> -----Original Message----- > From: Robin Jarry <[email protected] <mailto:[email protected]>> > Date: Thursday 23 February 2023 at 22:43 > To: Gaetan Rivet <[email protected] <mailto:[email protected]>>, Aaron > Conole <[email protected] <mailto:[email protected]>> > Cc: "[email protected] <mailto:[email protected]>" > <[email protected] <mailto:[email protected]>>, Eli Britstein > <[email protected] <mailto:[email protected]>>, Ilya Maximets > <[email protected] <mailto:[email protected]>>, Maxime Coquelin > <[email protected] <mailto:[email protected]>>, Jason > Gunthorpe <[email protected] <mailto:[email protected]>>, Majd Dibbiny > <[email protected] <mailto:[email protected]>>, David Marchand > <[email protected] <mailto:[email protected]>>, Gaetan Rivet > <[email protected] <mailto:grive@u256. net>>, Eelco Chaudron > <[email protected] <mailto:[email protected]>> > Subject: Re: [ovs-dev] [RFC] dpdk: Allow retaining cap_sys_rawio privileges > > > Salut Gaëtan, > > > Gaetan Rivet, Feb 23, 2023 at 22:33: > > I've looked at your patch Robin and the offloads you insert in > > dpdk_cp_prot_add_flow use the following: > > > > const struct rte_flow_attr attr = { .ingress = 1 }; > > > > implicitly setting transfer and group to 0. If either of those had > > been non-zero instead, cap_sys_rawio would be required. > > > Oh I was not aware that this would change anything. Is there some > document/code snippet/anything that explains why is that so? Is that > specific to the mlx5 driver? > > > Thanks!
You can find some scarce info there: https://doc.dpdk.org/guides/platform/mlx5.html#linux-environment Check out section 5.5.1.5. "Run as Non-Root". This doc is incomplete, which is one of the RC of these threads. _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
