Re: [RFC] How implement Secure Data Path ?

2015-05-12 Thread Benjamin Gaignard
I think now I have an answer to my question. I will back come in a couple of weeks with a generic dmabuf allocator. The feature set of this should be: - allow to have per device specificone allocator - ioctl for buffer allocation and exporting dmabuf file descriptor on /dev/foo - generic API to

Re: [RFC] How implement Secure Data Path ?

2015-05-12 Thread Benjamin Gaignard
I think now I have an answer to my question. I will back come in a couple of weeks with a generic dmabuf allocator. The feature set of this should be: - allow to have per device specificone allocator - ioctl for buffer allocation and exporting dmabuf file descriptor on /dev/foo - generic API to

Re: [RFC] How implement Secure Data Path ?

2015-05-08 Thread One Thousand Gnomes
> dma-buf user handles are fds, which means anything allocated can be passed > around nicely already. The question really is whether we'll have one ioctl > on top of a special dev node or a syscall. I thought that in these cases > where the dev node is only ever used to allocate the real thing, a

Re: [RFC] How implement Secure Data Path ?

2015-05-08 Thread Enrico Weigelt, metux IT consult
Am 08.05.2015 um 10:37 schrieb Daniel Vetter: dma-buf user handles are fds, which means anything allocated can be passed around nicely already. The question really is whether we'll have one ioctl on top of a special dev node or a syscall. I thought that in these cases where the dev node is only

Re: [RFC] How implement Secure Data Path ?

2015-05-08 Thread Daniel Vetter
On Thu, May 07, 2015 at 05:40:03PM +0100, One Thousand Gnomes wrote: > On Thu, 7 May 2015 15:52:12 +0200 > Daniel Vetter wrote: > > > On Thu, May 07, 2015 at 03:22:20PM +0200, Thierry Reding wrote: > > > On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: > > > > Yes the idea would be

Re: [RFC] How implement Secure Data Path ?

2015-05-08 Thread Enrico Weigelt, metux IT consult
Am 08.05.2015 um 10:37 schrieb Daniel Vetter: dma-buf user handles are fds, which means anything allocated can be passed around nicely already. The question really is whether we'll have one ioctl on top of a special dev node or a syscall. I thought that in these cases where the dev node is only

Re: [RFC] How implement Secure Data Path ?

2015-05-08 Thread Daniel Vetter
On Thu, May 07, 2015 at 05:40:03PM +0100, One Thousand Gnomes wrote: On Thu, 7 May 2015 15:52:12 +0200 Daniel Vetter dan...@ffwll.ch wrote: On Thu, May 07, 2015 at 03:22:20PM +0200, Thierry Reding wrote: On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: Yes the idea would

Re: [RFC] How implement Secure Data Path ?

2015-05-08 Thread One Thousand Gnomes
dma-buf user handles are fds, which means anything allocated can be passed around nicely already. The question really is whether we'll have one ioctl on top of a special dev node or a syscall. I thought that in these cases where the dev node is only ever used to allocate the real thing, a

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread One Thousand Gnomes
On Thu, 7 May 2015 15:52:12 +0200 Daniel Vetter wrote: > On Thu, May 07, 2015 at 03:22:20PM +0200, Thierry Reding wrote: > > On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: > > > Yes the idea would be a special-purpose allocater thing like ion. Might > > > even want that to be a

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread Thierry Reding
On Wed, May 06, 2015 at 07:29:56AM -0400, Rob Clark wrote: > On Wed, May 6, 2015 at 4:35 AM, Daniel Vetter wrote: > > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > >> > First what is Secure Data Path ? SDP is a set of hardware features to > >> > garanty > >> > that some

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread Daniel Vetter
On Thu, May 07, 2015 at 03:22:20PM +0200, Thierry Reding wrote: > On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: > > Yes the idea would be a special-purpose allocater thing like ion. Might > > even want that to be a syscall to do it properly. > > Would you care to elaborate why a

