From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=209.85.221.182 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1793890796; b=0CYbHChLPBTR/QWtbvTFb80X9JrsCLLYsik/Ps0KoW1I9C7IU5r17XNr/n7oCNU+XNq0 Q0ANrbsa0mn/P32OBD0fCBnuNoPekwPWnQMZQ9T3PrbnWDsQt3MPzCZl50gSlrwPGHsY9 tkEbfZeMtrzvEM8RFyasgzDDlMfSC73n2rHLMnDNrPkl/N1YvTPZ9l65MLQNvUqdaNC89 mZZ5sGdyvYnXsln7sB0tgJbXTBkEw8BJAAjRVqWQyTS/aLkMZCYb0HJKPrg3ZHW9Mxm8D 6hck9AYM51bwMD9c/GDha7jzixTieWjmC4v5fv76TBf9yU+zIiYVk3K4KCvPKrDkyYw== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1793890796; h=DMARC-Filter:Received:DKIM-Signature:X-Google-DKIM-Signature: X-Forwarded-Encrypted:X-Gm-Message-State:X-Gm-Gg:X-Received:Received: Received:Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; bh=sv1GqJtGOVxD2bg62FKkDXwLV7ybcH0/LrV/szN48RM=; b=ikixo7ntY0J0SIBpDtMbb8Eoe1/uD0057dzEiZkA9L8xbGe+moSCyu8jLUO1xNSc3eoA yZEpu8SVCVYB98L3dJOt/bdTW+SJV40pYAw2EMSWoR3H98yx5ifvU7O6xaJUPLcrbKdlz KqgYj33TIMv9cWZlG8EExcZHmDkTN5Azhic/Y1r6GgqBDVlHHo0dkj3/hRAz1QlUr1O0b 1r880QGrG4Q+rBxRVip20E2R7NMeqAl89fnWuguu2fRjnQt/hLpFXYJ8wLsHxRAdsIBre ceIJl7DB6Tifg5yg/Eql1Q9sLVBoFqeZzAQZzCuaYDe3kjjzYfXceGyf5cHWwmm8qow== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=none header.from=ziepe.ca; spf=pass smtp.mailfrom=ziepe.ca; dkim=pass header.d=ziepe.ca header.i=@ziepe.ca header.a=rsa-sha256 header.s=google header.b=bpBlGkKK; arc=none smtp.remote-ip=209.85.221.182 Received: from mail-vk1-f182.google.com (mail-vk1-f182.google.com [209.85.221.182]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id ED973606D803 for ; Thu, 5 Nov 2026 14:59:55 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org ED973606D803 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=ziepe.ca header.i=@ziepe.ca header.a=rsa-sha256 header.s=google header.b=bpBlGkKK Received: by mail-vk1-f182.google.com with SMTP id 71dfb90a1353d-5eaa5e03c47so711487e0c.0 for ; Thu, 05 Nov 2026 06:59:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ziepe.ca; s=google; t=1793890795; x=1794495595; darn=vger.kernel.org; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:from:to:cc:subject :date:message-id:reply-to:content-type; bh=sv1GqJtGOVxD2bg62FKkDXwLV7ybcH0/LrV/szN48RM=; b=bpBlGkKKYmX68RAsE9EkcMc+aPwep+Jt4D7c/OZg3kVQeHpZyfmkntRrTHho6EP8wd Ydil1svNY3g9CpIhj2GHYQ7d434gL/SpPpSr+DXV/upiAZMCvC9nreTgfts3zuhMwCcm Qskdy4s4owr7KaU/9VifToG4uoaZc2rkAAcVF19z0f6dAbM64dHUzvDPxywg/TCQt9WF 2ooxRy05KElc/DdqHagH2RzabKyRAsKGjv0e7Kqhd2EeSxnmqf8lncs0n6nLDm8+XKat ++mZs0G+SfgC2WTprHf/u2SbYhDe7xP1yG7Q6zYRZWtdxX3hRx/GELgc/Kk/Jaz7fcIZ 8CIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793890795; x=1794495595; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=sv1GqJtGOVxD2bg62FKkDXwLV7ybcH0/LrV/szN48RM=; b=eAs/Xh66e2czGoD8qzGOHTP42V2ODnS6bqbgz1W19tMlCoOh34Y6RlG5fdnwQhrlGw 0fZkhYbNgkwGKoo1R+3LO5EHWXnI2y8TiXwIsus5P2bfb5Zo2/IZkdfHZb3Kpk4ExTvG dzHZXZQUbDWqUirpxvbUI+NOE5mETgOwpOJLkmiMLonYBxJCuElgqljtSboUuQCfNRKB q8rZcAMNOtd5eFKy9rEO8Zq4QJyqDXIVTIjhsuprpoYFEOo5teYc+CXO4dyCXEGK/2he TEVnwK8xf+CviPtmBLwSJ2ax82xVIjfV6Od1QCGAMMJxkrKqKQDZLRpX0b7rt/+4r20R nQvA== X-Forwarded-Encrypted: i=1; AKwUvBx0fc0nAMGkQ/R7YcaZ1Zjoi+zoe7mDay3VAvKa6oVU4jkjqtajXE0/T2+Yoi3o12ow6Y+By3jXmOzbk+xBbQ==@vger.kernel.org X-Gm-Message-State: APuU4Z9GCCEQtF7s4oE64XSjfFyOvRl+CGuCn/kTx9MGSh7ubeTZTl7f KZRZj8uCTVxOLgDsuHMtl0SQi20KFs21pIyMyvGSxO5lvj9U6wM+vPKe2Qhkq0EOnVk= X-Gm-Gg: AYBFou2GpabHjQ6B3LmJuEZt1gl9zC3ruJY7ZtEoo8+QH4xKxLIVFudSwyPejXuds6/ eZIp1RwRPQBuODGQWjIM3Y6OJZ0/v0r508/BJxKKEPkR5F9MXjiHDLDEUWzl3MBQfSdUG13qaRt CYJvC8mHS2qQDyRy1tyboce6RqkJjDMmHz+2Eep9u8d+RPsjgiMDHKGRpCGQZG+iDzmHtQsqGo/ MbUWww+/wBnwDhq8SgRpqqLBTHbYQsJosBN5Umlao9sqP+Ua1tvZ2Ssf5WiWLiji3MjgTTekoNr cCbkNle9GHqv/YHgTY6yXn9GnZnpcEgCHmcXqWG1d0y876HAjZY7nb4QoXECmvPEdYBPBIJbxwf 9PEAGoZbyHUIcP5d5l1DwjHe1Xb2C2qOycEnxOn5czs28Og3LegCWJg/tsQcQRGRkhLfSkI3hgG w4T/6O+xymf2D6FwCREf6Gw9UUL4e14IbmRtdrnF/WEkQsVelTJCMYxFsjfoUTPI03FOfEtYaOV 0fExJNhO2PqS2GoJU7CmcMoILAfxqtM5HrXm3pD7biwo4vmXwcx1pkb2hOwIPTnT1Z3nKF/wZUg HSq9wkDPsHVkHrT2hlIvx3jDKxd1qjv71KDeB8YJ6qfwX208+3bit6ytAlsc4Pzvf7AzGeJcvpn 6/TGAyTbKegU= X-Received: by 2002:a05:6122:6c0a:b0:5d9:302a:8243 with SMTP id 71dfb90a1353d-5ecb429571cmr1423011e0c.12.1793890794801; Thu, 05 Nov 2026 06:59:54 -0800 (PST) Received: from ziepe.ca (hlfxns010zw-159-2-239-150.pppoe-dynamic.high-speed.ns.bellaliant.net. [159.2.239.150]) by smtp.gmail.com with ESMTPSA id 71dfb90a1353d-5eca8df2a38sm4234612e0c.16.2026.11.05.06.59.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 05 Nov 2026 06:59:53 -0800 (PST) Received: from jgg by wakko with local (Exim 4.97) (envelope-from ) id 1xOywS-00000002o7b-2oaN; Thu, 05 Nov 2026 10:59:52 -0400 Date: Thu, 5 Nov 2026 10:59:52 -0400 From: Jason Gunthorpe To: Andrew Lunn Cc: Robin Murphy , Greg Kroah-Hartman , Leon Romanovsky , "Rafael J. Wysocki" , Danilo Krummrich , Dmitry Torokhov , Heiner Kallweit , Russell King , "David S. Miller" , Jakub Kicinski , Paolo Abeni , Johannes Berg , Jonathan Corbet , Shuah Khan , Randy Dunlap , Bjorn Helgaas , "Joerg Roedel (AMD)" , Suravee Suthikulpanit , Vasant Hegde , Will Deacon , David Woodhouse , Lu Baolu , Johan Hovold , Eric Dumazet , Marcel Holtmann , Luiz Augusto von Dentz , Nipun Gupta , Nikhil Agarwal , Pieter Jansen van Vuuren , linux-kernel@vger.kernel.org, driver-core@lists.linux.dev, linux-input@vger.kernel.org, netdev@vger.kernel.org, linux-wireless@vger.kernel.org, linux-usb@vger.kernel.org, linux-bluetooth@vger.kernel.org, linux-acpi@vger.kernel.org, linux-doc@vger.kernel.org, linux-pci@vger.kernel.org, iommu@lists.linux.dev Subject: Re: [PATCH 10/17] driver core: Expose device trust authorization through sysfs Message-ID: <20261105145952.GA663069@ziepe.ca> References: <20261105-device-trust-core-v1-0-1e536825b4eb@nvidia.com> <20261105-device-trust-core-v1-10-1e536825b4eb@nvidia.com> <2026110514-bunkhouse-handset-6a3a@gregkh> <20261105132729.GB8298@unreal> <2026110535-engulf-precut-cf10@gregkh> <9d896ebb-6892-4cac-a7c5-41def47f0be0@arm.com> <54c9476c-9f76-4ea1-a73a-c9937d6b463c@lunn.ch> X-Mailing-List: linux-wireless@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <54c9476c-9f76-4ea1-a73a-c9937d6b463c@lunn.ch> On Thu, Nov 05, 2026 at 03:43:53PM +0100, Andrew Lunn wrote: > > Yup, and that's true even in the PCI TDISP case - there's a major amount of > > "communication" and "configuration" involved in that. The principle which > > should (hopefully) generalise is that a bus/host controller driver can > > always interrogate its child device to perform whatever attestation and > > general configuration is appropriate, but we won't hand off any _control_ of > > that device to a specific device driver (nor enable potentially-impactful > > bus-level features like DMA, interrupts, etc. if relevant) without the > > requisite agreement between the bus code and the user. > > Maybe it would be good to list subsystems which the bus driver can > use, and cannot use. > > You list interrupts as potentially being dangerous. What about reset > controllers, GPIOs, regulators? At least in the embedded world, the > bus driver might need to enable power, set a clock ticking, and take > the device out of reset via a GPIO, before the device pops into > existence and will enumerate on the bus. > > I don't see why interrupts are dangerous, which makes it hard for me > to determine if GPIOs and clocks, and regulators are also dangerous? IMHO we shouldn't try to over think this. The overall point is to give the userspace a place to inject policy. Bus drivers should try as hard as they can to contain their child devices. Like PCIE should activate the iommu, disable ATS. USB should limit the messages it exchanges, and so on. When userspace accepts the bus driver it also accepts its containment capability. So if it accepts one that uses gpio, etc then that's fine. We are not the point of trying to describe what threat models various kernel drivers can support. Userspace has to figure that out on their own. Jason