Daniel Borkmann
87df15de44
bpf: add syscall side map freeze support ...
This patch adds a new BPF_MAP_FREEZE command which allows to
"freeze" the map globally as read-only / immutable from syscall
side.
Map permission handling has been refactored into map_get_sys_perms()
and drops FMODE_CAN_WRITE in case of locked map. Main use case is
to allow for setting up .rodata sections from the BPF ELF which
are loaded into the kernel, meaning BPF loader first allocates
map, sets up map value by copying .rodata section into it and once
complete, it calls BPF_MAP_FREEZE on the map fd to prevent further
modifications.
Right now BPF_MAP_FREEZE only takes map fd as argument while remaining
bpf_attr members are required to be zero. I didn't add write-only
locking here as counterpart since I don't have a concrete use-case
for it on my side, and I think it makes probably more sense to wait
once there is actually one. In that case bpf_attr can be extended
as usual with a flag field and/or others where flag 0 means that
we lock the map read-only hence this doesn't prevent to add further
extensions to BPF_MAP_FREEZE upon need.
A map creation flag like BPF_F_WRONCE was not considered for couple
of reasons: i) in case of a generic implementation, a map can consist
of more than just one element, thus there could be multiple map
updates needed to set the map into a state where it can then be
made immutable, ii) WRONCE indicates exact one-time write before
it is then set immutable. A generic implementation would set a bit
atomically on map update entry (if unset), indicating that every
subsequent update from then onwards will need to bail out there.
However, map updates can fail, so upon failure that flag would need
to be unset again and the update attempt would need to be repeated
for it to be eventually made immutable. While this can be made
race-free, this approach feels less clean and in combination with
reason i), it's not generic enough. A dedicated BPF_MAP_FREEZE
command directly sets the flag and caller has the guarantee that
map is immutable from syscall side upon successful return for any
future syscall invocations that would alter the map state, which
is also more intuitive from an API point of view. A command name
such as BPF_MAP_LOCK has been avoided as it's too close with BPF
map spin locks (which already has BPF_F_LOCK flag). BPF_MAP_FREEZE
is so far only enabled for privileged users.
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2019-04-09 17:05:46 -07:00
ARM: 8836/1: drivers: amba: Update component matching to use the CoreSight UCI values.
2019-02-26 11:23:49 +00:00
wireless-drivers-next patches for 5.1
2019-02-06 09:36:36 -08:00
libceph: wait for latest osdmap in ceph_monc_blacklist_add()
2019-03-20 16:27:40 +01:00
clk: ti: add a usecount for autoidle
2019-02-15 16:47:55 +02:00
i.MX drivers update for 5.1:
2019-02-15 17:17:57 +01:00
ARM: SoC driver updates for 5.1
2019-03-06 09:41:12 -08:00
Merge branch 'ib-pca953x-config' into devel
2019-02-14 08:45:22 +01:00
iio: st_accel: use ACPI orientation data
2019-02-02 09:28:51 +00:00
Input: ili210x - drop platform data support
2019-02-06 22:17:42 -08:00
irqchip updates for 5.1, take #2
2019-03-21 12:30:54 +01:00
mailbox: ZynqMP IPI mailbox controller
2019-03-06 20:34:20 -06:00
- New Drivers
2019-03-08 10:02:58 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-03-27 17:37:58 -07:00
mmc: core: Add discard support to sd
2019-02-28 09:16:12 +01:00
NAND core changes:
2019-02-25 09:28:54 +01:00
netfilter: convert the proto argument from u8 to u16
2019-03-01 14:28:43 +01:00
phy: dphy: Clarify lanes parameter documentation
2019-02-07 11:11:05 +05:30
dmaengine updates for v5.1-rc1
2019-03-14 09:11:54 -07:00
qed: Add API for SmartAN query.
