bpf: Consistently use BPF token throughout BPF verifier logic

Browse source

Remove remaining direct queries to perfmon_capable() and bpf_capable()
in BPF verifier logic and instead use BPF token (if available) to make
decisions about privileges.

Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/20240124022127.2379740-9-andrii@kernel.org

...

This commit is contained in:

Andrii Nakryiko 2024-01-23 18:21:05 -08:00 • committed by Alexei Starovoitov

parent bbc1d24724

commit d79a354975

6 changed files with 19 additions and 20 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

16

include/linux/bpf.h

View file

2

include/linux/filter.h

View file

2

kernel/bpf/arraymap.c

View file

2

kernel/bpf/core.c

View file

13

kernel/bpf/verifier.c

View file

4

net/core/filter.c

View file