[Intel-wired-lan] [next PATCH S36 05/12] i40e: lie to the VF
Bowers, AndrewX
andrewx.bowers at intel.com
Wed May 4 16:06:04 UTC 2016
> -----Original Message-----
> From: Intel-wired-lan [mailto:intel-wired-lan-bounces at lists.osuosl.org] On
> Behalf Of Bimmy Pujari
> Sent: Tuesday, May 03, 2016 3:13 PM
> To: intel-wired-lan at lists.osuosl.org
> Subject: [Intel-wired-lan] [next PATCH S36 05/12] i40e: lie to the VF
>
> From: Mitch Williams <mitch.a.williams at intel.com>
>
> If an untrusted VF attempts to configure promiscuous mode, log a message
> pointing out its naughty behavior. But then, instead of returning an error to
> the offender, just lie to it and say everything's OK. It will continue on its way,
> thinking it's in promiscuous mode, but receiving no packets except its own.
>
> Signed-off-by: Mitch Williams <mitch.a.williams at intel.com>
> Change-ID: I63369215b1720f3c531eedfc06af86ff8c0e3dc8
> ---
> Testing Hints : Configure promiscuous mode on a non-trusted VF and
> observe the results. Make sure trusted VFs still work.
>
> drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 10 +++++++---
> 1 file changed, 7 insertions(+), 3 deletions(-)
Tested-by: Andrew Bowers <andrewx.bowers at intel.com>
Promisc mode only actually works on trusted VFs as expected. Naughty behavior logged in dmesg if attempt is made on untrusted VF
More information about the Intel-wired-lan
mailing list