2019-02-08 22:39:01 -08:00
regulator: core: Add set/get_current_limit helpers for regmap users
2019-03-03 23:45:27 +00:00
io_uring-2019-03-06
2019-03-08 14:48:40 -08:00
qcom: soc: llcc-slice: Clear the global drv_data pointer on error
2019-02-12 15:27:14 -06:00
SUNRPC: Micro-optimise when the task is known not to be sleeping
2019-03-10 14:08:19 -04:00
wusb: Remove unnecessary static function ckhdid_printf
2019-03-01 20:53:41 +01:00
device-dax for 5.1
2019-03-16 13:05:32 -07:00
ACPI / APEI: Add support for the SDEI GHES Notification type
2019-02-11 11:07:49 +01:00
ata: pata_of_platform: Allow to use 16-bit wide data transfer
2019-02-08 06:42:53 -07:00
appletalk: Fix potential NULL pointer dereference in unregister_snap_client
2019-03-15 11:25:48 -07:00
locking/atomics: Check atomic headers with sha1sum
2019-02-13 08:07:31 +01:00
audit: hide auditsc_get_stamp and audit_serial prototypes
2019-02-07 21:44:27 -05:00
writeback: fix inode cgroup switching comment
2019-03-05 21:07:21 -08:00
mm: convert PG_balloon to PG_offline
2019-03-05 21:07:14 -08:00
block: add bio_set_polled() helper
2019-02-24 08:20:17 -07:00
include/linux/bitops.h: set_mask_bits() to return old value
2019-03-07 18:32:00 -08:00
block: Unexport blk_mq_add_to_requeue_list()
2019-03-20 14:19:36 -06:00
block: add BIO_NO_PAGE_REF flag
2019-03-18 10:44:48 -06:00
block: add BLK_MQ_POLL_CLASSIC for hybrid poll and return EINVAL for unexpected value
2019-03-20 14:02:07 -06:00
blktrace: Show requests without sector
2019-02-07 12:57:17 -07:00
bpf: fix warning about using plain integer as NULL
2019-03-08 21:17:07 +01:00
bpf: add syscall side map freeze support
2019-04-09 17:05:46 -07:00
bpf: implement lookup-free direct value access for maps
2019-04-09 17:05:46 -07:00
net: phy: bcm54xx: Encode link speed and activity into LEDs
2019-03-26 11:24:47 -07:00
scsi: bsg-lib: handle bidi requests without block layer help
2019-02-05 21:27:40 -05:00
build_bug.h: add wrapper for _Static_assert
2019-03-07 18:31:59 -08:00
block: optimize bvec iteration in bvec_iter_advance
2019-02-28 13:49:22 -07:00
audit/stable-5.1 PR 20190305
2019-03-07 12:20:11 -08:00
Merge branch 'for-5.1' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup
2019-03-07 10:11:41 -08:00
clk: fractional-divider: check parent rate only if flag is set
2019-02-22 00:11:47 -08:00
clk: Add (devm_)clk_get_optional() functions
2019-02-06 10:33:10 -08:00
clkdev: add managed clkdev lookup registration
2019-02-06 10:35:02 -08:00
include/linux/compaction.h: fix potential build error
2019-03-05 21:07:20 -08:00
y2038: syscalls: rename y2038 compat syscalls
2019-02-07 00:13:27 +01:00
Compiler Attributes: add support for __copy (gcc >= 9)
2019-02-15 19:52:17 +01:00
drivers/component: kerneldoc polish
2019-02-19 13:20:35 +01:00
coresight: perf: Add "sinks" group to PMU directory
2019-02-08 12:27:36 +01:00
cpufreq: Allow light-weight tear down and bring up of CPUs
2019-02-12 23:47:42 +01:00
clocksource/drivers/tegra: Add Tegra210 timer support
2019-02-23 12:13:45 +01:00
init/calibrate.c: provide proper prototype
2019-03-07 18:32:01 -08:00
dm: add support to directly boot to a mapped device
2019-03-05 14:53:50 -05:00
DMA mapping updates for 5.1
2019-03-10 11:54:48 -07:00
