From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from fra-out-007.esa.eu-central-1.outbound.mail-perimeter.amazon.com (fra-out-007.esa.eu-central-1.outbound.mail-perimeter.amazon.com [3.75.33.185]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B506223BD06 for ; Thu, 25 Jun 2026 22:19:15 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=3.75.33.185 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782425957; cv=fail; b=k2weHrySBnQTkAt37CxS4b5xhENxs1cUShAtOEnrLr1gw2kV3m2N9VPqCH/YVCQGxN1h/FCbStaztjVFGhIBg999xfaWPWtrW0fjra0r6ECs+HwahjjeNpHl6xkzy3ZJjLEZt1fdT6RpvLBFeoMQE6AAqUASs2TZuK5lFQbpZ/g= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782425957; c=relaxed/simple; bh=7+8L2idZpZA4hn4gigLObekRoVk/md4DlgWHV7vHpsA=; h=From:To:CC:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:MIME-Version; b=OOzPredy98tiu2ug18ifOjOC9ksm8YvvRVLext3+rFWY8Y51/3foPKat2oDiNXiEVgr0FOXdgQStdq5nqR1LpRjr1qFBLDRAVPA4lQhw2A/m19BjhBqIa/4gNrvFU+VQgLGdKjpby4nBftRDQPc9dqBqSUYyN5mAxAlic3CWi9c= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amazon.de; spf=pass smtp.mailfrom=amazon.de; dkim=pass (2048-bit key) header.d=amazon.de header.i=@amazon.de header.b=krmtk2Uc; arc=fail smtp.client-ip=3.75.33.185 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amazon.de Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=amazon.de Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=amazon.de header.i=@amazon.de header.b="krmtk2Uc" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.de; i=@amazon.de; q=dns/txt; s=amazoncorp2; t=1782425955; x=1813961955; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:mime-version: content-transfer-encoding; bh=7+8L2idZpZA4hn4gigLObekRoVk/md4DlgWHV7vHpsA=; b=krmtk2Ucnpq1nxH4EpBgtB6M7GyPlWZSnjoEzFvcggzaTMsHe/meQaO1 Rqr27WeNUsGQ5ikZr7CgcQtmCvMTkCU5nglsbaQA/o6dll7VV2TB7I29i w9ZkHLiCN0decHGh9Y7XBi/kKytMCTmfQmpSSyQk9h2PXozq9UZLfKuxm 2xjwnPrQdKf/vFfv3pc8JweeH5Um6LO/5WoPt2beNojgQ5o+JAF3oBrbs DTxf/k/llSDEQi1Q0QbbgVEH+9KLP1F8ZjJu/bRVpqeRmXsHe5NWa7IWb 3vhF9m3gziV3fcctfRgEau5IZgplLgTlAkxi5u/DRZVoLcuMSwOdV32Fl g==; X-CSE-ConnectionGUID: W7OIJZKRTSe0ilRp7a4jQw== X-CSE-MsgGUID: IjwRydbxTRyIf6+gbFWUXw== X-IronPort-AV: E=Sophos;i="6.24,225,1774310400"; d="scan'208";a="15679282" Received: from ip-10-6-11-83.eu-central-1.compute.internal (HELO smtpout.naws.eu-central-1.prod.farcaster.email.amazon.dev) ([10.6.11.83]) by internal-fra-out-007.esa.eu-central-1.outbound.mail-perimeter.amazon.