Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
From: David Howells <dhowells@redhat.com>
Date: 2017-11-09 17:15:42
Also in:
linux-efi, linux-security-module, lkml
Alexei Starovoitov [off-list ref] wrote:
quoted
TBH, I've no idea how bpf does anything, so I can't say whether this is better, overkill or insufficient.ok. To make it clear: Nacked-by: Alexei Starovoitov [off-list ref] For the current patch. Unnecessary checks for no good reason in performance critical functions are not acceptable.
They aren't unnecessary checks. Can you please suggest if there's some way more suitable than just killing bpf entirely? I don't know the code, and I presume you do. David