Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.36 as permitted sender) client-ip=23.128.96.36;
Date:   Fri, 8 Dec 2023 09:34:38 -0400
From:   Jason Gunthorpe <jgg@nvidia.com>
To:     Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc:     Saeed Mahameed <saeed@kernel.org>,
        Aron Silverton <aron.silverton@oracle.com>,
        Jakub Kicinski <kuba@kernel.org>,
        David Ahern <dsahern@kernel.org>,
        Arnd Bergmann <arnd@arndb.de>,
        Leon Romanovsky <leonro@nvidia.com>,
        Jiri Pirko <jiri@nvidia.com>, Leonid Bloch <lbloch@nvidia.com>,
        Itay Avraham <itayavr@nvidia.com>,
        linux-kernel@vger.kernel.org, Saeed Mahameed <saeedm@nvidia.com>
Subject: Re: [PATCH V3 2/5] misc: mlx5ctl: Add mlx5ctl misc driver
Message-ID: <20231208133438.GP2692119@nvidia.com>
References: <2023112922-lyricist-unclip-8e78@gregkh>
 <oxtcvxwbj2hzv4lxnxubo3hoxn7diyzhm2oj3tsw2toxbc3og4@ddglhm6r3oa5>
 <20231204185210.030a72ca@kernel.org>
 <fgalnohzpiox7rvsf3wsurkf2x3rdtyhwqq5tk43gesvjlw6yl@i7colkh2sx5h>
 <20231205204855.52fa5cc1@kernel.org>
 <kakenvblxlgrkjvcrwfflnkm6n5fpxgr4qifwkdttjascth3te@57us7mblobjz>
 <20231207092329.3ec04dca@kernel.org>
 <uedlocmp2guvvhgxe2cjrjog3qf6pd7puj7idpygxxpjrnnj2p@nqmg66juf6xm>
 <ZXIWzBxR3S39Snn3@x130>
 <2023120832-vegan-trustable-f89a@gregkh>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <2023120832-vegan-trustable-f89a@gregkh>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?yvhYLSaU2jyblCZjQYQarcCeB7kSnzP4jkQMN7zYWgn9lLQ9YyPZwVKVnaz1?=
 =?us-ascii?Q?Z6i0F/CpqTzeEVvVx9Dk/Bl6CQk/P/GDvJ9vbEwoWgFSd3ublpLTrR1oEFVz?=
 =?us-ascii?Q?ojWUIsPlOP70LQHPB5Mwvwoe8t50XQYq2nI10IOnCAlcjqTbywd08wrLX238?=
 =?us-ascii?Q?s9RiPI5eLFiy+15GKpmFRHov+2kvPiEGGZcL97neX43EynD7jH298JZkUY7m?=
 =?us-ascii?Q?QkFdHuqWhSMIF+L17bhK0ShwLD6a1uQpzznsOhWfCX3GRPFHWiD14IZLa4i8?=
 =?us-ascii?Q?9u0QiJdHz2zw0hk3o2Gt1tHdX6GTEQ4WnsVhAsw+VaU/OQ6dvAW/amtGHIar?=
 =?us-ascii?Q?radYPLNj5CmG+Xbf4r548CIgOl+Onn4jukTeZEcnzIZgHh/lS9BFwiLhIF+J?=
 =?us-ascii?Q?D5fkw7psy27h1MeRmCmZQ4cjU+LgEaEBU9BdOdGadOJ2yXJLUcSgDFNrhFZ/?=
 =?us-ascii?Q?B6VXdQNa5bt9KiEm0/5RjLtzNU8q4f6F4y5gxu2lnt5R7ySFqHFHmep8Mtt3?=
 =?us-ascii?Q?/Q8xaInXObbJzxD9OHVanEcWR50UUpXw9fpbtKuBPfS8zIAdR7KA0kWyRqnY?=
 =?us-ascii?Q?4qCdFdCxxQR7FHTq5UIuJYA2DPijI2tM2yWLPJiObH/pw4REUCs9c/Do7REs?=
 =?us-ascii?Q?eLC1NB62l+KuRShJWS21D91vFki9w+3VnQfYBVwJ4GuYPgkqUYiorR91YuSY?=
 =?us-ascii?Q?q1d09ok7Mist43crZVSfw+cktu/OsQHkuxYEBViX37zRqqQj02LWTdL9P4zD?=
 =?us-ascii?Q?7VKAZHiqA2/dhimMlpiNjSdTAs/Go3cXKhywBwq+eaMe9eO/KOInV9SrplE4?=
 =?us-ascii?Q?tXWC1ZZor1cnQ+dP+mRCZMUs/IdxWLoCitbbja49L8cPruDDwTmQD6FNUe2U?=
 =?us-ascii?Q?nZB9dXcZRt7Ve2ucSzvjKBXBVwFG9R++m3nLwlDGI354xfvcEk1YQ+qTcc1P?=
 =?us-ascii?Q?8utjJspTwXeoNcm44mdhu/WNNEQy6aPo0fBpmpfcVfS9S1fF8w4hIemoTic0?=
 =?us-ascii?Q?LIRjpB4LhswOxu+8204iqsQ2w5ZzvvYTntRAeEAD6aDCyPrHCtlPiQBwp2XH?=
 =?us-ascii?Q?xZF5GHahHWdtfWxipJJR89zD1/OFUyKoZf3vxWpmRe682rS3VJa+Lz6564Yk?=
 =?us-ascii?Q?IBHUE/hoiECnC9z+5Ce0TwOgnFWz39FGZisQvm5iw3gIq6UsWikiGyX9I+SW?=
 =?us-ascii?Q?SYcyB4YP+PXhAYNIO4npwZelYO/wgzMqlKLh+fSnPxLrsFC6h/DyCzKYES/h?=
 =?us-ascii?Q?zJ+7tvNtJp6SuI76/TQBbKmcviXq7TYNb1XJrmY5SI9weJipMxOp2X46vuRa?=
 =?us-ascii?Q?7lvz101shN86Z4M+n4ZTU/CLSMNrtcGn0KyvXR5KelPGfxqq1io/8LZVNsvF?=
 =?us-ascii?Q?btZVMqPEhDMr7rlQo3yTy13kB7w4vjwPCMBDNx5aCQYwFMOGUsZPoNDrJ+zN?=
 =?us-ascii?Q?dba52/ssLcvoLJS8S/nVNx0E+W/LeLpFFMTS7EebhY3hKW+UVUc/z/yYSJIu?=
 =?us-ascii?Q?sy0zw3sn8gJYtzpc8RPq0fKB5QFJdc1zxlfOUbaW1BEQnhoIIKMY7za/IEes?=
 =?us-ascii?Q?MASN94cnHxF8OqAM8aHwX0nUt7NeStvD45kKQhEG?=
X-OriginatorOrg: Nvidia.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 295b9fdd-18a4-4e0e-0c40-08dbf7f26d32
X-MS-Exchange-CrossTenant-AuthSource: LV2PR12MB5869.namprd12.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Dec 2023 13:34:39.1118
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 3wAcyKPwQK2tYCkpUICUNPLJWFfyNJueNyejPJOk8JWWmYwKFplQ4aqWD7H80v0v
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR12MB7409
X-Spam-Status: No, score=-0.9 required=5.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,
	MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE
	autolearn=unavailable autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on pete.vger.email
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org
X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.4 (pete.vger.email [0.0.0.0]); Fri, 08 Dec 2023 05:34:53 -0800 (PST)

