Re: [kernel-hardening] Looking for something to WORK ON

[Daniel Borkmann <daniel@iogearbox.net>]

On 01/11/2017 11:12 PM, Shubham Bansal wrote:
> Hi Kees,
>
> I would have already started working on it since we last talked but before
> that I wanted to check if anybody else is also not working on the same
> thing. Otherwise it would be waste of time.
>
> Anyways. I will start working on it. No point in postponing in.

Very sorry for the late reply, Shubham, seems I missed your earlier email. :/
Afaik, nobody is working on that, so would be nice to tackle this.

> On Jan 12, 2017 2:59 AM, "Kees Cook" <keescook@chromium.org> wrote:
>
>> On Wed, Jan 11, 2017 at 4:46 AM, Shubham Bansal
>> <illusionist.neo@gmail.com> wrote:
>>>
>>> On Wed, Jul 13, 2016 at 2:32 PM, Daniel Borkmann <daniel@iogearbox.net>
>>> wrote:
>>>> Feel free to check out slides etc that are mostly located here:
>>>>
>>>>    https://github.com/iovisor/bpf-docs
>>>>
>>>> Also, Documentation/networking/filter.txt in the kernel tree provides
>> some
>>>> info as a starting point, an example of eBPF JIT can be found here
>>>> arch/x86/net/
>>>> in kernel tree.
>>>>
>>>> To give you a basic overview what JITs are still classic BPF (cBPF)
>> ones:
>>>>
>>>> $ git grep -n "select HAVE_CBPF_JIT"
>>>> arch/arm/Kconfig:44:    select HAVE_CBPF_JIT
>>>> arch/mips/Kconfig:18:   select HAVE_CBPF_JIT if !CPU_MICROMIPS
>>>> arch/powerpc/Kconfig:131:       select HAVE_CBPF_JIT if CPU_BIG_ENDIAN
>>>> arch/sparc/Kconfig:35:  select HAVE_CBPF_JIT
>>>>
>>>> ... and which are eBPF (ppc64 one should get merged next window I
>>>> believe):
>>>>
>>>> $ git grep -n "select HAVE_EBPF_JIT"
>>>> arch/arm64/Kconfig:64:  select HAVE_EBPF_JIT
>>>> arch/s390/Kconfig:131:  select HAVE_EBPF_JIT if PACK_STACK &&
>>>> HAVE_MARCH_Z196_FEATURES
>>>> arch/x86/Kconfig:94:    select HAVE_EBPF_JIT                    if
>> X86_64
>>>>
>>>> Cheers,
>>>> Daniel
>>>
>>> Hi Daniel,
>>>
>>> I have read about the EBPF and BFP. I wanted to start contributing. Do
>> you
>>> have any place for me to start with ?
>>> I mailed you regarding the same few months ago but didn't get the reply.
>>
>> Daniel may have more ideas, but I would say taking a CBPF jit and
>> converting it to an EBPF jit would be the best thing to start with.
>>
>> Doing ARM first might be easiest to tackle?
>>
>> -Kees
>>
>> --
>> Kees Cook
>> Nexus Security
>>
>