Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices

From: Michael S. Tsirkin <mst@redhat.com>
Date: 2021-09-30 14:58:22
Also in: linux-pci, lkml, virtualization
Reply to: Alan Stern, 2021-09-30

On Thu, Sep 30, 2021 at 10:43:05AM -0400, Alan Stern wrote:

I don't see any point in talking about "untrusted drivers".  If a 
driver isn't trusted then it doesn't belong in your kernel.  Period.  
When you load a driver into your kernel, you are implicitly trusting 
it (aside from limitations imposed by security modules).

Trusting it to do what? Historically a ton of drivers did not
validate input from devices they drive. Most still don't.

The code 
it contains, the module_init code in particular, runs with full 
superuser permissions.

-- 
MST

Kuppuswamy Sathyanarayanan · 2021-09-30
[PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Kuppuswamy Sathyanarayanan · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Alan Stern · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Dan Williams · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Kuppuswamy, Sathyanarayanan · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Dan Williams · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Rafael J. Wysocki · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Alan Stern · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Dan Williams · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Yehezkel Bernat · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Dan Williams · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Yehezkel Bernat · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Dan Williams · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Kuppuswamy, Sathyanarayanan · 2021-09-30
Re: [PATCH v2 1/6] driver core: Move the "authorized" attribute from USB/Thunderbolt to core · Dan Williams · 2021-09-30
[PATCH v2 3/6] driver core: Allow arch to initialize the authorized attribute · Kuppuswamy Sathyanarayanan · 2021-09-30
[PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Kuppuswamy Sathyanarayanan · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Michael S. Tsirkin · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Greg Kroah-Hartman · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Michael S. Tsirkin · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Greg Kroah-Hartman · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Michael S. Tsirkin · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Greg Kroah-Hartman · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Andi Kleen · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Greg Kroah-Hartman · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Andi Kleen · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Greg Kroah-Hartman · 2021-10-01
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Alan Stern · 2021-10-01
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Andi Kleen · 2021-10-01
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Alan Stern · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Michael S. Tsirkin · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Alan Stern · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Michael S. Tsirkin · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Michael S. Tsirkin · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Alan Stern · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Michael S. Tsirkin · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Andi Kleen · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Alan Stern · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Dan Williams · 2021-09-30
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Alan Stern · 2021-10-01
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Dan Williams · 2021-10-01
Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices · Andi Kleen · 2021-09-30
[PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Kuppuswamy Sathyanarayanan · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Michael S. Tsirkin · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Dan Williams · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Greg Kroah-Hartman · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Kuppuswamy, Sathyanarayanan · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Michael S. Tsirkin · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Kuppuswamy, Sathyanarayanan · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Greg Kroah-Hartman · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Kuppuswamy, Sathyanarayanan · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Kuppuswamy, Sathyanarayanan · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Andi Kleen · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Kuppuswamy, Sathyanarayanan · 2021-09-30
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Greg Kroah-Hartman · 2021-10-01
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Andi Kleen · 2021-10-01
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Michael S. Tsirkin · 2021-10-02
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Greg Kroah-Hartman · 2021-10-02
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Andi Kleen · 2021-10-02
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Greg Kroah-Hartman · 2021-10-02
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Michael S. Tsirkin · 2021-10-02
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Greg Kroah-Hartman · 2021-10-03
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Dan Williams · 2021-10-04
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Dan Williams · 2021-10-01
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Alan Stern · 2021-10-01
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Dan Williams · 2021-10-01
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Alan Stern · 2021-10-01
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Kuppuswamy, Sathyanarayanan · 2021-10-01
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Dan Williams · 2021-10-01
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Mika Westerberg · 2021-10-04
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Dan Williams · 2021-10-05
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Greg Kroah-Hartman · 2021-10-06
Re: [PATCH v2 4/6] virtio: Initialize authorized attribute for confidential guest · Andi Kleen · 2021-09-30
[PATCH v2 6/6] PCI: Initialize authorized attribute for confidential guest · Kuppuswamy Sathyanarayanan · 2021-09-30
[PATCH v2 5/6] x86/tdx: Add device filter support for x86 TDX guest platform · Kuppuswamy Sathyanarayanan · 2021-09-30
View all 75 messages

`h`	back out one level
`j`	next message in thread / next series-diff position
`k`	previous message in thread / previous series-diff position
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help