bpf: take into account BPF token when fetching helper protos

Browse source

Instead of performing unconditional system-wide bpf_capable() and
perfmon_capable() calls inside bpf_base_func_proto() function (and other
similar ones) to determine eligibility of a given BPF helper for a given
program, use previously recorded BPF token during BPF_PROG_LOAD command
handling to inform the decision.

Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
Link: https://lore.kernel.org/r/20231130185229.2688956-8-andrii@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

...

This commit is contained in:

Andrii Nakryiko 2023-11-30 10:52:19 -08:00 • committed by Alexei Starovoitov

parent e1cef620f5

commit 4cbb270e11

9 changed files with 32 additions and 30 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/media/rc/bpf-lirc.c

View file

5

include/linux/bpf.h

View file

6

kernel/bpf/cgroup.c

View file

6

kernel/bpf/helpers.c

View file

5

kernel/bpf/syscall.c

View file

2

kernel/trace/bpf_trace.c

View file

32

net/core/filter.c

View file

2

net/ipv4/bpf_tcp_ca.c

View file

2

net/netfilter/nf_bpf_link.c

View file