mbox

[v3,0/4] improve runtime loading of shared drivers

Message ID 20200703102332.1101232-1-bruce.richardson@intel.com (mailing list archive)
Headers

Message

Bruce Richardson July 3, 2020, 10:23 a.m. UTC 
  This set includes a number of small improvements for handling the loading
of drivers at runtime using the EAL -d flag.

It limits the loading of files to only those files which end in .so, which
means that one can pass in the whole "drivers/" subfolder from a meson
build and not get an error when DPDK trys to load a .a file.

It also puts in some basic permission checking to ensure that no drivers
are loaded from a world-writable location on the filesystem, which would be
a potential security hole on a mis-configured system.

v3: adjusted commit titles based on Thomas' feedback
    skip over any paths which are not relative/absolute - assume any found
    from system directories by linker must be secure.

v2: rebased to fix errors on apply
    fixed one checkpatch issue.

Bruce Richardson (4):
  eal: remove unnecessary null-termination in plugin path
  eal: load only shared libs from driver plugin directories
  eal: forbid loading drivers from insecure paths
  eal: cache last directory permissions checked

 lib/librte_eal/common/eal_common_options.c | 100 ++++++++++++++++++---
 1 file changed, 90 insertions(+), 10 deletions(-)