Thread (7 messages) flat view 7 messages, 4 authors, 2020-12-03

Re: [PATCH v6 bpf-next 0/2] libbpf: add support for privileged/unprivileged control separation

From: patchwork-bot+netdevbpf@kernel.org
Date: 2020-12-02 23:10:48
Also in: bpf

Hello:

This series was applied to bpf/bpf-next.git (refs/heads/master):

On Wed,  2 Dec 2020 11:39:21 +0100 you wrote:
From: Mariusz Dudek <redacted>

This patch series adds support for separation of eBPF program
load and xsk socket creation. In for example a Kubernetes
environment you can have an AF_XDP CNI or daemonset that is
responsible for launching pods that execute an application
using AF_XDP sockets. It is desirable that the pod runs with
as low privileges as possible, CAP_NET_RAW in this case,
and that all operations that require privileges are contained
in the CNI or daemonset.

[...]
Here is the summary with links:
  - [v6,bpf-next,1/2] libbpf: separate XDP program load with xsk socket creation
    https://git.kernel.org/bpf/bpf-next/c/56ab028af72b
  - [v6,bpf-next,2/2] samples/bpf: sample application for eBPF load and socket creation split
    https://git.kernel.org/bpf/bpf-next/c/d6482b4367ac

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help