bpf: Make bpf_get_current_[ancestor_]cgroup_id() available for all program types

Browse source

These helpers are safe to call from any context and there's no reason to
restrict access to them. Remove them from bpf_trace and filter lists and add
to bpf_base_func_proto() under perfmon_capable().

v2: After consulting with Andrii, relocated in bpf_base_func_proto() so that
    they require bpf_capable() but not perfomon_capable() as it doesn't read
    from or affect others on the system.

Signed-off-by: Tejun Heo <tj@kernel.org>
Cc: Andrii Nakryiko <andrii@kernel.org>
Link: https://lore.kernel.org/r/ZAD8QyoszMZiTzBY@slm.duckdns.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

...

This commit is contained in:

Tejun Heo 2023-03-02 09:42:59 -10:00 • committed by Alexei Starovoitov

parent cacad346f6

commit c501bf55c8

4 changed files with 4 additions and 14 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

kernel/bpf/cgroup.c

View file

4

kernel/bpf/helpers.c

View file

4

kernel/trace/bpf_trace.c

View file

6

net/core/filter.c

View file