• Harish Kasiviswanathan's avatar
    drm/amdkfd: Check against device cgroup · 6b855f7b
    Harish Kasiviswanathan authored
    Participate in device cgroup. All kfd devices are exposed via /dev/kfd.
    So use /dev/dri/renderN node.
    
    Before exposing the device to a task check if it has permission to
    access it. If the task (based on its cgroup) can access /dev/dri/renderN
    then expose the device via kfd node.
    
    If the task cannot access /dev/dri/renderN then process device data
    (pdd) is not created. This will ensure that task cannot use the device.
    
    In sysfs topology, all device nodes are visible irrespective of the task
    cgroup. The sysfs node directories are created at driver load time and
    cannot be changed dynamically. However, access to information inside
    nodes is controlled based on the task's cgroup permissions.
    Signed-off-by: default avatarHarish Kasiviswanathan <Harish.Kasiviswanathan@amd.com>
    Reviewed-by: default avatarFelix Kuehling <Felix.Kuehling@amd.com>
    Signed-off-by: default avatarAlex Deucher <alexander.deucher@amd.com>
    6b855f7b
kfd_flat_memory.c 17 KB