diff options
| author | KP Singh <kpsingh@google.com> | 2020-11-06 13:37:39 +0300 |
|---|---|---|
| committer | Alexei Starovoitov <ast@kernel.org> | 2020-11-06 19:08:37 +0300 |
| commit | 9e7a4d9831e836eb03dedab89902277ee94eb7a6 (patch) | |
| tree | 03732b15f5f401f21a500303b7441b11d927dfd0 /security | |
| parent | c6bde958a62b8ca5ee8d2c1fe429aec4ad54efad (diff) | |
| download | linux-9e7a4d9831e836eb03dedab89902277ee94eb7a6.tar.xz | |
bpf: Allow LSM programs to use bpf spin locks
Usage of spin locks was not allowed for tracing programs due to
insufficient preemption checks. The verifier does not currently prevent
LSM programs from using spin locks, but the helpers are not exposed
via bpf_lsm_func_proto.
Based on the discussion in [1], non-sleepable LSM programs should be
able to use bpf_spin_{lock, unlock}.
Sleepable LSM programs can be preempted which means that allowng spin
locks will need more work (disabling preemption and the verifier
ensuring that no sleepable helpers are called when a spin lock is held).
[1]: https://lore.kernel.org/bpf/20201103153132.2717326-1-kpsingh@chromium.org/T/#md601a053229287659071600d3483523f752cd2fb
Signed-off-by: KP Singh <kpsingh@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Song Liu <songliubraving@fb.com>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Link: https://lore.kernel.org/bpf/20201106103747.2780972-2-kpsingh@chromium.org
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions