Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-16 Thread Stefano Garzarella
On Tue, Jun 16, 2020 at 09:26:31AM -0600, Jens Axboe wrote: > On 6/16/20 3:12 AM, Stefano Garzarella wrote: > > On Mon, Jun 15, 2020 at 11:00:25AM -0600, Jens Axboe wrote: > >> On 6/15/20 7:33 AM, Stefano Garzarella wrote: > >>> On Mon, Jun 15, 2020 at 11:04:06AM +0200, Jann Horn wrote: > +Kee

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-16 Thread Jens Axboe
On 6/16/20 3:12 AM, Stefano Garzarella wrote: > On Mon, Jun 15, 2020 at 11:00:25AM -0600, Jens Axboe wrote: >> On 6/15/20 7:33 AM, Stefano Garzarella wrote: >>> On Mon, Jun 15, 2020 at 11:04:06AM +0200, Jann Horn wrote: +Kees, Christian, Sargun, Aleksa, kernel-hardening for their opinions

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-16 Thread Stefano Garzarella
On Tue, Jun 16, 2020 at 01:32:54PM +0200, Jann Horn wrote: > On Tue, Jun 16, 2020 at 11:13 AM Stefano Garzarella > wrote: > > On Mon, Jun 15, 2020 at 11:00:25AM -0600, Jens Axboe wrote: > > > On 6/15/20 7:33 AM, Stefano Garzarella wrote: > > > > On Mon, Jun 15, 2020 at 11:04:06AM +0200, Jann Horn

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-16 Thread Jann Horn
On Tue, Jun 16, 2020 at 11:13 AM Stefano Garzarella wrote: > On Mon, Jun 15, 2020 at 11:00:25AM -0600, Jens Axboe wrote: > > On 6/15/20 7:33 AM, Stefano Garzarella wrote: > > > On Mon, Jun 15, 2020 at 11:04:06AM +0200, Jann Horn wrote: > > >> +Kees, Christian, Sargun, Aleksa, kernel-hardening for

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-16 Thread Stefano Garzarella
On Mon, Jun 15, 2020 at 11:00:25AM -0600, Jens Axboe wrote: > On 6/15/20 7:33 AM, Stefano Garzarella wrote: > > On Mon, Jun 15, 2020 at 11:04:06AM +0200, Jann Horn wrote: > >> +Kees, Christian, Sargun, Aleksa, kernel-hardening for their opinions > >> on seccomp-related aspects > >> > >> On Tue, Jun

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-15 Thread Jann Horn
On Tue, Jun 16, 2020 at 12:01 AM Christian Brauner wrote: > > On Mon, Jun 15, 2020 at 11:04:06AM +0200, Jann Horn wrote: > > +Kees, Christian, Sargun, Aleksa, kernel-hardening for their opinions > > on seccomp-related aspects > > Just fyi, I'm on holiday this week so my responses have some > non-s

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-15 Thread Christian Brauner
On Mon, Jun 15, 2020 at 11:04:06AM +0200, Jann Horn wrote: > +Kees, Christian, Sargun, Aleksa, kernel-hardening for their opinions > on seccomp-related aspects Just fyi, I'm on holiday this week so my responses have some non-significant lag into early next week. > > On Tue, Jun 9, 2020 at 4:24 P

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-15 Thread Jens Axboe
On 6/15/20 7:33 AM, Stefano Garzarella wrote: > On Mon, Jun 15, 2020 at 11:04:06AM +0200, Jann Horn wrote: >> +Kees, Christian, Sargun, Aleksa, kernel-hardening for their opinions >> on seccomp-related aspects >> >> On Tue, Jun 9, 2020 at 4:24 PM Stefano Garzarella >> wrote: >>> Hi Jens, >>> Stef

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-15 Thread Stefano Garzarella
On Mon, Jun 15, 2020 at 11:04:06AM +0200, Jann Horn wrote: > +Kees, Christian, Sargun, Aleksa, kernel-hardening for their opinions > on seccomp-related aspects > > On Tue, Jun 9, 2020 at 4:24 PM Stefano Garzarella wrote: > > Hi Jens, > > Stefan and I have a proposal to share with io_uring communi

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-15 Thread Jann Horn
+Kees, Christian, Sargun, Aleksa, kernel-hardening for their opinions on seccomp-related aspects On Tue, Jun 9, 2020 at 4:24 PM Stefano Garzarella wrote: > Hi Jens, > Stefan and I have a proposal to share with io_uring community. > Before implementing it we would like to discuss it to receive fee

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-15 Thread Stefano Garzarella
On Sun, Jun 14, 2020 at 09:52:30AM -0600, Jens Axboe wrote: > On 6/9/20 8:24 AM, Stefano Garzarella wrote: > > Hi Jens, > > Stefan and I have a proposal to share with io_uring community. > > Before implementing it we would like to discuss it to receive feedbacks and > > to see if it could be accept

Re: [RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-14 Thread Jens Axboe
On 6/9/20 8:24 AM, Stefano Garzarella wrote: > Hi Jens, > Stefan and I have a proposal to share with io_uring community. > Before implementing it we would like to discuss it to receive feedbacks and > to see if it could be accepted: > > Adding restrictions to io_uring > ===

[RFC] io_uring: add restrictions to support untrusted applications and guests

2020-06-09 Thread Stefano Garzarella
Hi Jens, Stefan and I have a proposal to share with io_uring community. Before implementing it we would like to discuss it to receive feedbacks and to see if it could be accepted: Adding restrictions to io_uring = The io_uring API provides submission and complet