netdev - Re: [PATCH v2 net-next 0/5] net: dsa: mv88e6xxx: Improve standalone port isolation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Thu, 03 Feb 2022 14:10:10 +0000
From:   patchwork-bot+netdevbpf@...nel.org
To:     Tobias Waldekranz <tobias@...dekranz.com>
Cc:     davem@...emloft.net, kuba@...nel.org, netdev@...r.kernel.org
Subject: Re: [PATCH v2 net-next 0/5] net: dsa: mv88e6xxx: Improve standalone port
 isolation

Hello:

This series was applied to netdev/net-next.git (master)
by David S. Miller <davem@...emloft.net>:

On Thu,  3 Feb 2022 11:16:52 +0100 you wrote:
> The ideal isolation between standalone ports satisfies two properties:
> 1. Packets from one standalone port must not be forwarded to any other
>    port.
> 2. Packets from a standalone port must be sent to the CPU port.
> 
> mv88e6xxx solves (1) by isolating standalone ports using the PVT. Up
> to this point though, (2) has not guaranteed; as the ATU is still
> consulted, there is a chance that incoming packets never reach the CPU
> if its DA has previously been used as the SA of an earlier packet (see
> 1/5 for more details). This is typically not a problem, except for one
> very useful setup in which switch ports are looped in order to run the
> bridge kselftests in tools/testing/selftests/net/forwarding. This
> series attempts to solve (2).
> 
> [...]

Here is the summary with links:
  - [v2,net-next,1/5] net: dsa: mv88e6xxx: Improve isolation of standalone ports
    https://git.kernel.org/netdev/net-next/c/7af4a361a62f
  - [v2,net-next,2/5] net: dsa: mv88e6xxx: Support policy entries in the VTU
    https://git.kernel.org/netdev/net-next/c/bb03b280e0c3
  - [v2,net-next,3/5] net: dsa: mv88e6xxx: Enable port policy support on 6097
    https://git.kernel.org/netdev/net-next/c/585d42bb57bb
  - [v2,net-next,4/5] net: dsa: mv88e6xxx: Improve multichip isolation of standalone ports
    https://git.kernel.org/netdev/net-next/c/d352b20f4174
  - [v2,net-next,5/5] selftests: net: bridge: Parameterize ageing timeout
    https://git.kernel.org/netdev/net-next/c/081197591769

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html