Re: [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list

[PATCH bpf-next v4 00/20] Add return value range check for BPF LSM · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
[PATCH bpf-next v4 02/20] lsm: Refactor return value of LSM hook inode_need_killpriv · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH bpf-next v4 02/20] lsm: Refactor return value of LSM hook inode_need_killpriv · Serge Hallyn <serge@hallyn.com> · 2024-07-11
Re: [PATCH bpf-next v4 02/20] lsm: Refactor return value of LSM hook inode_need_killpriv · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-13
Re: [PATCH v4 2/20] lsm: Refactor return value of LSM hook inode_need_killpriv · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH v4 2/20] lsm: Refactor return value of LSM hook inode_need_killpriv · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-20
[PATCH bpf-next v4 05/20] lsm: Refactor return value of LSM hook inode_copy_up_xattr · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH v4 5/20] lsm: Refactor return value of LSM hook inode_copy_up_xattr · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH v4 5/20] lsm: Refactor return value of LSM hook inode_copy_up_xattr · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-20
[PATCH bpf-next v4 08/20] lsm: Refactor return value of LSM hook getprocattr · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH v4 8/20] lsm: Refactor return value of LSM hook getprocattr · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH v4 8/20] lsm: Refactor return value of LSM hook getprocattr · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-20
[PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list · Alexei Starovoitov <hidden> · 2024-07-12
Re: [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-13
[PATCH bpf-next v4 04/20] lsm: Refactor return value of LSM hook inode_listsecurity · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH v4 4/20] lsm: Refactor return value of LSM hook inode_listsecurity · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH v4 4/20] lsm: Refactor return value of LSM hook inode_listsecurity · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-20
[PATCH bpf-next v4 03/20] lsm: Refactor return value of LSM hook inode_getsecurity · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH bpf-next v4 03/20] lsm: Refactor return value of LSM hook inode_getsecurity · Simon Horman <horms@kernel.org> · 2024-07-12
Re: [PATCH bpf-next v4 03/20] lsm: Refactor return value of LSM hook inode_getsecurity · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-13
Re: [PATCH v4 3/20] lsm: Refactor return value of LSM hook inode_getsecurity · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH v4 3/20] lsm: Refactor return value of LSM hook inode_getsecurity · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-20
[PATCH bpf-next v4 01/20] lsm: Refactor return value of LSM hook vm_enough_memory · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH bpf-next v4 01/20] lsm: Refactor return value of LSM hook vm_enough_memory · Serge Hallyn <serge@hallyn.com> · 2024-07-11
Re: [PATCH v4 1/20] lsm: Refactor return value of LSM hook vm_enough_memory · Paul Moore <paul@paul-moore.com> · 2024-07-19
[PATCH bpf-next v4 07/20] lsm: Refactor return value of LSM hook setprocattr · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH v4 7/20] lsm: Refactor return value of LSM hook setprocattr · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH v4 7/20] lsm: Refactor return value of LSM hook setprocattr · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-20
[PATCH bpf-next v4 06/20] lsm: Refactor return value of LSM hook getselfattr · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH v4 6/20] lsm: Refactor return value of LSM hook getselfattr · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH v4 6/20] lsm: Refactor return value of LSM hook getselfattr · Xu Kuohai <hidden> · 2024-07-20
[PATCH bpf-next v4 09/20] lsm: Refactor return value of LSM hook key_getsecurity · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH v4 9/20] lsm: Refactor return value of LSM hook key_getsecurity · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH v4 9/20] lsm: Refactor return value of LSM hook key_getsecurity · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-20
Re: [PATCH v4 9/20] lsm: Refactor return value of LSM hook key_getsecurity · Paul Moore <paul@paul-moore.com> · 2024-07-22
Re: [PATCH v4 9/20] lsm: Refactor return value of LSM hook key_getsecurity · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-23
Re: [PATCH v4 9/20] lsm: Refactor return value of LSM hook key_getsecurity · Paul Moore <paul@paul-moore.com> · 2024-07-23
[PATCH bpf-next v4 10/20] lsm: Refactor return value of LSM hook audit_rule_match · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH v4 10/20] lsm: Refactor return value of LSM hook audit_rule_match · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH v4 10/20] lsm: Refactor return value of LSM hook audit_rule_match · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-20
[PATCH bpf-next v4 12/20] bpf, lsm: Enable BPF LSM prog to read/write return value parameters · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-11
Re: [PATCH bpf-next v4 00/20] Add return value range check for BPF LSM · Paul Moore <paul@paul-moore.com> · 2024-07-12
Re: [PATCH bpf-next v4 00/20] Add return value range check for BPF LSM · Paul Moore <paul@paul-moore.com> · 2024-07-12
Re: [PATCH bpf-next v4 00/20] Add return value range check for BPF LSM · Paul Moore <paul@paul-moore.com> · 2024-07-12
Re: [PATCH bpf-next v4 00/20] Add return value range check for BPF LSM · Paul Moore <paul@paul-moore.com> · 2024-07-19
Re: [PATCH bpf-next v4 00/20] Add return value range check for BPF LSM · Xu Kuohai <xukuohai@huaweicloud.com> · 2024-07-19

From: Alexei Starovoitov <hidden>
Date: 2024-07-12 17:56:47
Also in: bpf, linux-integrity, linux-kselftest, linux-security-module, selinux

On Thu, Jul 11, 2024 at 07:18:59PM +0800, Xu Kuohai wrote:

From: Xu Kuohai <redacted>

Add a disabled hooks list for BPF LSM. progs being attached to the
listed hooks will be rejected by the verifier.

Suggested-by: KP Singh <kpsingh@kernel.org>
Signed-off-by: Xu Kuohai <redacted>

Xu,

The patches 11 and higher are mostly independent from lsm refactoring.
Please send them as a separate patchset for bpf-next.
While lsm cleanups are being reviewed this lsm_disabled list can be
a bit larger temporarily.

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help