From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753763AbdK2JVN (ORCPT ); Wed, 29 Nov 2017 04:21:13 -0500 Received: from mail-pf0-f194.google.com ([209.85.192.194]:43791 "EHLO mail-pf0-f194.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751676AbdK2JUm (ORCPT ); Wed, 29 Nov 2017 04:20:42 -0500 X-Google-Smtp-Source: AGs4zMZNjBtfgMDV3BX+UJp+3PS2UT7s1KkqnFAPMe4OmWsb+5cpdUMNUzEJFRRnxN6zBQusqjA/jA== Subject: Re: [RFC 0/2] of: Add whitelist To: Alan Tull , Rob Herring , Pantelis Antoniou Cc: Moritz Fischer , devicetree@vger.kernel.org, linux-kernel@vger.kernel.org, linux-fpga@vger.kernel.org References: <1511816284-12145-1-git-send-email-atull@kernel.org> From: Frank Rowand Message-ID: Date: Wed, 29 Nov 2017 04:20:27 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <1511816284-12145-1-git-send-email-atull@kernel.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 11/27/17 15:58, Alan Tull wrote: > Here's a proposal for a whitelist to lock down the dynamic device tree. > > For an overlay to be accepted, all of its targets are required to be > on a target node whitelist. > > Currently the only way I have to get on the whitelist is calling a > function to add a node. That works for fpga regions, but I think > other uses will need a way of having adding specific nodes from the > base device tree, such as by adding a property like 'allow-overlay;' > or 'allow-overlay = "okay";' If that is acceptable, I could use some > advice on where that particular code should go. > > Alan > > Alan Tull (2): > of: overlay: add whitelist > fpga: of region: add of-fpga-region to whitelist > > drivers/fpga/of-fpga-region.c | 9 ++++++ > drivers/of/overlay.c | 73 +++++++++++++++++++++++++++++++++++++++++++ > include/linux/of.h | 12 +++++++ > 3 files changed, 94 insertions(+) > The plan was to use connectors to restrict where an overlay could be applied. I would prefer not to have multiple methods for accomplishing the same thing unless there is a compelling reason to do so. -Frnank