RDMA/uverbs: Introduce UCAP (User CAPabilities) API

Browse source

Implement a new User CAPabilities (UCAP) API to provide fine-grained
control over specific firmware features.

This approach offers more granular capabilities than the existing Linux
capabilities, which may be too generic for certain FW features.

This mechanism represents each capability as a character device with
root read-write access. Root processes can grant users special
privileges by allowing access to these character devices (e.g., using
chown).

UCAP character devices are located in /dev/infiniband and the class path
is /sys/class/infiniband_ucaps.

Signed-off-by: Chiara Meiohas <cmeiohas@nvidia.com>
Link: https://patch.msgid.link/5a1379187cd21178e8554afc81a3c941f21af22f.1741261611.git.leon@kernel.org
Reviewed-by: Yishai Hadas <yishaih@nvidia.com>
Reviewed-by: Zhu Yanjun <yanjun.zhu@linux.dev>
Signed-off-by: Leon Romanovsky <leon@kernel.org>

...

This commit is contained in:

Chiara Meiohas 2025-03-06 13:51:26 +02:00 • committed by Leon Romanovsky

parent 1d5c69514e

commit 61e5168281

4 changed files with 301 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

drivers/infiniband/core/Makefile

View file

267

drivers/infiniband/core/ucaps.c

View file

2

drivers/infiniband/core/uverbs_main.c

View file

30

include/rdma/ib_ucaps.h

View file