Chenbo Feng f66e448cfd selinux: bpf: Add addtional check for bpf object file receive ... Introduce a bpf object related check when sending and receiving files through unix domain socket as well as binder. It checks if the receiving process have privilege to read/write the bpf map or use the bpf program. This check is necessary because the bpf maps and programs are using a anonymous inode as their shared inode so the normal way of checking the files and sockets when passing between processes cannot work properly on eBPF object. This check only works when the BPF_SYSCALL is configured. Signed-off-by: Chenbo Feng <fengc@google.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Reviewed-by: James Morris <james.l.morris@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-10-20 13:32:59 +01:00
..
arraymap.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
bpf_lru_list.c	bpf: lru: Lower the PERCPU_NR_SCANS from 16 to 4	2017-04-17 13:55:52 -04:00
bpf_lru_list.h	bpf: Only set node->ref = 1 if it has not been set	2017-09-01 09:57:39 -07:00
cgroup.c	bpf: remove redundant variable old_flags	2017-10-11 20:22:34 -07:00
core.c	tracing: bpf: Hide bpf trace events when they are not used	2017-10-16 21:10:20 +01:00
cpumap.c	bpf: cpumap add tracepoints	2017-10-18 12:12:18 +01:00
devmap.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
disasm.c	bpf: move instruction printing into a separate file	2017-10-10 12:30:16 -07:00
disasm.h	bpf: move instruction printing into a separate file	2017-10-10 12:30:16 -07:00
hashtab.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
helpers.c	bpf: rename ARG_PTR_TO_STACK	2017-01-09 16:56:27 -05:00
inode.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
lpm_trie.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
Makefile	bpf: introduce new bpf cpu map type BPF_MAP_TYPE_CPUMAP	2017-10-18 12:12:18 +01:00
map_in_map.c	bpf: Add syscall lookup support for fd array and htab	2017-06-29 13:13:25 -04:00
map_in_map.h	bpf: Add syscall lookup support for fd array and htab	2017-06-29 13:13:25 -04:00
percpu_freelist.c	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
percpu_freelist.h	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
sockmap.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
stackmap.c	bpf: Add file mode configuration into bpf maps	2017-10-20 13:32:59 +01:00
syscall.c	selinux: bpf: Add addtional check for bpf object file receive	2017-10-20 13:32:59 +01:00
tnum.c	bpf/verifier: track signed and unsigned min/max values	2017-08-08 17:51:34 -07:00
verifier.c	bpf: move knowledge about post-translation offsets out of verifier	2017-10-18 14:17:10 +01:00