[LSF/MM/BPF TOPIC] Implementing BPF_PROG_LOAD_FD

[Neill Kapron <nkapron@google.com>]

Hello,

I am working on improving BPF support in Android and presented at LPC23 on the topic [1]. I would like to attend the LSM/MM/BPF Summit in May to continue the discussion.

Unfortunately I was pulled off the work for the last quarter and missed the deadline for topic submissions. I would like to attend the summit to discuss the work I am planning for the rest of the year, specifically around implementing BPF_PROG_LOAD_FD. This mechanism would be analogous to finit_module, and would provide a way to support verified boot with BPF by enabling the kernel to load BPF programs from a verified filesystem. This requirement has been set by the Android security team before enabling other upstream BPF support.

I understand that this is not a trivial task, and would like to get input on the best approach for a staged integration of this- starting with the basic framework, necessary libbpf additions, and test applications, followed by porting features provided by libbpf (like CO-RE) to the kernel.

Thanks for your consideration,
Neill Kapron

[1] https://www.youtube.com/watch?v=UM_tnuZhmt8