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 25 Jun 2026 22:19:12 +0000 Received: from EX19MTAEUB002.ant.amazon.com [54.240.197.232:4846] by smtpin.naws.eu-central-1.prod.farcaster.email.amazon.dev [10.0.11.179:2525] with esmtp (Farcaster) id 5c5ceff0-98d3-408e-a3f0-43ca7a030e47; Thu, 25 Jun 2026 22:19:11 +0000 (UTC) X-Farcaster-Flow-ID: 5c5ceff0-98d3-408e-a3f0-43ca7a030e47 Received: from EX19EXOEUC002.ant.amazon.com (10.252.51.145) by EX19MTAEUB002.ant.amazon.com (10.252.51.59) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.2562.43; Thu, 25 Jun 2026 22:19:11 +0000 Received: from EX19EXOEUA002.ant.amazon.com (10.252.50.139) by EX19EXOEUC002.ant.amazon.com (10.252.51.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.2562.43; Thu, 25 Jun 2026 22:19:10 +0000 Received: from FR6P281CU001.outbound.protection.outlook.com (10.252.51.94) by EX19EXOEUA002.ant.amazon.com (10.252.50.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.2562.43 via Frontend Transport; Thu, 25 Jun 2026 22:19:10 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=yLUtZ20TeMJAjU9NNdC7uxNemiKHRPVdFIKIs5RX5sj7a9Dc1HS8LUjGb/UKJfo81sY8yWFU0kbbNY23cJQa60SGSIYpfoyC4ZS/BOlCZTcIWGr8psB0lHpl+qo3if/v28u1C+hnTn7sMBLyie2bY/hfseIpAg7C4r6vpp+cx6sgCsFwD0oa1vYctET2RRrBDdcBSzK5fQNA4dhqDVVBRju1jggnNZ/3DPIRYQAHAyFl555W4ZoN5e0BsoFF5Nplofb4+ZD+zre2XwfUC6kCMNzyxETykuI2UwbeL6DmAYMaPOkEB+AbT2S1YBmrlpJifNyMpyxJyC2foMtGLUUl2Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=qIji820uqzc8NdyhyPZi8idim8rS6fvhpWn/2rPyMB4=; b=Bvpi4E0tsxe8MuFtKedU2wuTLgdLrIb5Cur3KF4na01uFpJ0XcHptIXQN5j3+h24sBVLdsOp+2EWdJgOblA+NaOJK0BIuxYC1SPFVUXY3mEL9uxLzkX/MEz1otIbr4p0NsOcd0NAdfFHl2UhMXIJeb7ihlTMnJlKoeYJ6n2MCX5RbyCPQK2RTZVf+c4Z4vcR8armox5ob2cQNslAUamEdun/JHD0wdQfiiEh0U4dpZ9u3qu5Fydh9QeYYxcq099eOb792BAxwlkHrSYVg4gFcVsT0Twv5lVLt1NtzAuuWs88TQXlfdiKctQBbb7z0LrfswtbViWai29LZzIt4PVFsQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=amazon.de; dmarc=pass action=none header.from=amazon.de; dkim=pass header.d=amazon.de; arc=none Received: from FR0P281MB3020.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:54::12) by BE3P281MB5808.