virtio: fixes, cleanups
2019-03-10 12:47:57 -07:00
dynamic_debug: refactor dynamic_pr_debug and friends
2019-03-07 18:32:00 -08:00
arm64 updates for 5.1:
2019-03-10 10:17:23 -07:00
vfs: Add configuration parser helpers
2019-02-28 03:28:53 -05:00
net/ethernet: Add parse_protocol header_ops support
2019-02-22 12:55:31 -08:00
net: phy: improve definition of __ETHTOOL_LINK_MODE_MASK_NBITS
2019-02-24 17:33:59 -08:00
f2fs: correct spelling mistake
2019-03-12 18:59:17 -07:00
fanotify: report FAN_ONDIR to listener with FAN_REPORT_FID
2019-02-07 16:47:32 +01:00
32-bit userspace ABI: introduce ARCH_32BIT_OFF_T config option
2019-02-19 10:10:05 +01:00
fs: add fget_many() and fput_many()
2019-02-28 08:24:23 -07:00
Merge branch 'perf-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2019-03-06 07:59:36 -08:00
mm: rid swapoff of quadratic complexity
2019-03-05 21:07:18 -08:00
Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-03-12 14:08:19 -07:00
vfs: Implement logging through fs_context
2019-02-28 03:29:37 -05:00
vfs: Add configuration parser helpers
2019-02-28 03:28:53 -05:00
fanotify: check FS_ISDIR flag instead of d_is_dir()
2019-02-07 16:38:36 +01:00
fsnotify: Create function to remove event from notification list
2019-02-18 12:41:16 +01:00
generic radix trees
2019-03-12 10:04:02 -07:00
genetlink: make policy common to family
2019-03-22 10:38:23 -04:00
mm: shuffle GFP_* flags
2019-03-05 21:07:16 -08:00
gnss: add mtk receiver type support
2019-02-15 16:54:38 +01:00
arm64: Fix HCR.TGE status for NMI contexts
2019-02-06 10:05:16 +00:00
mm/hmm: convert to use vm_fault_t
2019-03-12 10:04:00 -07:00
mm: update get_user_pages_longterm to migrate pages allocated from CMA region
2019-03-05 21:07:19 -08:00
Drivers: hv: vmbus: Expose counters for interrupts and full conditions
2019-02-14 20:56:10 -05:00
i2c: algo-bit: convert to SPDX header
2019-02-05 14:05:03 +01:00
i2c: Allow recovery of the initial IRQ by an I2C client device.
2019-02-24 14:43:22 +01:00
wireless-drivers-next patches for 5.1
2019-02-22 12:56:24 -08:00
ip: fix ip_mc_may_pull() return value
2019-03-09 19:52:47 -08:00
ima: define ima_post_create_tmpfile() hook and add missing call
2019-02-04 17:36:01 -05:00
sched/core: Convert task_struct.stack_refcount to refcount_t
2019-02-04 08:53:56 +01:00
irqchip updates for Linux 5.1
2019-02-23 10:53:31 +01:00
iommu: Allow io-pgtable to be used outside of drivers/iommu/
2019-02-11 11:26:48 +01:00
iomap: wire up the iopoll method
2019-02-24 08:20:17 -07:00
Merge branches 'iommu/fixes', 'arm/msm', 'arm/tegra', 'arm/mediatek', 'x86/vt-d', 'x86/amd', 'hyper-v' and 'core' into next
2019-03-01 11:24:51 +01:00
ipmi: Make the smi watcher be disabled immediately when not needed
2019-02-09 19:48:42 -06:00
net: ipv6: add socket option IPV6_ROUTER_ALERT_ISOLATE
2019-03-03 21:05:10 -08:00
genirq: Fix typo in comment of IRQD_MOVE_PCNTXT
2019-03-21 11:52:37 +01:00
irqchip updates for Linux 5.1
2019-02-23 10:53:31 +01:00
This is the bulk of GPIO changes for the v5.1 cycle:
2019-03-08 10:09:53 -08:00
kasan: fix kasan_check_read/write definitions
2019-03-05 21:07:13 -08:00
x86/gart: Exclude GART aperture from kcore
2019-03-23 12:11:49 +01:00
printk: Remove no longer used LOG_PREFIX.
