Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Chenbo Feng afdb09c720 security: bpf: Add LSM hooks for bpf object related syscall ... Introduce several LSM hooks for the syscalls that will allow the userspace to access to eBPF object such as eBPF programs and eBPF maps. The security check is aimed to enforce a per object security protection for eBPF object so only processes with the right priviliges can read/write to a specific map or use a specific eBPF program. Besides that, a general security hook is added before the multiplexer of bpf syscall to check the cmd and the attribute used for the command. The actual security module can decide which command need to be checked and how the cmd should be checked. Signed-off-by: Chenbo Feng <fengc@google.com> Acked-by: James Morris <james.l.morris@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-10-20 13:32:59 +01:00
..
arraymap.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
bpf_lru_list.c	bpf: lru: Lower the PERCPU_NR_SCANS from 16 to 4	2017-04-17 13:55:52 -04:00
bpf_lru_list.h	bpf: Only set node->ref = 1 if it has not been set	2017-09-01 09:57:39 -07:00
cgroup.c	bpf: remove redundant variable old_flags	2017-10-11 20:22:34 -07:00
core.c	tracing: bpf: Hide bpf trace events when they are not used	2017-10-16 21:10:20 +01:00
cpumap.c	bpf: cpumap add tracepoints	2017-10-18 12:12:18 +01:00
devmap.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
disasm.c	bpf: move instruction printing into a separate file	2017-10-10 12:30:16 -07:00
disasm.h	bpf: move instruction printing into a separate file	2017-10-10 12:30:16 -07:00
hashtab.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
helpers.c
inode.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
lpm_trie.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
Makefile	bpf: introduce new bpf cpu map type BPF_MAP_TYPE_CPUMAP	2017-10-18 12:12:18 +01:00
map_in_map.c	bpf: Add syscall lookup support for fd array and htab	2017-06-29 13:13:25 -04:00
map_in_map.h	bpf: Add syscall lookup support for fd array and htab	2017-06-29 13:13:25 -04:00
percpu_freelist.c
percpu_freelist.h
sockmap.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
stackmap.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
syscall.c	security: bpf: Add LSM hooks for bpf object related syscall	2017-10-20 13:32:59 +01:00
tnum.c	bpf/verifier: track signed and unsigned min/max values	2017-08-08 17:51:34 -07:00
verifier.c	bpf: move knowledge about post-translation offsets out of verifier	2017-10-18 14:17:10 +01:00