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:f8::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.17; Thu, 25 Jun 2026 22:19:07 +0000 Received: from FR0P281MB3020.DEUP281.PROD.OUTLOOK.COM ([fe80::6924:1313:12cd:49a9]) by FR0P281MB3020.DEUP281.PROD.OUTLOOK.COM ([fe80::6924:1313:12cd:49a9%6]) with mapi id 15.21.0159.015; Thu, 25 Jun 2026 22:19:06 +0000 From: "Graf (AWS), Alexander" To: Yousef Alhouseen CC: The AWS Nitro Enclaves Team , "Arnd Bergmann" , Greg Kroah-Hartman , "linux-kernel@vger.kernel.org" Subject: Re: [PATCH] virtio: nsm: require CAP_SYS_ADMIN for raw messages Thread-Topic: [PATCH] virtio: nsm: require CAP_SYS_ADMIN for raw messages Thread-Index: AQHdBPCjV5R2futoMEGaXhe0CsGGfg== Date: Thu, 25 Jun 2026 22:19:06 +0000 Message-ID: <7eacf065-68d2-413a-9783-4153c5e9c874@amazon.com> References: <20260624173641.4529-1-alhouseenyousef@gmail.com> In-Reply-To: <20260624173641.4529-1-alhouseenyousef@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=amazon.de; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: FR0P281MB3020:EE_|BE3P281MB5808:EE_ x-ms-office365-filtering-correlation-id: c8e7a034-e542-4b12-9752-08ded307c5b7 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|366016|376014|23010399003|1800799024|18002099003|22082099003|38070700021|11063799006|56012099006; x-microsoft-antispam-message-info: 4iB+Yh20c0+MzW95S01dc49d5uHOX13+R57QMqNQgdhiU0x8uRPZBU4dSO86m66h2KjlVIxkKY+G7/rbnS0pI0xUGBHMJzm5asX8P/II4nPGeu8IXs1GDS5i4j5TDZ+3jya5ciAdRwBaHsEI4CnTGDvBI5d3DC0+NOfVBewZMqMwPALaxel3P/IUUCEuUsfy1Sjmcwe7sAC7GqX7oBxoIRhOY61YYsPP66etqteQcZMGtd5f0I83GY7NyAFt4D3kVQsHbFExhXkhwf/9MQEojhkJrh1rNzAw8LEEXSf0I0WwDSp5ONn6MPgnry59pWrPlMcROP7RjdRzgmWvWCFvRkMFkIY9BZCaYY5PjsKXgJKQDf9+JYJ0kMSB18Oubz0p0zOlYCT2KUvXZE+venO037khjXApA2RD0KTQOZTOr1F6kO1SXRjQxK7LKx1BFhpKPopGnECmlKzx1YQUMGRnBYl3pxRaEIDUHhD/agfLbwjI+LRb+pQJrjvsnza4H/8J1u35r5LWhnkM5yjVAjd7LDBS4+OJ3h2AH1Pt2Aa7jath6dgOycvzo2R29G8zuhH1gcJY5tbafYB1ueFIEBdV0ld0pMWy0eu/bh1gvZUWEInvcgHigasMmKY+g5YhTCHiHVpmPmKxws/PXNebrQWtO6H4VLrhaALI7W72ys0Jd9NSFG3I3EF7fiMqAPhL3pqGomaw74IOYmxUKGMFMkjBUeCXTnsxGMOfV4rXwDlZ/sM= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:FR0P281MB3020.DEUP281.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(23010399003)(1800799024)(18002099003)(22082099003)(38070700021)(11063799006)(56012099006);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?aENJMlluUFlVaUNXYlN6cytlR2g4NkgwR2FJSzNZNld5eC9YU2lUM0RwOGx0?= =?utf-8?B?ZUR3dXQ5NXhSNElKb0ZIU1pvbjhiYmV3Vjd6VDgrUUxjWTF1dThwYU5VWDNw?