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread Thierry Reding
On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: > On Wed, May 06, 2015 at 11:19:21AM +0200, Thierry Reding wrote: > > On Wed, May 06, 2015 at 10:35:52AM +0200, Daniel Vetter wrote: > > > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > > > > > First what is

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread Thierry Reding
On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: On Wed, May 06, 2015 at 11:19:21AM +0200, Thierry Reding wrote: On Wed, May 06, 2015 at 10:35:52AM +0200, Daniel Vetter wrote: On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: First what is Secure Data

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread Daniel Vetter
On Thu, May 07, 2015 at 03:22:20PM +0200, Thierry Reding wrote: On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: Yes the idea would be a special-purpose allocater thing like ion. Might even want that to be a syscall to do it properly. Would you care to elaborate why a syscall

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread Thierry Reding
On Wed, May 06, 2015 at 07:29:56AM -0400, Rob Clark wrote: On Wed, May 6, 2015 at 4:35 AM, Daniel Vetter dan...@ffwll.ch wrote: On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: First what is Secure Data Path ? SDP is a set of hardware features to garanty that some

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread One Thousand Gnomes
On Thu, 7 May 2015 15:52:12 +0200 Daniel Vetter dan...@ffwll.ch wrote: On Thu, May 07, 2015 at 03:22:20PM +0200, Thierry Reding wrote: On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: Yes the idea would be a special-purpose allocater thing like ion. Might even want that to

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Daniel Vetter
On Wed, May 06, 2015 at 11:19:21AM +0200, Thierry Reding wrote: > On Wed, May 06, 2015 at 10:35:52AM +0200, Daniel Vetter wrote: > > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > > > > First what is Secure Data Path ? SDP is a set of hardware features to > > > > garanty >

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Rob Clark
On Wed, May 6, 2015 at 4:35 AM, Daniel Vetter wrote: > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: >> > First what is Secure Data Path ? SDP is a set of hardware features to >> > garanty >> > that some memories regions could only be read and/or write by specific >> >

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Benjamin Gaignard
I agree that the best solution is to have a generic dmabuf allocator but no only for secure use cases. If we create a memory allocator dedicated to security it means that userland will be responsible to use it or not depending of the context which may change while the pipeline/graph is already

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Thierry Reding
On Wed, May 06, 2015 at 10:35:52AM +0200, Daniel Vetter wrote: > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > > > First what is Secure Data Path ? SDP is a set of hardware features to > > > garanty > > > that some memories regions could only be read and/or write by

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Hans Verkuil
On 05/06/15 10:35, Daniel Vetter wrote: > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: >>> First what is Secure Data Path ? SDP is a set of hardware features to >>> garanty >>> that some memories regions could only be read and/or write by specific >>> hardware >>> IPs.

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Benjamin Gaignard
2015-05-05 18:54 GMT+02:00 One Thousand Gnomes : >> First what is Secure Data Path ? SDP is a set of hardware features to garanty >> that some memories regions could only be read and/or write by specific >> hardware >> IPs. You can imagine it as a kind of memory firewall which grant/revoke >>

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Daniel Vetter
On Wed, May 06, 2015 at 03:50:13AM +0300, Laurent Pinchart wrote: > On Tuesday 05 May 2015 09:27:52 Christoph Hellwig wrote: > > On Tue, May 05, 2015 at 05:39:57PM +0200, Benjamin Gaignard wrote: > > > Since few months I'm looking for Linaro to how do Secure Data Path (SPD). > > > I have tried and

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Daniel Vetter
On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > > First what is Secure Data Path ? SDP is a set of hardware features to > > garanty > > that some memories regions could only be read and/or write by specific > > hardware > > IPs. You can imagine it as a kind of memory

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Benjamin Gaignard
2015-05-05 18:54 GMT+02:00 One Thousand Gnomes gno...@lxorguk.ukuu.org.uk: First what is Secure Data Path ? SDP is a set of hardware features to garanty that some memories regions could only be read and/or write by specific hardware IPs. You can imagine it as a kind of memory firewall which

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Hans Verkuil
On 05/06/15 10:35, Daniel Vetter wrote: On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: First what is Secure Data Path ? SDP is a set of hardware features to garanty that some memories regions could only be read and/or write by specific hardware IPs. You can imagine it