2019-03-04 13:42:05 +01:00
linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h>
2019-03-07 18:31:59 -08:00
Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-03-12 14:08:19 -07:00
keys: Fix dependency loop between construction record and auth key
2019-02-15 14:12:09 -08:00
mm: reuse only-pte-mapped KSM page in do_wp_page()
2019-03-05 21:07:15 -08:00
Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2019-03-06 08:14:05 -08:00
KVM: Expose the initial start value in grow_halt_poll_ns() as a module parameter
2019-02-20 22:48:50 +01:00
scsi: ata: Use unsigned int for cmd's type in ioctls in scsi_host_template
2019-02-08 17:33:00 -05:00
device-dax for 5.1
2019-03-16 13:05:32 -07:00
linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h>
2019-03-07 18:31:59 -08:00
mm, compaction: use free lists to quickly locate a migration source
2019-03-05 21:07:16 -08:00
locking/lockdep: Shrink struct lock_class_key
2019-02-28 07:55:53 +01:00
Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-03-12 14:08:19 -07:00
lib/lzo: separate lzo-rle from lzo
2019-03-07 18:32:03 -08:00
net: phy: marvell10g: add support for the 88x2110 PHY
2019-02-24 17:45:25 -08:00
vfio-mdev: Switch to use new generic UUID API
2019-02-05 11:51:56 -07:00
net: phy: add helper mii_10gbt_stat_mod_linkmode_lpa_t
2019-02-18 16:43:54 -08:00
mei: bus: export to_mei_cl_device for mei client devices drivers
2019-02-12 10:38:46 +01:00
memblock: remove memblock_{set,clear}_region_flags
2019-03-12 10:04:02 -07:00
mm, memcg: create mem_cgroup_from_seq
2019-03-05 21:07:17 -08:00
xen: fixes and features for 5.1-rc1
2019-03-11 17:08:14 -07:00
mm: refactor readahead defines in mm.h
2019-03-12 10:04:01 -07:00
5.1 Merge Window Pull Request
2019-03-09 15:53:03 -08:00
mm: remove zone_lru_lock() function, access ->lru_lock directly
2019-03-05 21:07:21 -08:00
platform-drivers-x86 for v5.1-1
2019-03-10 13:16:37 -07:00
A fairly routine cycle for docs - lots of typo fixes, some new documents,
2019-03-09 09:56:17 -08:00
genirq/msi: Clean up usage of __u8/__u16 types
2019-02-08 13:30:10 -06:00
net: add documentation to socket.c
2019-03-15 15:29:47 -07:00
net: Add header for usage of fls64()
2019-02-16 13:45:01 -08:00
net: convert rps_needed and rfs_needed to new static branch api
2019-03-23 21:57:38 -04:00
netfilter: ipv6: avoid indirect calls for IPV6=y case
2019-02-04 18:21:12 +01:00
NFSv4.2: Add client support for the generic 'layouterror' RPC call
2019-03-01 16:20:16 -05:00
NFSv4.2: Add client support for the generic 'layouterror' RPC call
2019-03-01 16:20:16 -05:00
NFS: Clean up list moves of struct nfs_page
2019-02-20 15:14:20 -05:00
NFSv4.2: Add client support for the generic 'layouterror' RPC call
2019-03-01 16:20:16 -05:00
numa: make "nr_online_nodes" unsigned int
2019-03-05 21:07:20 -08:00
NTB: add new parameter to peer_db_addr() db_bit and db_data
2019-02-13 11:03:18 -05:00
nvme-fc: convert to SPDX identifiers
2019-02-20 07:22:17 -07:00
nvme-fc: convert to SPDX identifiers
2019-02-20 07:22:17 -07:00
