bpf: Implement exclusive map creation

Browse source

Exclusive maps allow maps to only be accessed by program with a
program with a matching hash which is specified in the excl_prog_hash
attr.

For the signing use-case, this allows the trusted loader program
to load the map and verify the integrity

Signed-off-by: KP Singh <kpsingh@kernel.org>
Link: https://lore.kernel.org/r/20250914215141.15144-3-kpsingh@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

...

This commit is contained in:

KP Singh 2025-09-14 23:51:31 +02:00 • committed by Alexei Starovoitov

parent 603b441623

commit baefdbdf68

5 changed files with 46 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

include/linux/bpf.h

View file

6

include/uapi/linux/bpf.h

View file

31

kernel/bpf/syscall.c

View file

6

kernel/bpf/verifier.c

View file

6

tools/include/uapi/linux/bpf.h

View file