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Thierry Reding
On Wed, May 06, 2015 at 10:35:52AM +0200, Daniel Vetter wrote: On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: First what is Secure Data Path ? SDP is a set of hardware features to garanty that some memories regions could only be read and/or write by specific

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Daniel Vetter
On Wed, May 06, 2015 at 03:50:13AM +0300, Laurent Pinchart wrote: On Tuesday 05 May 2015 09:27:52 Christoph Hellwig wrote: On Tue, May 05, 2015 at 05:39:57PM +0200, Benjamin Gaignard wrote: Since few months I'm looking for Linaro to how do Secure Data Path (SPD). I have tried and

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Benjamin Gaignard
I agree that the best solution is to have a generic dmabuf allocator but no only for secure use cases. If we create a memory allocator dedicated to security it means that userland will be responsible to use it or not depending of the context which may change while the pipeline/graph is already

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Daniel Vetter
On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: First what is Secure Data Path ? SDP is a set of hardware features to garanty that some memories regions could only be read and/or write by specific hardware IPs. You can imagine it as a kind of memory firewall which

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Rob Clark
On Wed, May 6, 2015 at 4:35 AM, Daniel Vetter dan...@ffwll.ch wrote: On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: First what is Secure Data Path ? SDP is a set of hardware features to garanty that some memories regions could only be read and/or write by specific

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Daniel Vetter
On Wed, May 06, 2015 at 11:19:21AM +0200, Thierry Reding wrote: On Wed, May 06, 2015 at 10:35:52AM +0200, Daniel Vetter wrote: On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: First what is Secure Data Path ? SDP is a set of hardware features to garanty that

Re: [RFC] How implement Secure Data Path ?

2015-05-05 Thread Laurent Pinchart
On Tuesday 05 May 2015 09:27:52 Christoph Hellwig wrote: > On Tue, May 05, 2015 at 05:39:57PM +0200, Benjamin Gaignard wrote: > > Since few months I'm looking for Linaro to how do Secure Data Path (SPD). > > I have tried and implemented multiple thinks but I always facing > > architecture issues

Re: [RFC] How implement Secure Data Path ?

2015-05-05 Thread Christoph Hellwig
On Tue, May 05, 2015 at 05:39:57PM +0200, Benjamin Gaignard wrote: > Since few months I'm looking for Linaro to how do Secure Data Path (SPD). > I have tried and implemented multiple thinks but I always facing architecture > issues so I would like to get your help to solve the problem. > > First

Re: [RFC] How implement Secure Data Path ?

2015-05-05 Thread One Thousand Gnomes
> First what is Secure Data Path ? SDP is a set of hardware features to garanty > that some memories regions could only be read and/or write by specific > hardware > IPs. You can imagine it as a kind of memory firewall which grant/revoke > accesses to memory per devices. Firewall configuration

Re: [RFC] How implement Secure Data Path ?

2015-05-05 Thread Laurent Pinchart
On Tuesday 05 May 2015 09:27:52 Christoph Hellwig wrote: On Tue, May 05, 2015 at 05:39:57PM +0200, Benjamin Gaignard wrote: Since few months I'm looking for Linaro to how do Secure Data Path (SPD). I have tried and implemented multiple thinks but I always facing architecture issues so I

Re: [RFC] How implement Secure Data Path ?

2015-05-05 Thread One Thousand Gnomes
First what is Secure Data Path ? SDP is a set of hardware features to garanty that some memories regions could only be read and/or write by specific hardware IPs. You can imagine it as a kind of memory firewall which grant/revoke accesses to memory per devices. Firewall configuration must be

Re: [RFC] How implement Secure Data Path ?

2015-05-05 Thread Christoph Hellwig
On Tue, May 05, 2015 at 05:39:57PM +0200, Benjamin Gaignard wrote: Since few months I'm looking for Linaro to how do Secure Data Path (SPD). I have tried and implemented multiple thinks but I always facing architecture issues so I would like to get your help to solve the problem. First what