From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=209.85.160.182 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1793055593; b=k0koqa421hDi/cf4x1mmad/PX8zWZ6yEysV6NqBS9FkTzJeJvGbkhWb+dZNHaBs84dpI l4oWxMFIyQP5SkV+nIPLKaRt5813pF/z+iwV5DcSjsRuV6fDxmgjmR70iL296fFadxAGg EFq9qGKdtMXC4W6dZkZsR681OJLCnMktUxyJO+yR2wntNZfyZUsRrmD8NO4D3rDoa6kDt VxJGakeu1PXDZSiETmrlTUrQcgSNAK2jxwt7id10E7LDXwWZWONac8lcM70N7Kr8D4pNy qb8I0ojsW9r1hpCkrvE5w3mEkDQSk4qWey9L+2qpq5SdD0znPPI+lUGQ6PvuuiTF4wQ== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1793055593; h=DMARC-Filter:Received:DKIM-Signature:X-Google-DKIM-Signature: X-Forwarded-Encrypted:X-Gm-Message-State:X-Gm-Gg:X-Received:Received: Received:Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:Content-Transfer-Encoding: In-Reply-To; bh=xYFlSdYSBy4efBRscq6PIWjy+kL+seLzZByRLeIBFMw=; b=HmKL9eAMEA/YRFSvdpy48RusoVIVVWlb/aDatb3ATaLBHnZJOIORRNZx0oD0cr91qwTu 3xGuX/Q4JaxgPp4fYfjKP03TzNm62U4coD/a7wTIOxYC3hCEZ40iacLa03R7I74OcvvED Rw9lSQLojq/6hpoMwzpiiNPgF91xBLz35TN0/58BQRniUSmUNvvESyVkhis8EoWHTii9J Yp5loUp4izrU0VezJVpYJSKj6ZoRdsXL5EiXlQV0fvtMaImwUDIzL+1TqzKPH1V/Dk9b0 vU69O6Cxvu39Fcb0BbBQjrLzS3y3CcChDXsxsrEw4KuDj5CKD5WywBUETTIuvFvGlbw== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=none header.from=ziepe.ca; spf=pass smtp.mailfrom=ziepe.ca; dkim=pass header.d=ziepe.ca header.i=@ziepe.ca header.a=rsa-sha256 header.s=google header.b=JtgX6t4H; arc=none smtp.remote-ip=209.85.160.182 Received: from mail-qt1-f182.google.com (mail-qt1-f182.google.com [209.85.160.182]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 13355606A320 for ; Mon, 26 Oct 2026 22:59:52 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 13355606A320 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=ziepe.ca header.i=@ziepe.ca header.a=rsa-sha256 header.s=google header.b=JtgX6t4H Received: by mail-qt1-f182.google.com with SMTP id d75a77b69052e-53394bffe0fso3906011cf.1 for ; Mon, 26 Oct 2026 15:59:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ziepe.ca; s=google; t=1793055592; x=1793660392; darn=vger.kernel.org; h=in-reply-to:content-transfer-encoding:content-disposition :content-type:mime-version:references:message-id:subject:cc:to:from :date:from:to:cc:subject:date:message-id:reply-to:content-type; bh=xYFlSdYSBy4efBRscq6PIWjy+kL+seLzZByRLeIBFMw=; b=JtgX6t4HkHHesY7n2JQPJyp+pm6/msV+LFkLCJeK62zQwbPs2o0eO3GuMpiwLyNqUP WdbCdxG4OXTrmFVlJcvkBmXQ9YK0s18xT86CS06J9aePaF02lGMjkyV+i9+s8AUyZYEo sVBYaHLO/lJaW0Nf3fxwP9S6DP4jpS3e3B7HPfWGx8noGECoZeSPzRqN8XrpE4+O7Hd6 nE+g5KgftytnmNVxGTrNW812PMJZKe7xsMJRVS1IsYJ+7VcaMIV2Aq2Mx2fYBPvmFlNB KVI3wubDsUSR0XMK4VovCsCi/Ayb1GFD6RmHsKOHAd50F1EKGy7VTJQkptwcIKutBLP3 4sVA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793055592; x=1793660392; h=in-reply-to:content-transfer-encoding:content-disposition :content-type:mime-version:references:message-id:subject:cc:to:from :date:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=xYFlSdYSBy4efBRscq6PIWjy+kL+seLzZByRLeIBFMw=; b=ODC3bIM1/9B8f1Hauz8nhpnXIP1l8ipgymSfdq8poZ4lfnjB7memc2jcs2LhKbZtQe FABpumyBB6pWJqkKfB4J3dkRdnG2mFuup8R6JaWSk6/kW6tpnLRG3SOg/lhAn6SfROHR 2IhTtjtJDk+Q2vDhC/jxQhKpX/pkmPCON4mF2ybGXtFHUPawv4kNtcmNd08gkw/P5chK I254SCBKgFxlMnW3mvIOOtF+xf9DNkdliu63p6ugYtq9jyv8hdz56yXcFnhZDv8qkhOj Xe1rUGnEiIA0yKwJSJ/2t81/40JorR6bMR/KBOiG7mCLH4OsdyYOWrqNQAvMm9JV5TYp roEQ== X-Forwarded-Encrypted: i=1; AKwUvBzwpm+hLOHNEoBqhO5nkEQVWioTBvCFMRT6ydFhy80JV4H835+/a2I0CkutCGx/30EO6s8IyiK4BTw=@vger.kernel.org X-Gm-Message-State: AFq9FYIsZr/1huqQXTCV4da2zK120sDdLQhPo4gDlGB0Q/Ot0QKuy/k7 Zb5PE383hlzwaQvYDo8neodC39n4uRWBhTyGirmlMMBeUEfXyV/9vRcMk+t8/nrjFdM= X-Gm-Gg: