bpf: consistently use BPF token throughout BPF verifier logic

Browse source

Remove remaining direct queries to perfmon_capable() and bpf_capable()
in BPF verifier logic and instead use BPF token (if available) to make
decisions about privileges.

Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
Link: https://lore.kernel.org/r/20231130185229.2688956-9-andrii@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

...

This commit is contained in:

Andrii Nakryiko 2023-11-30 10:52:20 -08:00 • committed by Alexei Starovoitov

parent 4cbb270e11

commit 8062fb12de

6 changed files with 19 additions and 20 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

16

include/linux/bpf.h

View file

2

include/linux/filter.h

View file

2

kernel/bpf/arraymap.c

View file

2

kernel/bpf/core.c

View file

13

kernel/bpf/verifier.c

View file

4

net/core/filter.c

View file