bpf: Centralize permissions checks for all BPF map types
[ Upstream commit 6c3eba1c ] This allows to do more centralized decisions later on, and generally makes it very explicit which maps are privileged and which are not (e.g., LRU_HASH and LRU_PERCPU_HASH, which are privileged HASH variants, as opposed to unprivileged HASH and HASH_PERCPU; now this is explicit and easy to verify). Signed-off-by:Andrii Nakryiko <andrii@kernel.org> Signed-off-by:
Daniel Borkmann <daniel@iogearbox.net> Acked-by:
Stanislav Fomichev <sdf@google.com> Link: https://lore.kernel.org/bpf/20230613223533.3689589-4-andrii@kernel.org Stable-dep-of: 640a6045 ("bpf, cpumap: Make sure kthread is running before map update returns") Signed-off-by:
Sasha Levin <sashal@kernel.org>
Loading
Please register or sign in to comment