nvme-rdma: convert to SPDX identifiers
2019-02-20 07:22:19 -07:00
nvme-tcp.h: fix SPDX header
2019-02-20 07:22:10 -07:00
nvme_ioctl.h: remove duplicate GPL boilerplate
2019-02-20 07:22:05 -07:00
lib: objagg: add root count to stats
2019-02-08 15:02:49 -08:00
gpio: add core support for pull-up/pull-down configuration
2019-02-13 09:10:14 +01:00
of: mark early_init_dt_alloc_reserved_memory_arch static
2019-02-28 11:40:49 -06:00
mm: better document PG_reserved
2019-03-05 21:07:19 -08:00
filemap: kill page_cache_read usage in filemap_fault
2019-03-15 11:21:25 -07:00
Revert "parport: daisy: use new parport device model"
2019-03-25 14:49:00 -07:00
PCI/ATS: Add inline to pci_prg_resp_pasid_required()
2019-02-28 11:09:29 +01:00
PCI: endpoint: Remove features member in struct pci_epc
2019-02-15 10:03:35 +00:00
IOMMU Updates for Linux v5.1
2019-03-10 12:29:52 -07:00
PCI: Move Rohm Vendor ID to generic list
2019-02-01 17:24:52 -06:00
locking/percpu-rwsem: Remove preempt_disable variants
2019-02-28 07:55:37 +01:00
perf/core improvements and fixes:
2019-02-28 08:29:50 +01:00
net: phy: remove gen10g_no_soft_reset
2019-03-03 21:47:57 -08:00
net: fixed-phy: Add fixed_phy_register_with_gpiod() API
2019-02-07 18:11:58 -08:00
net: phylink: update mac_config() documentation
2019-02-24 12:39:45 -08:00
include/linux/pid.h: remove next_pidmap() declaration
2019-03-07 18:31:59 -08:00
This is the bulk of GPIO changes for the v5.1 cycle:
2019-03-08 10:09:53 -08:00
PM-runtime: Call pm_runtime_active|suspended_time() from sysfs
2019-03-07 11:23:17 +01:00
PM / Domains: Mark "name" const in dev_pm_domain_attach_by_name()
2019-02-15 11:36:38 +01:00
Power management updates for 5.1-rc1
2019-03-06 12:59:46 -08:00
driver core: Fix PM-runtime for links added during consumer probe
2019-02-20 11:18:07 +01:00
PM / wakeup: Drop wakeup_source_drop()
2019-03-12 09:43:00 +01:00
Drop flex_arrays
2019-03-12 10:04:03 -07:00
timex: use __kernel_timex internally
2019-02-07 00:13:27 +01:00
power: supply: core: Add a field to support battery max voltage
2019-02-20 00:33:08 +01:00
Printk changes for 5.1
2019-03-09 09:22:42 -08:00
signal: add pidfd_send_signal() syscall
2019-03-05 17:03:53 +01:00
ptr_ring: remove duplicated include from ptr_ring.h
2019-02-17 15:53:01 -08:00
linux/rcu_node_tree: Convert to SPDX license identifier
2019-02-09 08:44:32 -08:00
linux/rcu_segcblist: Convert to SPDX license identifier
2019-02-09 08:44:41 -08:00
linux/rcu_sync: Convert to SPDX license identifier
2019-02-09 08:44:46 -08:00
Merge branches 'doc.2019.01.26a', 'fixes.2019.01.26a', 'sil.2019.01.26a', 'spdx.2019.02.09a', 'srcu.2019.01.26a' and 'torture.2019.01.26a' into HEAD
2019-02-09 08:47:52 -08:00
linux/rcutiny: Convert to SPDX license identifier
2019-02-09 08:45:46 -08:00
linux/rcutree: Convert to SPDX license identifier
2019-02-09 08:45:52 -08:00
include/linux/relay.h: fix percpu annotation in struct rchan
2019-03-07 18:32:03 -08:00
remoteproc: fix recovery procedure
2019-02-20 21:34:17 -08:00
rhashtable: rename rht_for_each*continue as *from.
