linux-kernel - Re: [PATCH bpf-next v3 2/2] selftests/bpf: Add test for bpftool access to read-only protected maps

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <dc871c3c-bee5-4dd4-9e59-8c5184ba126a@kernel.org>
Date: Mon, 16 Jun 2025 15:06:12 +0100
From: Quentin Monnet <qmo@...nel.org>
To: Slava Imameev <slava.imameev@...wdstrike.com>, ast@...nel.org,
 daniel@...earbox.net, andrii@...nel.org, shuah@...nel.org,
 bpf@...r.kernel.org
Cc: martin.lau@...ux.dev, eddyz87@...il.com, song@...nel.org,
 yonghong.song@...ux.dev, john.fastabend@...il.com, kpsingh@...nel.org,
 sdf@...ichev.me, haoluo@...gle.com, jolsa@...nel.org, mykolal@...com,
 justin.deschamp@...wdstrike.com, mark.fontana@...wdstrike.com,
 linux-kernel@...r.kernel.org, linux-kselftest@...r.kernel.org
Subject: Re: [PATCH bpf-next v3 2/2] selftests/bpf: Add test for bpftool
 access to read-only protected maps

2025-06-12 08:18 UTC+1000 ~ Slava Imameev <slava.imameev@...wdstrike.com>
> Add selftest cases that validate bpftool's expected behavior when
> accessing maps protected from modification via security_bpf_map.
> 
> The test includes a BPF program attached to security_bpf_map with two maps:
> - A protected map that only allows read-only access
> - An unprotected map that allows full access
> 
> The test script attaches the BPF program to security_bpf_map and
> verifies that for the bpftool map command:
> - Read access works on both maps
> - Write access fails on the protected map
> - Write access succeeds on the unprotected map
> - These behaviors remain consistent when the maps are pinned
> 
> Signed-off-by: Slava Imameev <slava.imameev@...wdstrike.com>


Acked-by: Quentin Monnet <qmo@...nel.org>

Thank you!