AYBFou0xrQ31X00zhiAOsuBRxeIXT72Puo/za/MVYcztMcACbC0H7sO6YIZY2FVgjFg vtNfHC6w3p2+kCH0dmR9vjFo0NcOXk+YyE96ZiF67yAAqX/ETDeTm5Z0Hdu627KjyZS1STa7Gv1 3wXaO/W4ENjN+h8nJBSTPQUdN8DqMoVgjNir3PSVnuuA8KVlrcaAc2m/ySIvR0UJuzvmaN+2qtG eEsItoT1j/lWZ9H+AmenHGzuJYoAIB7PZY/fFL2gEytv3YF0aVEu6oLT7yUmtR8Lpl/lyRsUapA E4YIs1ohZe9qzWe0l8YvNEefnTQcXqdoz369KmXaVnSCcHvpdyU7XCbBkzohl7eC591lAdr9N60 752pm2Ac+9nFAYjDotBMrzUKRtA8ubDHQwGNTMHxvTUE9iAVbyRdB29wr5bZnwHeBAfSdb8Yz0k NKkPGyIC+DBaJx02+DxN7nn39KLIBWkttWyjMyPw3YdrbguNtQofqzq56GTmAWr7MdZjiGxouak dHWjZ8lLrUOdm0RZyjQhRexsaJ9wQ87hn1kFdIFHQYTJv8hIm27NUhuXmJo4SjAUAussbhy7kzY 7VoeGLZEAn+iXqvdebfaH7qQPgWt+W3ULeETeg== X-Received: by 2002:a05:622a:5c06:b0:536:60a0:5515 with SMTP id d75a77b69052e-53e3f95510fmr21198101cf.17.1793055592065; Mon, 26 Oct 2026 15:59:52 -0700 (PDT) Received: from ziepe.ca (hlfxns010zw-159-2-239-150.pppoe-dynamic.high-speed.ns.bellaliant.net. [159.2.239.150]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-5383970ac84sm65824991cf.20.2026.10.26.15.59.51 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 15:59:51 -0700 (PDT) Received: from jgg by wakko with local (Exim 4.97) (envelope-from ) id 1xLTfS-000000089Kh-2dEv; Mon, 26 Oct 2026 19:59:50 -0300 Date: Mon, 26 Oct 2026 19:59:50 -0300 From: Jason Gunthorpe To: Uwe =?utf-8?Q?Kleine-K=C3=B6nig?= Cc: Greg Kroah-Hartman , Alex Williamson , Armin Wolf , David Lechner , Danilo Krummrich , Luis Chamberlain , Petr Pavlu , Daniel Gomez , Sami Tolvanen , Aaron Tomlin , Jonathan Corbet , Shuah Khan , Randy Dunlap , "Rafael J. Wysocki" , Steven Rostedt , Masami Hiramatsu , Mathieu Desnoyers , Bradley Morgan , Aleksandr Nogikh , linux-modules@vger.kernel.org, linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-usb@vger.kernel.org, driver-core@lists.linux.dev, linux-trace-kernel@vger.kernel.org, Johan Hovold , Richard Weinberger , Thierry Reding Subject: Re: [PATCH v4 0/3] driver core: add TAINT_FORCED_BIND for when userspace manually messes with devices and drivers Message-ID: <20261026225950.GD1685504@ziepe.ca> References: <9bd3a34b-5e98-4038-80d6-da2c3b1948dd@gmx.de> <2026092321-province-yearly-44aa@gregkh> <2026092348-victory-erased-0e5a@gregkh> <20261023181326.0dc2f7ed@shazbot.org> <2026102437-vista-unsoiled-b089@gregkh> X-Mailing-List: linux-doc@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: On Sun, Oct 25, 2026 at 01:48:04PM +0100, Uwe Kleine-König wrote: > The more I think about this taint, the more I believe the commit should > be reverted and replaced by a some stop gaps for driver_override. (Be it > a taint or better yet > https://lore.kernel.org/all/0f7446324f6a0c8f0153d6532d92a6eeecd6a308.1790612298.git.u.kleine-koenig@baylibre.com/ > .) I also think this patch is way too broad and should be reverted until something better is designed. To me this is very similar to the filesystem issue with syzkaller fuzzing the block device and crashing filesystems. They said filesystems touching untrusted block devices is out of scope. Same here, kernel drivers touching untrusted HW are out of scope, we have never supported that. I think a taint from force binding outside a match entry and using new_id are probably about as far as this idea should go. Even this would still regress most common VFIO instructions though, so some kind of disable for VFIO would be needed. I don't agree with the assertion 'servers are already always tainted' that doesn't match my experience at all. unbind should not taint, we support hotplug, and manually binding an authentic match'd driver should not taint. Jason