netdev - [RFC PATCH iproute2-next 0/2] Add pcp-prio and new APPTRUST subcommand

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Fri, 9 Sep 2022 12:36:59 +0200
From:   Daniel Machon <daniel.machon@...rochip.com>
To:     <netdev@...r.kernel.org>
CC:     <Allan.Nielsen@...rochip.com>, <UNGLinuxDriver@...rochip.com>,
        <maxime.chevallier@...tlin.com>, <vladimir.oltean@....com>,
        <petrm@...dia.com>, <kuba@...nel.org>, <vinicius.gomes@...el.com>,
        <thomas.petazzoni@...tlin.com>,
        Daniel Machon <daniel.machon@...rochip.com>
Subject: [RFC PATCH iproute2-next 0/2] Add pcp-prio and new APPTRUST subcommand

This patch series implements the interfaces of the kernel side patch series:

https://lore.kernel.org/netdev/20220908120442.3069771-1-daniel.machon@microchip.com/#t

This is posted RFC as the kernel side is not ready to be merged yet.

- New pcp-prio parameter has been added to existing app subcommand.
- New apptrust subcommand with parameter trust-order has been added.

Patch #1 Introduces a new pcp-prio parameter to the app subcommand. This new
parameter uses the array parameter to map a pcp and dei value to priority.
The key is the PCP and DEI value in numerical and symbolic form, respectively.
Also dcb-app.8 man page has been extended to describe the new parameter.

Example:

Map PCP 1 and DEI 0 to priority 1
$ dcb app add dev eth0 pcp-prio 1:1

Map PCP 1 and DEI 1 to priority 1
$ dcb app add dev eth0 pcp-prio 1de:1

Patch #2 Introduces a new apptrust subcommand. This new subcommand has currently
one parameter: trust-order. It lets you specify a list of trusted selectors, in
order of precendence. Also a new dcb-apptrust.8 man page has been added, to
describe the ned subcommand and its parameter.

Example:

Trust selectors dscp and pcp, in that order:
$ dcb apptrust set dev eth0 dscp pcp

Trust selectors ethertype, stream and pcp, in that order
$ dcb apptrust set dev eth0 eth stream pcp

Show the trust order
$ dcb apptrust show dev eth0
trust-order: eth stream pcp

Both patches makes changes to the uapi dcbnl.h kernel header. Changes to kernel
headers is probably not dealt with this way?

Daniel Machon (2):
  dcb: add new pcp-prio parameter to dcb app
  dcb: add new subcommand for apptrust object

 dcb/Makefile               |   3 +-
 dcb/dcb.c                  |   4 +-
 dcb/dcb.h                  |   4 +
 dcb/dcb_app.c              |  70 ++++++++++++
 dcb/dcb_apptrust.c         | 216 +++++++++++++++++++++++++++++++++++++
 include/uapi/linux/dcbnl.h |  15 +++
 man/man8/dcb-app.8         |  25 +++++
 man/man8/dcb-apptrust.8    | 122 +++++++++++++++++++++
 8 files changed, 457 insertions(+), 2 deletions(-)
 create mode 100644 dcb/dcb_apptrust.c
 create mode 100644 man/man8/dcb-apptrust.8

-- 
2.34.1