2019-03-21 14:01:10 -07:00
tracing: kdb: Fix ftdump to not sleep
2019-03-13 09:46:10 -04:00
rtc: remove rtc_class_ops.read_callback
2019-02-25 21:20:45 +01:00
sbitmap: trivial - update comment for sbitmap_deferred_clear_bit
2019-03-22 11:01:02 -06:00
lib/scatterlist: Provide a DMA page iterator
2019-02-11 15:02:33 -07:00
audit/stable-5.1 PR 20190305
2019-03-07 12:20:11 -08:00
Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-03-12 14:08:19 -07:00
mm: rid swapoff of quadratic complexity
2019-03-05 21:07:18 -08:00
inet: switch IP ID generator to siphash
2019-03-27 14:29:26 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-03-11 08:54:01 -07:00
include/linux/slub_def.h: comment fixes
2019-03-05 21:07:14 -08:00
net: add documentation to socket.c
2019-03-15 15:29:47 -07:00
Merge branches 'doc.2019.01.26a', 'fixes.2019.01.26a', 'sil.2019.01.26a', 'spdx.2019.02.09a', 'srcu.2019.01.26a' and 'torture.2019.01.26a' into HEAD
2019-02-09 08:47:52 -08:00
linux/srcu: Convert to SPDX license identifier
2019-02-09 08:45:59 -08:00
Merge branches 'doc.2019.01.26a', 'fixes.2019.01.26a', 'sil.2019.01.26a', 'spdx.2019.02.09a', 'srcu.2019.01.26a' and 'torture.2019.01.26a' into HEAD
2019-02-09 08:47:52 -08:00
vfs: add vfs_get_fsid() helper
2019-02-07 16:38:35 +01:00
include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
2019-03-14 14:36:20 -07:00
virtio: fixes, cleanups
2019-03-10 12:47:57 -07:00
ntb_hw_switchtec: Added support of >=4G memory windows
2019-02-11 07:36:13 -05:00
pidfd patches for v5.1-rc1
2019-03-16 13:47:14 -07:00
tee: add cancellation support to client interface
2019-02-28 13:49:29 +01:00
timex: use __kernel_timex internally
2019-02-07 00:13:27 +01:00
y2038: remove struct definition redirects
2019-02-07 00:13:28 +01:00
y2038: remove struct definition redirects
2019-02-07 00:13:28 +01:00
Merge branches 'doc.2019.01.26a', 'fixes.2019.01.26a', 'sil.2019.01.26a', 'spdx.2019.02.09a', 'srcu.2019.01.26a' and 'torture.2019.01.26a' into HEAD
2019-02-09 08:47:52 -08:00
tpm: pass an array of tpm_extend_digest structures to tpm_pcr_extend()
2019-02-13 09:48:52 +02:00
tpm: rename and export tpm2_digest and tpm2_algorithms
2019-02-13 09:48:51 +02:00
include/linux/types.h: use "unsigned int" instead of "unsigned"
2019-03-07 18:31:59 -08:00
io_uring-20190323
2019-03-23 10:25:12 -07:00
kexec, KEYS: Make use of platform keyring for signature verify
2019-02-04 17:34:07 -05:00
drm: move i915_kick_out_vgacon to vgaarb
2019-03-07 10:34:37 +01:00
virtio: Introduce virtio_max_dma_size()
2019-03-06 11:19:15 -05:00
virtio: hint if callbacks surprisingly might sleep
2019-03-06 11:19:57 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-02-24 12:06:19 -08:00
VMCI: Support upto 64-bit PPNs
2019-02-26 12:53:55 +01:00
sched/wait: Use freezable_schedule() when possible
2019-02-11 08:34:04 +01:00
platform/x86: wmi: move struct wmi_device_id to mod_devicetable.h
2019-03-07 08:46:07 -08:00
Driver core patches for 5.1-rc1
2019-03-06 14:52:48 -08:00
XArray: Use xa_cmpxchg to implement xa_reserve
2019-02-20 17:08:54 -05:00
