bpf: Centralize permissions checks for all BPF map types

[ Upstream commit 6c3eba1c5e ] This allows to do more centralized decisions later on, and generally makes it very explicit which maps are privileged and which are not (e.g., LRU_HASH and LRU_PERCPU_HASH, which are privileged HASH variants, as opposed to unprivileged HASH and HASH_PERCPU; now this is explicit and easy to verify). Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Stanislav Fomichev <sdf@google.com> Link: https://lore.kernel.org/bpf/20230613223533.3689589-4-andrii@kernel.org Stable-dep-of: 640a604585 ("bpf, cpumap: Make sure kthread is running before map update returns") Signed-off-by: Sasha Levin <sashal@kernel.org>
2026-11-08 18:57:22 +00:00 · 2023-06-13 15:35:32 -07:00 · 2023-06-13 15:35:32 -07:00 · 382535c063
commit 382535c063
parent 514b9c25ff
14 changed files with 52 additions and 44 deletions
--- a/kernel/bpf/bloom_filter.c
+++ b/kernel/bpf/bloom_filter.c
--- a/kernel/bpf/bpf_local_storage.c
+++ b/kernel/bpf/bpf_local_storage.c
--- a/kernel/bpf/bpf_struct_ops.c
+++ b/kernel/bpf/bpf_struct_ops.c
--- a/kernel/bpf/cpumap.c
+++ b/kernel/bpf/cpumap.c
--- a/kernel/bpf/devmap.c
+++ b/kernel/bpf/devmap.c
--- a/kernel/bpf/hashtab.c
+++ b/kernel/bpf/hashtab.c
--- a/kernel/bpf/lpm_trie.c
+++ b/kernel/bpf/lpm_trie.c
--- a/kernel/bpf/queue_stack_maps.c
+++ b/kernel/bpf/queue_stack_maps.c
--- a/kernel/bpf/reuseport_array.c
+++ b/kernel/bpf/reuseport_array.c
--- a/kernel/bpf/stackmap.c
+++ b/kernel/bpf/stackmap.c
--- a/kernel/bpf/syscall.c
+++ b/kernel/bpf/syscall.c
--- a/net/core/sock_map.c
+++ b/net/core/sock_map.c
--- a/net/xdp/xskmap.c
+++ b/net/xdp/xskmap.c
--- a/tools/testing/selftests/bpf/prog_tests/unpriv_bpf_disabled.c
+++ b/tools/testing/selftests/bpf/prog_tests/unpriv_bpf_disabled.c