Re: [RFC] How implement Secure Data Path ?

2015-05-12 Thread Benjamin Gaignard
I think now I have an answer to my question. I will back come in a couple of weeks with a generic dmabuf allocator. The feature set of this should be: - allow to have per device specificone allocator - ioctl for buffer allocation and exporting dmabuf file descriptor on /dev/foo - generic API to b

Re: [RFC] How implement Secure Data Path ?

2015-05-08 Thread One Thousand Gnomes
> dma-buf user handles are fds, which means anything allocated can be passed > around nicely already. The question really is whether we'll have one ioctl > on top of a special dev node or a syscall. I thought that in these cases > where the dev node is only ever used to allocate the real thing, a s

Re: [RFC] How implement Secure Data Path ?

2015-05-08 Thread Enrico Weigelt, metux IT consult
Am 08.05.2015 um 10:37 schrieb Daniel Vetter: dma-buf user handles are fds, which means anything allocated can be passed around nicely already. The question really is whether we'll have one ioctl on top of a special dev node or a syscall. I thought that in these cases where the dev node is only

Re: [RFC] How implement Secure Data Path ?

2015-05-08 Thread Daniel Vetter
On Thu, May 07, 2015 at 05:40:03PM +0100, One Thousand Gnomes wrote: > On Thu, 7 May 2015 15:52:12 +0200 > Daniel Vetter wrote: > > > On Thu, May 07, 2015 at 03:22:20PM +0200, Thierry Reding wrote: > > > On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: > > > > Yes the idea would be

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread One Thousand Gnomes
On Thu, 7 May 2015 15:52:12 +0200 Daniel Vetter wrote: > On Thu, May 07, 2015 at 03:22:20PM +0200, Thierry Reding wrote: > > On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: > > > Yes the idea would be a special-purpose allocater thing like ion. Might > > > even want that to be a sy

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread Thierry Reding
On Wed, May 06, 2015 at 07:29:56AM -0400, Rob Clark wrote: > On Wed, May 6, 2015 at 4:35 AM, Daniel Vetter wrote: > > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > >> > First what is Secure Data Path ? SDP is a set of hardware features to > >> > garanty > >> > that some m

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread Daniel Vetter
On Thu, May 07, 2015 at 03:22:20PM +0200, Thierry Reding wrote: > On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: > > Yes the idea would be a special-purpose allocater thing like ion. Might > > even want that to be a syscall to do it properly. > > Would you care to elaborate why a s

Re: [RFC] How implement Secure Data Path ?

2015-05-07 Thread Thierry Reding
On Wed, May 06, 2015 at 03:15:32PM +0200, Daniel Vetter wrote: > On Wed, May 06, 2015 at 11:19:21AM +0200, Thierry Reding wrote: > > On Wed, May 06, 2015 at 10:35:52AM +0200, Daniel Vetter wrote: > > > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > > > > > First what is Secu

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Daniel Vetter
On Wed, May 06, 2015 at 11:19:21AM +0200, Thierry Reding wrote: > On Wed, May 06, 2015 at 10:35:52AM +0200, Daniel Vetter wrote: > > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > > > > First what is Secure Data Path ? SDP is a set of hardware features to > > > > garanty >

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Rob Clark
On Wed, May 6, 2015 at 4:35 AM, Daniel Vetter wrote: > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: >> > First what is Secure Data Path ? SDP is a set of hardware features to >> > garanty >> > that some memories regions could only be read and/or write by specific >> > har

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Benjamin Gaignard
I agree that the best solution is to have a generic dmabuf allocator but no only for secure use cases. If we create a memory allocator dedicated to security it means that userland will be responsible to use it or not depending of the context which may change while the pipeline/graph is already run

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Thierry Reding
On Wed, May 06, 2015 at 10:35:52AM +0200, Daniel Vetter wrote: > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > > > First what is Secure Data Path ? SDP is a set of hardware features to > > > garanty > > > that some memories regions could only be read and/or write by specif

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Hans Verkuil
On 05/06/15 10:35, Daniel Vetter wrote: > On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: >>> First what is Secure Data Path ? SDP is a set of hardware features to >>> garanty >>> that some memories regions could only be read and/or write by specific >>> hardware >>> IPs. You

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Benjamin Gaignard
2015-05-05 18:54 GMT+02:00 One Thousand Gnomes : >> First what is Secure Data Path ? SDP is a set of hardware features to garanty >> that some memories regions could only be read and/or write by specific >> hardware >> IPs. You can imagine it as a kind of memory firewall which grant/revoke >> acce

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Daniel Vetter
On Wed, May 06, 2015 at 03:50:13AM +0300, Laurent Pinchart wrote: > On Tuesday 05 May 2015 09:27:52 Christoph Hellwig wrote: > > On Tue, May 05, 2015 at 05:39:57PM +0200, Benjamin Gaignard wrote: > > > Since few months I'm looking for Linaro to how do Secure Data Path (SPD). > > > I have tried and

Re: [RFC] How implement Secure Data Path ?

2015-05-06 Thread Daniel Vetter
On Tue, May 05, 2015 at 05:54:05PM +0100, One Thousand Gnomes wrote: > > First what is Secure Data Path ? SDP is a set of hardware features to > > garanty > > that some memories regions could only be read and/or write by specific > > hardware > > IPs. You can imagine it as a kind of memory firewa

Re: [RFC] How implement Secure Data Path ?

2015-05-05 Thread Laurent Pinchart
On Tuesday 05 May 2015 09:27:52 Christoph Hellwig wrote: > On Tue, May 05, 2015 at 05:39:57PM +0200, Benjamin Gaignard wrote: > > Since few months I'm looking for Linaro to how do Secure Data Path (SPD). > > I have tried and implemented multiple thinks but I always facing > > architecture issues so

Re: [RFC] How implement Secure Data Path ?

2015-05-05 Thread Christoph Hellwig
On Tue, May 05, 2015 at 05:39:57PM +0200, Benjamin Gaignard wrote: > Since few months I'm looking for Linaro to how do Secure Data Path (SPD). > I have tried and implemented multiple thinks but I always facing architecture > issues so I would like to get your help to solve the problem. > > First w

Re: [RFC] How implement Secure Data Path ?

2015-05-05 Thread One Thousand Gnomes
> First what is Secure Data Path ? SDP is a set of hardware features to garanty > that some memories regions could only be read and/or write by specific > hardware > IPs. You can imagine it as a kind of memory firewall which grant/revoke > accesses to memory per devices. Firewall configuration mus

[RFC] How implement Secure Data Path ?

2015-05-05 Thread Benjamin Gaignard
Hello, Since few months I'm looking for Linaro to how do Secure Data Path (SPD). I have tried and implemented multiple thinks but I always facing architecture issues so I would like to get your help to solve the problem. First what is Secure Data Path ? SDP is a set of hardware features to garant