= =?utf-8?B?dHJhK00wRG4xbTlUSVFQTTY3S3RWc3ZUQzU4RVRGbFRVZXBCcTFEd0hvdS9u?= =?utf-8?B?cmJJc1JrTFByOGIxY2g5aGlRd214dGdLRjZTWVh0d0VVaFdnZU9EcEYxczF0?= =?utf-8?B?Q3hlVzJTUHloMTFmVGxhWGZsTWhSVUhGWFZWWktDeUN4ZmlpdVl1UzJxL05P?= =?utf-8?B?Ym1QRUFId01HbUdWT0ZqT09PdWZhd3ozQ1FrQUNrRUVOd3VYRm1tVmlTWmxI?= =?utf-8?B?eGM2d3VLa29sYWZPOUh2bTd2WFJibk1ra1FWL1lMcitPRktGOEFWNkYwS21j?= =?utf-8?B?V0kwNUVwelFqQnZpWjJKOFlHV09ESGJic0lSU1R2OXg5bTFPVW56SjYrdTk3?= =?utf-8?B?M3JmdENoNHNZVmMyZmt5Nlp1amFVTHpkR2E4czh6QjlOQ1Q1Y2NrT2IvMDB2?= =?utf-8?B?Zm5Hc3dRYk5WVUQ4cjZ4NzBZNC9SNlo2Ukl5eloyY2dTcVpzVmVhOVFmWGhH?= =?utf-8?B?Q1djMVZkZUZqMTIxWmpGUW5hMEIvVzR4U21Ycm9WQzVuWlNOc2ZhY1l0QkFv?= =?utf-8?B?REVsZjYyN0pNRmFYTkdJaWR1TGpJTDU5MTIxUDRDdVlkVllKYVhrQmZNK0xq?= =?utf-8?B?QzJacy82aldPL05nVkdWVUdydVEvYkhWYjM3UThFd3hKOURLZUtsMWhrOXYy?= =?utf-8?B?Si9RVk1Lc2pDWlpJa2pIWVpEU0gwNjczQjBQZFZCd1VvbDYraisyMjg3TytH?= =?utf-8?B?KzN5dk9iTm80NDl2RitGVllJR0ZQdGNhUEJMMVRuR0l3QzBaWitMQlVIN092?= =?utf-8?B?VXFycmEyUVpmV3VnVERLU29pVWxSWlFrQWFKd0p1cFU2WnNBUzdFMUdBbytq?= =?utf-8?B?azlWMCtIMjhQejJTVVBzckpGY2cyMWE5Ky9ndzgrNWpGRUhueDV4VEdGbUxu?= =?utf-8?B?Y1d6Vis5b0RKaVgrWWlNQjdXVGZ5MnI0b0NOTytFZmt1THVIT284NE1KMGsw?= =?utf-8?B?aDNURVFFMU1ObWo5OHpaaTVpZE5MSHZpdEtxeWJlNFNpQlNVOVJhMFFXS2h4?= =?utf-8?B?L1ovNUhoV3lveXQ2Vkc5Qm1kc0xCVUpZa1BBQm95aExzcjNjbGs5VXlqdTZm?= =?utf-8?B?YVZXZHh3dmZEQnpVQStzZTc5dDJheU5qYUpyWituWHJLcEVvby9wbnlTc2Z4?= =?utf-8?B?cFhLOGZYME5XTk1sUmVDbE81R3dsRzJHSExrOFRZVVY0a3YxQ0wycWZHa3JY?= =?utf-8?B?MjRDeVVJSmNyN1NmeVBveHROZTR6RHNZdmZ2bStlQWVmakxkOWV6ckhENURi?= =?utf-8?B?dUhOYzZPa2JmMjBTWTNtcnhsL05vYTQrL2E3VmVqa0NLS3I0QmMzZGxCWWwx?= =?utf-8?B?TXNlTy9vVFYraGpJd0ZZVkhUb0g0b3dvYzB1alRhUERSYlBZVDBoTXgrYlV3?= =?utf-8?B?ZjhnR0JpTjgxajhnUXRqUVAxRTQyZllvenpmc09OZHdmeHZuMEtQT0tQa1Fw?= =?utf-8?B?UmNTWTgrbVZraVNydGpJb2NhUmltQVU3aTlpQmtBSkZuQ21vUFQyeERURjVU?= =?utf-8?B?RklIT1NacG45TEwzMWdlLy9aTnd1S2dCL09NQ2dlMW5jSlpMdDlkTHpHa1J5?= =?utf-8?B?OUkxNXMwbDRnMVBwKzBscDZsTGZMZEVhTFUwOXFHZ3RPc25aRTJHU3hvZkVM?= =?utf-8?B?RndBaC9QR05MYjhJREhWeUVEcWVyWE8zTytpYjZwTDFpZDdMRjVzSjZmbitP?= =?utf-8?B?SnpPMVgvNzd6cUMxRWk0bUFTa0REcXR0eXlpT2JOWGFkYk9LcGVkMU85bFhZ?= =?utf-8?B?cTZsck5CajVkOHBiWXMrcVJkYWpxMWxXVkhsa0pJcVhydFkzNlp6a3gzU2k3?= =?utf-8?B?a09FRXB4SSt4SFU3TzVCeW9HcjJrdE9WRzM4K2tuNVRocVpldjJTVjE5UTYw?= =?utf-8?B?a2tZMXhKVjJpYm1qbmZYVVFGTklOTjdhNmNDdGhwaHUxeEUxbTV1dCtlWDJm?