netdev - Re: [PATCH v3 bpf-next 0/9] bpf: introduce cgroup-bpf bind, connect, post-bind hooks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <968a6a65-fb3e-5214-e839-973fd5087b67@iogearbox.net>
Date:   Sat, 31 Mar 2018 23:22:49 +0200
From:   Daniel Borkmann <daniel@...earbox.net>
To:     Alexei Starovoitov <ast@...nel.org>, davem@...emloft.net
Cc:     netdev@...r.kernel.org, kernel-team@...com
Subject: Re: [PATCH v3 bpf-next 0/9] bpf: introduce cgroup-bpf bind, connect,
 post-bind hooks

On 03/31/2018 12:07 AM, Alexei Starovoitov wrote:
> v2->v3:
> - rebase due to conflicts
> - fix ipv6=m build
> 
> v1->v2:
> - support expected_attach_type at prog load time so that prog (incl.
>   context accesses and calls to helpers) can be validated with regard to
>   specific attach point it is supposed to be attached to.
>   Later, at attach time, attach type is checked so that it must be same as
>   at load time if it was provided
> - reworked hooks to rely on expected_attach_type, and reduced number of new
>   prog types from 6 to just 1: BPF_PROG_TYPE_CGROUP_SOCK_ADDR
> - reused BPF_PROG_TYPE_CGROUP_SOCK for sys_bind post-hooks
> - add selftests for post-sys_bind hook
[...]

Applied to bpf-next, thanks everyone!