Re: [PATCH RFC 0/3] io_uring: add restrictions to support untrusted applications and guests

2020-07-13 Thread Stefan Hajnoczi
On Fri, Jul 10, 2020 at 06:20:17PM +0200, Stefano Garzarella wrote: > On Fri, Jul 10, 2020 at 11:33:09AM -0400, Konrad Rzeszutek Wilk wrote: > > .snip.. > > > Just to recap the proposal, the idea is to add some restrictions to the > > > operations (sqe, register, fixed file) to safely allow

Re: [PATCH RFC 0/3] io_uring: add restrictions to support untrusted applications and guests

2020-07-10 Thread Stefano Garzarella
Hi Konrad, On Fri, Jul 10, 2020 at 11:33:09AM -0400, Konrad Rzeszutek Wilk wrote: > .snip.. > > Just to recap the proposal, the idea is to add some restrictions to the > > operations (sqe, register, fixed file) to safely allow untrusted > > applications > > or guests to use io_uring queues. > >

Re: [PATCH RFC 0/3] io_uring: add restrictions to support untrusted applications and guests

2020-07-10 Thread Konrad Rzeszutek Wilk
.snip.. > Just to recap the proposal, the idea is to add some restrictions to the > operations (sqe, register, fixed file) to safely allow untrusted applications > or guests to use io_uring queues. Hi! This is neat and quite cool - but one thing that keeps nagging me is what how much overhead

[PATCH RFC 0/3] io_uring: add restrictions to support untrusted applications and guests

2020-07-10 Thread Stefano Garzarella
Following the proposal that I send about restrictions [1], I wrote a PoC with the main changes. It is still WiP so I left some TODO in the code. I also wrote helpers in liburing and a test case (test/register-restrictions.c) available in this repository: