Re: [RFC net-next] bpf: taint loading !is_gpl programs

2017-04-08 Thread Alexei Starovoitov
On Fri, Apr 07, 2017 at 01:46:28PM -0400, Aaron Conole wrote: > Hi Alexei, and Daniel, > > Alexei Starovoitov writes: > > > On Wed, Apr 05, 2017 at 10:59:49PM -0400, Aaron Conole wrote: > >> Hi Daniel, > >> > >> Daniel Borkmann writes: > >>

Re: [RFC net-next] bpf: taint loading !is_gpl programs

2017-04-07 Thread Aaron Conole
Hi Alexei, and Daniel, Alexei Starovoitov writes: > On Wed, Apr 05, 2017 at 10:59:49PM -0400, Aaron Conole wrote: >> Hi Daniel, >> >> Daniel Borkmann writes: >> >> > On 04/04/2017 08:33 PM, Aaron Conole wrote: >> >> The eBPF framework is

Re: [RFC net-next] bpf: taint loading !is_gpl programs

2017-04-06 Thread Alexei Starovoitov
On Wed, Apr 05, 2017 at 10:59:49PM -0400, Aaron Conole wrote: > Hi Daniel, > > Daniel Borkmann writes: > > > On 04/04/2017 08:33 PM, Aaron Conole wrote: > >> The eBPF framework is used for more than just socket level filtering. It > >> can also provide tracing, and even

Re: [RFC net-next] bpf: taint loading !is_gpl programs

2017-04-05 Thread Aaron Conole
Hi Daniel, Daniel Borkmann writes: > On 04/04/2017 08:33 PM, Aaron Conole wrote: >> The eBPF framework is used for more than just socket level filtering. It >> can also provide tracing, and even change the way packets coming into the >> system look. Most of the eBPF

Re: [RFC net-next] bpf: taint loading !is_gpl programs

2017-04-04 Thread Daniel Borkmann
On 04/04/2017 08:33 PM, Aaron Conole wrote: The eBPF framework is used for more than just socket level filtering. It can also provide tracing, and even change the way packets coming into the system look. Most of the eBPF callable symbols are available to non-gpl programs, and this includes

[RFC net-next] bpf: taint loading !is_gpl programs

2017-04-04 Thread Aaron Conole
The eBPF framework is used for more than just socket level filtering. It can also provide tracing, and even change the way packets coming into the system look. Most of the eBPF callable symbols are available to non-gpl programs, and this includes helper functions which modify packets. This