[PATCH bpf-next v5 1/7] bpf: Introduce BPF_PROG_TYPE_LSM

Yonghong Song yhs at fb.com
Mon Mar 23 19:02:38 UTC 2020



On 3/23/20 9:44 AM, KP Singh wrote:
> From: KP Singh <kpsingh at google.com>
> 
> Introduce types and configs for bpf programs that can be attached to
> LSM hooks. The programs can be enabled by the config option
> CONFIG_BPF_LSM.
> 
> Signed-off-by: KP Singh <kpsingh at google.com>
> Reviewed-by: Brendan Jackman <jackmanb at google.com>
> Reviewed-by: Florent Revest <revest at google.com>
> Reviewed-by: Thomas Garnier <thgarnie at google.com>

Acked-by: Yonghong Song <yhs at fb.com>

> ---
>   MAINTAINERS                    |  1 +
>   include/linux/bpf.h            |  3 +++
>   include/linux/bpf_types.h      |  4 ++++
>   include/uapi/linux/bpf.h       |  2 ++
>   init/Kconfig                   | 10 ++++++++++
>   kernel/bpf/Makefile            |  1 +
>   kernel/bpf/bpf_lsm.c           | 17 +++++++++++++++++
>   kernel/trace/bpf_trace.c       | 12 ++++++------
>   tools/include/uapi/linux/bpf.h |  2 ++
>   tools/lib/bpf/libbpf_probes.c  |  1 +

You may want to check bpftool support for new prog types
for proper output. It should be a simple change.

>   10 files changed, 47 insertions(+), 6 deletions(-)
>   create mode 100644 kernel/bpf/bpf_lsm.c
[...]



More information about the Linux-security-module-archive mailing list