Add netlink directives and ndo entry to trust VF user. This controls the special permission of VF user. The administrator will dedicatedly trust VF user to use some features which impacts security and/or performance. The administrator never turn it on unless VF user is fully trusted.
Showing the changes to include/uapi (1 of 4 files). Show all
Unified · Split
| @@ -550,6 +550,7 @@ enum { · 549 unmodified lines | ||
| 550 | 550 | * on/off switch |
| 551 | 551 | */ |
| 552 | 552 | IFLA_VF_STATS, /* network device statistics */ |
| 553 | + IFLA_VF_TRUST, /* Trust VF */ | |
| 553 | 554 | __IFLA_VF_MAX, |
| 554 | 555 | }; |
| 555 | 556 | |
| @@ -611,6 +612,11 @@ enum { · 55 unmodified lines | ||
| 611 | 612 | |
| 612 | 613 | #define IFLA_VF_STATS_MAX (__IFLA_VF_STATS_MAX - 1) |
| 613 | 614 | |
| 615 | +struct ifla_vf_trust { | |
| 616 | + __u32 vf; | |
| 617 | + __u32 setting; | |
| 618 | +}; | |
| 619 | + | |
| 614 | 620 | /* VF ports management section |
| 615 | 621 | * |
| 616 | 622 | * Nested layout of set/get msg is: |