[PATCH bpf-next 03/29] bpf: introduce BPF token object

Andrii Nakryiko andrii.nakryiko at gmail.com
Fri Jan 5 22:06:55 UTC 2024


On Fri, Jan 5, 2024 at 12:46 PM Linus Torvalds
<torvalds at linuxfoundation.org> wrote:
>
> On Fri, 5 Jan 2024 at 12:32, Matthew Wilcox <willy at infradead.org> wrote:
> >
> > I can't tell from the description whether there are going to be a lot of
> > these.  If there are, it might make sense to create a slab cache for
> > them rather than get them from the general-purpose kmalloc caches.
>
> I suspect it's a "count on the fingers of your hand" thing, and having
> a slab cache would be more overhead than you'd ever win.

Yes, you suspect right. It will be mostly one BPF token instance per
application, and even then only if the application is running within a
container that has BPF token set up (through BPF FS instance). So
yeah, slab cache seems like an overkill.

>
>            Linus



More information about the Linux-security-module-archive mailing list