On Wed, 18 Oct 2017, Chenbo Feng wrote: > From: Chenbo Feng <fengc@xxxxxxxxxx> > > Introduce a bpf object related check when sending and receiving files > through unix domain socket as well as binder. It checks if the receiving > process have privilege to read/write the bpf map or use the bpf program. > This check is necessary because the bpf maps and programs are using a > anonymous inode as their shared inode so the normal way of checking the > files and sockets when passing between processes cannot work properly on > eBPF object. This check only works when the BPF_SYSCALL is configured. > > Signed-off-by: Chenbo Feng <fengc@xxxxxxxxxx> > Acked-by: Stephen Smalley <sds@xxxxxxxxxxxxx> Reviewed-by: James Morris <james.l.morris@xxxxxxxxxx> -- James Morris <james.l.morris@xxxxxxxxxx>