= =?utf-8?B?VDJ4Q0ZFTlFmaG5hREZtTWNRK2c1Z0RXYUFtNmRDSFV2dk1rb1NkRFhlcjhJ?= =?utf-8?B?MDFHeGlWKzlsWGpDb3kwUk5oZStLYzN1VWM2MWowaEpkSGhNcG9JL1FkY1R6?= =?utf-8?B?T3ZYbE9scjhiNUkwRmxNY0wwc3g4NmM4SDdHTENrZklBaC9PR3duOUU0KzBB?= =?utf-8?B?VW4vTERHTWdtdDJuVCt4MVNsNjdoQlduWDYyT00xUklVRk8vbURyMFU2K3BG?= =?utf-8?Q?b1pK+TKHxI8WPFtOO3?= Content-Type: text/plain; charset="utf-8" Content-ID: <4F458602A1F39F4AA8801EFF5B3FDEE2@DEUP281.PROD.OUTLOOK.COM> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: pSxPIi8nxinWJcqLfI4f6upZUJoSadj1PujkzGIsdmn39kZjnv+MYqEaz+8UpOVyRujNdL78B3DQv2skhNGDrXr6smc3QGrNh0M4Q0HWd57BfWe4+lDhlWb63qIcXWSxGaAQOSQlKke5/tX3jpc9fmtuW443HjmchoYZDOfPqx7shk4el1s9z3eQ9YlqpK7hAXtSTSi8TQBABnoDhUbrTbOak9oninvZhvxnQvbHBz4IC6H9MmBz/BTneGaZRR851jmQgKTU+y/g+lZsPwrvU/ZomqSO+KNjI2qzZQtLSViZYxWrsmaagXKGDJUHUxItuz8cJQjLb/emlzPX3OuYdA== X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: FR0P281MB3020.DEUP281.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: c8e7a034-e542-4b12-9752-08ded307c5b7 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jun 2026 22:19:06.6911 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5280104a-472d-4538-9ccf-1e1d0efe8b1b X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 0EemSXfLldvgx1PRhwzAttwCeB+8OAl3c4DyVtpSvR4vZsP+ZcwDUj1aE2YGDQzd X-MS-Exchange-Transport-CrossTenantHeadersStamped: BE3P281MB5808 X-OriginatorOrg: amazon.de Content-Transfer-Encoding: base64 DQpPbiAyNC4wNi4yNiAxOTozNiwgWW91c2VmIEFsaG91c2VlbiB3cm90ZToNCj4gTlNNX0lPQ1RM X1JBVyBpcyBkb2N1bWVudGVkIGFzIENBUF9TWVNfQURNSU4tb25seS4NCj4NCj4gL2Rldi9uc20g aXMgbW9kZSAwNjY2LCBidXQgdGhlIGlvY3RsIGhhbmRsZXIgZGlkIG5vdCBjaGVjayB0aGF0IGNh cGFiaWxpdHkuDQo+DQo+IFJlamVjdCB1bnByaXZpbGVnZWQgcmF3IG1lc3NhZ2VzIGJlZm9yZSBz ZW5kaW5nIHRoZW0gdG8gdGhlIGRldmljZS4NCj4NCj4gU2lnbmVkLW9mZi1ieTogWW91c2VmIEFs aG91c2VlbiA8YWxob3VzZWVueW91c2VmQGdtYWlsLmNvbT4NCg0KDQpUaGlzIGxvb2tzIGxpa2Ug YSBkaXJlY3QgZHVwbGljYXRlIG9mIA0KaHR0cHM6Ly9sb3JlLmtlcm5lbC5vcmcvbGttbC8yMDI2 MDYyMTA4NTc0My43NjMyOS0xLWtob2F2bmEudGluLjIyMjVAZ21haWwuY29tLz8NCg0KDQpBbGV4 DQoKCgpBbWF6b24gV2ViIFNlcnZpY2VzIERldmVsb3BtZW50IENlbnRlciBHZXJtYW55IEdtYkgK VGFtYXJhLURhbnotU3RyLiAxMwoxMDI0MyBCZXJsaW4KR2VzY2hhZWZ0c2Z1ZWhydW5nOiBDaHJp c3RvZiBIZWxsbWlzLCBBbmRyZWFzIFN0aWVnZXIKRWluZ2V0cmFnZW4gYW0gQW10c2dlcmljaHQg Q2hhcmxvdHRlbmJ1cmcgdW50ZXIgSFJCIDI1Nzc2NCBCClNpdHo6IEJlcmxpbgpVc3QtSUQ6IERF IDM2NSA1MzggNTk3Cg==