Thread (4 messages) 4 messages, 3 authors, 2021-01-28

Re: [PATCH bpf-next v5 1/2] bpf: allow rewriting to ports under ip_unprivileged_port_start

From: patchwork-bot+netdevbpf@kernel.org
Date: 2021-01-28 02:31:05
Also in: bpf

Hello:

This series was applied to bpf/bpf-next.git (refs/heads/master):

On Wed, 27 Jan 2021 11:31:39 -0800 you wrote:
At the moment, BPF_CGROUP_INET{4,6}_BIND hooks can rewrite user_port
to the privileged ones (< ip_unprivileged_port_start), but it will
be rejected later on in the __inet_bind or __inet6_bind.

Let's add another return value to indicate that CAP_NET_BIND_SERVICE
check should be ignored. Use the same idea as we currently use
in cgroup/egress where bit #1 indicates CN. Instead, for
cgroup/bind{4,6}, bit #1 indicates that CAP_NET_BIND_SERVICE should
be bypassed.

[...]
Here is the summary with links:
  - [bpf-next,v5,1/2] bpf: allow rewriting to ports under ip_unprivileged_port_start
    https://git.kernel.org/bpf/bpf-next/c/772412176fb9
  - [bpf-next,v5,2/2] selftests/bpf: verify that rebinding to port < 1024 from BPF works
    https://git.kernel.org/bpf/bpf-next/c/8259fdeb3032

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help