Re: [PATCH bpf-next v2] bpf: Update verification logic for LSM programs

Hello: This patch was applied to bpf/bpf.git (refs/heads/master): On Thu, 5 Nov 2020 23:06:51 + you wrote: > From: KP Singh > > The current logic checks if the name of the BTF type passed in > attach_btf_id starts with "bpf_lsm_", this is not sufficient as it also > allows attachment to no

Re: [PATCH bpf-next v2] bpf: Update verification logic for LSM programs

On Thu, Nov 5, 2020 at 3:06 PM KP Singh wrote: > > From: KP Singh > > The current logic checks if the name of the BTF type passed in > attach_btf_id starts with "bpf_lsm_", this is not sufficient as it also > allows attachment to non-LSM hooks like the very function that performs > this check, i.

[PATCH bpf-next v2] bpf: Update verification logic for LSM programs

From: KP Singh The current logic checks if the name of the BTF type passed in attach_btf_id starts with "bpf_lsm_", this is not sufficient as it also allows attachment to non-LSM hooks like the very function that performs this check, i.e. bpf_lsm_verify_prog. In order to ensure that this verific