From: Herve Codina <herve.codina@bootlin.com>
To: Ayush Singh <ayush@beagleboard.org>
Cc: Geert Uytterhoeven <geert@linux-m68k.org>,
xypron.glpk@gmx.de, Jason Kridner <jkridner@beagleboard.org>,
Deepak Khatri <lorforlinux@beagleboard.org>,
d-gole@ti.com, Robert Nelson <robertcnelson@beagleboard.org>,
Andrew Davis <afd@ti.com>,
Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
David Gibson <david@gibson.dropbear.id.au>,
Luca Ceresoli <luca.ceresoli@bootlin.com>,
Pantelis Antoniou <pantelis.antoniou@gmail.com>,
"open list:OPEN FIRMWARE AND FLATTENED DEVICE TREE BINDINGS"
<devicetree@vger.kernel.org>
Subject: Re: [Question] Status of user-space dynamic overlays API
Date: Mon, 24 Feb 2025 14:29:00 +0100 [thread overview]
Message-ID: <20250224142900.0dde56a4@bootlin.com> (raw)
In-Reply-To: <fed58d7b-d9af-402d-a215-a7e620239728@beagleboard.org>
Hi Ajush,
On Mon, 24 Feb 2025 15:39:41 +0530
Ayush Singh <ayush@beagleboard.org> wrote:
> On 2/24/25 14:07, Geert Uytterhoeven wrote:
>
> > Hi Ayush,
> >
> > On Sat, 22 Feb 2025 at 21:14, Ayush Singh <ayush@beagleboard.org> wrote:
> >> # Challenges
> >>
> >> ## Security
> >>
> >> The concerns regarding security seemed to show up in the other
> >> proposals. There was a proposal to have a devicetree property to
> >> allow/deny the application of overlays in some nodes, with default being
> >> deny. Was it insufficient?
> > This is the most important issue: using DT overlays, you can change
> > about anything. There is no protection yet to limit this to e.g. the
> > expansion connectors on your board.
> > This is what the various WIP "connector" abstractions are trying
> > to solve.
>
> Thanks for clarifying. However, as I mentioned above, there are usecases
> for dynamic overlays outside of connectors. Specifically, for the
> usecase of connecting random sensors to board pins. I do agree that any
> fairly well specified connector should probably have it's own drivers
> rather than using a generic userspace API.
>
> Would it be enough to use `aliases` to specify the nodes where an
> overlay can be applied as I have described here [0]. To further lock
> down things, it might be possible to allow introducing indirection or
> scoping nodes of sort. Here is an example:
>
> \ {
>
> aliases {
>
> export_node0 = &spi0_scoped;
>
> };
>
> };
>
> &spi0 {
>
> spi0_scoped {};
>
> // Stuff already connected internally
>
> };
>
> Any children of `spi0_scoped` should be treated as devices directly
> connected to `spi0` but should provided isolation for any changes that
> userspace overlays can make.
For i2c bus, I introduced i2c bus extension feature.
https://lore.kernel.org/all/20250205173918.600037-1-herve.codina@bootlin.com/
The series didn't received any feedback from i2c maintainer yet but I hope
to have soon.
The approach proposed the series could be adapted on spi busses too.
Do you think the bus extension approach could be used in your use cases ?
Best regards,
Hervé
next prev parent reply other threads:[~2025-02-24 13:29 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-02-22 20:13 [Question] Status of user-space dynamic overlays API Ayush Singh
2025-02-22 20:31 ` Heinrich Schuchardt
2025-02-24 5:58 ` Ayush Singh
2025-02-24 8:37 ` Geert Uytterhoeven
2025-02-24 10:09 ` Ayush Singh
2025-02-24 13:29 ` Herve Codina [this message]
2025-03-05 4:31 ` David Gibson
2025-03-10 5:22 ` Ayush Singh
2025-03-05 4:27 ` David Gibson
2025-02-24 11:24 ` Luca Ceresoli
2025-04-30 10:18 ` Ayush Singh
2025-04-30 13:07 ` Luca Ceresoli
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250224142900.0dde56a4@bootlin.com \
--to=herve.codina@bootlin.com \
--cc=afd@ti.com \
--cc=ayush@beagleboard.org \
--cc=d-gole@ti.com \
--cc=david@gibson.dropbear.id.au \
--cc=devicetree@vger.kernel.org \
--cc=geert@linux-m68k.org \
--cc=gregkh@linuxfoundation.org \
--cc=jkridner@beagleboard.org \
--cc=lorforlinux@beagleboard.org \
--cc=luca.ceresoli@bootlin.com \
--cc=pantelis.antoniou@gmail.com \
--cc=robertcnelson@beagleboard.org \
--cc=xypron.glpk@gmx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).