Re: [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Xu Kuohai <xukuohai@xxxxxxxxxxxxxxx>
Subject: Re: [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list
From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
Date: Fri, 12 Jul 2024 10:56:41 -0700
Cc: bpf@xxxxxxxxxxxxxxx, netdev@xxxxxxxxxxxxxxx, linux-security-module@xxxxxxxxxxxxxxx, linux-kselftest@xxxxxxxxxxxxxxx, linux-integrity@xxxxxxxxxxxxxxx, apparmor@xxxxxxxxxxxxxxxx, selinux@xxxxxxxxxxxxxxx, Alexei Starovoitov <ast@xxxxxxxxxx>, Andrii Nakryiko <andrii@xxxxxxxxxx>, Daniel Borkmann <daniel@xxxxxxxxxxxxx>, Martin KaFai Lau <martin.lau@xxxxxxxxx>, Eduard Zingerman <eddyz87@xxxxxxxxx>, Song Liu <song@xxxxxxxxxx>, Yonghong Song <yonghong.song@xxxxxxxxx>, John Fastabend <john.fastabend@xxxxxxxxx>, KP Singh <kpsingh@xxxxxxxxxx>, Stanislav Fomichev <sdf@xxxxxxxxxx>, Hao Luo <haoluo@xxxxxxxxxx>, Jiri Olsa <jolsa@xxxxxxxxxx>, Matt Bobrowski <mattbobrowski@xxxxxxxxxx>, Brendan Jackman <jackmanb@xxxxxxxxxxxx>, Paul Moore <paul@xxxxxxxxxxxxxx>, James Morris <jmorris@xxxxxxxxx>, "Serge E . Hallyn" <serge@xxxxxxxxxx>, Khadija Kamran <kamrankhadijadj@xxxxxxxxx>, Casey Schaufler <casey@xxxxxxxxxxxxxxxx>, Ondrej Mosnacek <omosnace@xxxxxxxxxx>, Kees Cook <keescook@xxxxxxxxxxxx>, John Johansen <john.johansen@xxxxxxxxxxxxx>, Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>, Roberto Sassu <roberto.sassu@xxxxxxxxxx>, Shung-Hsi Yu <shung-hsi.yu@xxxxxxxx>, Edward Cree <ecree.xilinx@xxxxxxxxx>, Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>, Christian Brauner <brauner@xxxxxxxxxx>, Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>, Anna Schumaker <anna@xxxxxxxxxx>, Eric Dumazet <edumazet@xxxxxxxxxx>, Jakub Kicinski <kuba@xxxxxxxxxx>, Paolo Abeni <pabeni@xxxxxxxxxx>, Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
In-reply-to: <20240711111908.3817636-12-xukuohai@huaweicloud.com>
References: <20240711111908.3817636-1-xukuohai@huaweicloud.com> <20240711111908.3817636-12-xukuohai@huaweicloud.com>

On Thu, Jul 11, 2024 at 07:18:59PM +0800, Xu Kuohai wrote:
> From: Xu Kuohai <xukuohai@xxxxxxxxxx>
> 
> Add a disabled hooks list for BPF LSM. progs being attached to the
> listed hooks will be rejected by the verifier.
> 
> Suggested-by: KP Singh <kpsingh@xxxxxxxxxx>
> Signed-off-by: Xu Kuohai <xukuohai@xxxxxxxxxx>

Xu,

The patches 11 and higher are mostly independent from lsm refactoring.
Please send them as a separate patchset for bpf-next.
While lsm cleanups are being reviewed this lsm_disabled list can be
a bit larger temporarily.

Follow-Ups:
- Re: [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list
  - From: Xu Kuohai

References:
- [PATCH bpf-next v4 00/20] Add return value range check for BPF LSM
  - From: Xu Kuohai
- [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list
  - From: Xu Kuohai

Prev by Date: Re: [PATCH bpf-next v4 00/20] Add return value range check for BPF LSM
Next by Date: Re: [PATCH bpf-next v4 00/20] Add return value range check for BPF LSM
Previous by thread: [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list
Next by thread: Re: [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list
Index(es):
- Date
- Thread

[Index of Archives] [Selinux Refpolicy] [Linux SGX] [Fedora Users] [Fedora Desktop] [Yosemite Photos] [Yosemite Camping] [Yosemite Campsites] [KDE Users] [Gnome Users]