Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object

[PATCH bpf-next 00/29] BPF token · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Linus Torvalds <torvalds@linuxfoundation.org> · 2024-01-05
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Matthew Wilcox <willy@infradead.org> · 2024-01-05
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Linus Torvalds <torvalds@linuxfoundation.org> · 2024-01-05
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-05
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-05
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Alexei Starovoitov <hidden> · 2024-01-05
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Linus Torvalds <torvalds@linuxfoundation.org> · 2024-01-05
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-05
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Christian Brauner <brauner@kernel.org> · 2024-01-08
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-08
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Christian Brauner <brauner@kernel.org> · 2024-01-09
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-09
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Christian Brauner <brauner@kernel.org> · 2024-01-10
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-11
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Christian Brauner <brauner@kernel.org> · 2024-01-11
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-11
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Christian Brauner <brauner@kernel.org> · 2024-01-12
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-12
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Christian Brauner <brauner@kernel.org> · 2024-01-12
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-14
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Christian Brauner <brauner@kernel.org> · 2024-01-16
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Christian Brauner <brauner@kernel.org> · 2024-01-08
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Paul Moore <paul@paul-moore.com> · 2024-01-08
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Andrii Nakryiko <hidden> · 2024-01-09
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Paul Moore <paul@paul-moore.com> · 2024-01-10
Re: [PATCH bpf-next 03/29] bpf: introduce BPF token object · Christian Brauner <brauner@kernel.org> · 2024-01-08
[PATCH bpf-next 07/29] bpf: take into account BPF token when fetching helper protos · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 02/29] bpf: add BPF token delegation mount options to BPF FS · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 01/29] bpf: align CAP_NET_ADMIN checks with bpf_capable() approach · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 04/29] bpf: add BPF token support to BPF_MAP_CREATE command · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 10/29] bpf,lsm: refactor bpf_map_alloc/bpf_map_free LSM hooks · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 06/29] bpf: add BPF token support to BPF_PROG_LOAD command · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 11/29] bpf,lsm: add BPF token LSM hooks · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 05/29] bpf: add BPF token support to BPF_BTF_LOAD command · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 09/29] bpf,lsm: refactor bpf_prog_alloc/bpf_prog_free LSM hooks · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 08/29] bpf: consistently use BPF token throughout BPF verifier logic · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 17/29] bpf,selinux: allocate bpf_security_struct per BPF token · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 12/29] libbpf: add bpf_token_create() API · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 19/29] bpf: support symbolic BPF FS delegation mount options · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 25/29] libbpf: wire up BPF token support at BPF object level · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 22/29] libbpf: further decouple feature checking logic from bpf_object · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 18/29] bpf: fail BPF_TOKEN_CREATE if no delegation option was set on BPF FS · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 13/29] libbpf: add BPF token support to bpf_map_create() API · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
Re: [PATCH bpf-next 13/29] libbpf: add BPF token support to bpf_map_create() API · Linus Torvalds <torvalds@linuxfoundation.org> · 2024-01-04
Re: [PATCH bpf-next 13/29] libbpf: add BPF token support to bpf_map_create() API · Andrii Nakryiko <hidden> · 2024-01-04
[PATCH bpf-next 21/29] libbpf: split feature detectors definitions from cached results · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 16/29] selftests/bpf: add BPF token-enabled tests · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 15/29] libbpf: add BPF token support to bpf_prog_load() API · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 24/29] libbpf: wire up token_fd into feature probing logic · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 23/29] libbpf: move feature detection code into its own file · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 14/29] libbpf: add BPF token support to bpf_btf_load() API · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 20/29] selftests/bpf: utilize string values for delegate_xxx mount options · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 28/29] libbpf: support BPF token path setting through LIBBPF_BPF_TOKEN_PATH envvar · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 26/29] selftests/bpf: add BPF object loading tests with explicit token passing · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 29/29] selftests/bpf: add tests for LIBBPF_BPF_TOKEN_PATH envvar · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
[PATCH bpf-next 27/29] selftests/bpf: add tests for BPF object load with implicit token · Andrii Nakryiko <andrii@kernel.org> · 2024-01-03
Re: [PATCH bpf-next 00/29] BPF token · Jakub Kicinski <kuba@kernel.org> · 2024-01-03

From: Andrii Nakryiko <hidden>
Date: 2024-01-05 22:07:09
Also in: bpf, linux-fsdevel, linux-security-module

On Fri, Jan 5, 2024 at 12:46 PM Linus Torvalds
[off-list ref] wrote:

On Fri, 5 Jan 2024 at 12:32, Matthew Wilcox [off-list ref] wrote:

quoted

I can't tell from the description whether there are going to be a lot of
these.  If there are, it might make sense to create a slab cache for
them rather than get them from the general-purpose kmalloc caches.

I suspect it's a "count on the fingers of your hand" thing, and having
a slab cache would be more overhead than you'd ever win.

Yes, you suspect right. It will be mostly one BPF token instance per
application, and even then only if the application is running within a
container that has BPF token set up (through BPF FS instance). So
yeah, slab cache seems like an overkill.

           Linus

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help