lkml.org 
[lkml]   [2015]   [Nov]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: Is ndo_do_ioctl still acceptable?
    From
    Date
    On 2015-11-12 11:58, Jason A. Donenfeld wrote:
    > Hi Stephen,
    >
    > Thanks for your response.
    >
    > On Thu, Nov 12, 2015 at 5:34 PM, Stephen Hemminger
    > <stephen@networkplumber.org> wrote:
    >> The problem is ioctl's are device specific, and therefore create dependency
    >> on the unique features supported by your device.
    >> The question always comes up, why is this new API not something general?
    >
    > In this case, it really is for unique features of my device. My device
    > has its own unique notion of a "peer" based on a particular elliptic
    > curve point and some other interesting things. It's not something
    > generalizable to other devices. The thing that makes my particular
    > device special is these attributes that I need to make configurable. I
    > think then, by your criteria, ioctl would actually be perfect. In
    > other words, I interpret what you wrote to mean "generalizable:
    > netlink. device-specific: ioctl." If that's a decent summary, then
    > ioctl is certainly good for me.
    >
    On the other hand, based on what you are saying about your device, it
    sounds like you are working on some kind of cryptographically secured
    (either authenticated or encrypted or both) tunnel, in which case the
    fact that security is easier to handle with netlink than ioctls becomes
    important. If you can't ensure security of the endpoint configuration,
    you can't ensure security of the tunnel itself.


    [unhandled content-type:application/pkcs7-signature]
    \
     
     \ /
      Last update: 2015-11-12 21:41    [W:4.401 / U:0.072 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site