On Fri, Dec 08, 2023 at 06:29:29AM +0100, Greg Kroah-Hartman wrote:
> On Thu, Dec 07, 2023 at 11:02:36AM -0800, Saeed Mahameed wrote:
> > I would like to add that debugfs is usually used to expose the driver
> > software states, as it evolves and changes with the driver code, but as I
> > explained in the other email, it's clearly not a good solution to expose
> > arbitrary objects of complex devices, that require interactive and
> > selective debug interfaces tailored to the user use-case.
> 
> Why not?  Remember, the only rule in debugfs is "there are no rules!"

We already have debugfs files to issue RPCs. They are not secure and
not lockdown compatible. Few users have been interested in this, Aron
does a good job explaining the general perspective I've seen in many
places.

Users want an in-tree solution that is compatible with lockdown. A
solution that works for all the mlx5 deployment modes (including
Infiniband native without netdev) and covers most of the functionality
they previously enjoyed with the /sys/../resource based tooling.

This series delivers that.

Nobody has offered an alterative vision that achieves the same
thing. There have been lots of suggestions how to do small little
parts, but not everything together as this does.

> Well, there is one practical one, "do not rely on debugfs for any
> functioning system properties"

Jakub expressed additional "netdev only" rules for debugfs.

  Read-write interfaces must be constrained to a clear set of commands /
  settings

Which I think is what Saeed is reacting to.

Jason