDP

On Tue, Mar 31, 2020 at 11:05:50PM +0100, Edward Cree wrote:
> On 31/03/2020 04:43, Alexei Starovoitov wrote:
> > On Mon, Mar 30, 2020 at 04:25:07PM +0100, Edward Cree wrote:
> >> Everything that a human operator can do, so can any program with the
> >>  same capabilities/wheel bits.  Especially as the API that the
> >>  operator-tool uses *will* be open and documented.  The Unix Way does
> >>  not allow unscriptable interfaces, and heavily frowns at any kind of
> >>  distinction between 'humans' and 'programs'.
> > can you share a link on such philosophy?
> It's not quite as explicit about it as I'd like, but
>  http://www.catb.org/esr/writings/taoup/html/ch01s06.html#id2877684
>  is the closest I can find right now.

I knew the bit you linked and I've read several "Rule of" up and down
in that doc and still don't see any mention of 'humans' vs 'programs'.
Unix philosophy can be rephrased as divide-and-conquer which is #1
principle in bpf architecture. In other words: build the smallest
possible mechanisms that are composable.