From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alexei Starovoitov Subject: Re: [PATCH bpf-next] bpf, capabilities: introduce CAP_BPF Date: Tue, 1 Oct 2019 22:18:18 +0000 Message-ID: <6e8b910c-a739-857d-4867-395bd369bc6a@fb.com> References: <20190828003447.htgzsxs5oevn3eys@ast-mbp.dhcp.thefacebook.com> <20190828044340.zeha3k3cmmxgfqj7@ast-mbp.dhcp.thefacebook.com> <20190828225512.q6qbvkdiqih2iewk@ast-mbp.dhcp.thefacebook.com> <20190829040721.ef6rumbaunkavyrr@ast-mbp.dhcp.thefacebook.com> <20190928193727.1769e90c@oasis.local.home> <201909301129.5A1129C@keescook> <20191001012226.vwpe56won5r7gbrz@ast-mbp.dhcp.thefacebook.com> <20191001181052.43c9fabb@gandalf.local.home> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <20191001181052.43c9fabb@gandalf.local.home> Content-Language: en-US Content-ID: Sender: netdev-owner@vger.kernel.org To: Steven Rostedt , Alexei Starovoitov Cc: Kees Cook , Andy Lutomirski , Andy Lutomirski , Alexei Starovoitov , LSM List , James Morris , Jann Horn , Peter Zijlstra , Masami Hiramatsu , "David S. Miller" , Daniel Borkmann , Network Development , bpf , Kernel Team , Linux API List-Id: linux-api@vger.kernel.org T24gMTAvMS8xOSAzOjEwIFBNLCBTdGV2ZW4gUm9zdGVkdCB3cm90ZToNCj4gT24gTW9uLCAzMCBT ZXAgMjAxOSAxODoyMjoyOCAtMDcwMA0KPiBBbGV4ZWkgU3Rhcm92b2l0b3YgPGFsZXhlaS5zdGFy b3ZvaXRvdkBnbWFpbC5jb20+IHdyb3RlOg0KPiANCj4+IHRyYWNlZnMgaXMgYSBmaWxlIHN5c3Rl bSwgc28gY2xlYXJseSBmaWxlIGJhc2VkIGFjbHMgYXJlIG11Y2ggYmV0dGVyIGZpdA0KPj4gZm9y IGFsbCB0cmFjZWZzIG9wZXJhdGlvbnMuDQo+PiBCdXQgdGhhdCBpcyBub3QgdGhlIGNhc2UgZm9y IGZ0cmFjZSBvdmVyYWxsLg0KPj4gYnBmX3RyYWNlX3ByaW50aygpIGNhbGxzIHRyYWNlX3ByaW50 aygpIHRoYXQgZHVtcHMgaW50byB0cmFjZSBwaXBlLg0KPj4gVGVjaG5pY2FsbHkgaXQncyBmdHJh Y2Ugb3BlcmF0aW9uLCBidXQgaXQgY2Fubm90IGJlIGNvbnRyb2xsZWQgYnkgdHJhY2Vmcw0KPj4g YW5kIGJ5IGZpbGUgcGVybWlzc2lvbnMuIFRoYXQncyB0aGUgbW90aXZhdGlvbiB0byBndWFyZCBi cGZfdHJhY2VfcHJpbnRrKCkNCj4+IHVzYWdlIGZyb20gYnBmIHByb2dyYW0gd2l0aCBDQVBfVFJB Q0lORy4NCj4gDQo+IEJUVywgSSdkIHJhdGhlciBoYXZlIGJwZiB1c2UgYW4gZXZlbnQgdGhhdCBy ZWNvcmRzIGEgc3RyaW5nIHRoYW4gdXNpbmcNCj4gdHJhY2UgcHJpbnRrIGl0c2VsZi4NCj4gDQo+ IFBlcmhhcHMgc29tZXRoaW5nIGxpa2UgImJwZl9wcmludCIgZXZlbnQ/IFRoYXQgY291bGQgYmUg ZGVmaW5lZCBsaWtlOg0KPiANCj4gVFJBQ0VfRVZFTlQoYnBmX3ByaW50LA0KPiAJVFBfUFJPVE8o Y29uc3QgY2hhciAqbXNnKSwNCj4gCVRQX0FSR1MobXNnKSwNCj4gCVRQX1NUUlVDVF9fZW50cnko DQo+IAkJX19zdHJpbmcobXNnLCBtc2cpDQo+IAkpLA0KPiAJVFBfZmFzdF9hc3NpZ24oDQo+IAkJ X19hc3NpZ25fc3RyKG1zZywgbXNnKQ0KPiAJKSwNCj4gCVRQX3ByaW50aygibXNnPSVzIiwgX19n ZXRfc3RyKG1zZykpDQo+ICk7DQo+IA0KPiBBbmQgdGhlbiB5b3UgY2FuIGp1c3QgZm9ybWF0IHRo ZSBzdHJpbmcgZnJvbSB0aGUgYnBmX3RyYWNlX3ByaW50aygpDQo+IGludG8gbXNnLCBhbmQgdGhl biBoYXZlOg0KPiANCj4gCXRyYWNlX2JwZl9wcmludChtc2cpOw0KDQpJdCdzIGFuIGludGVyZXN0 aW5nIGlkZWEsIGJ1dCBJIGRvbid0IHRoaW5rIGl0IGNhbiB3b3JrLg0KUGxlYXNlIHNlZSBicGZf dHJhY2VfcHJpbnRrIGltcGxlbWVudGF0aW9uIGluIGtlcm5lbC90cmFjZS9icGZfdHJhY2UuYw0K SXQncyBhIGxvdCBtb3JlIHRoYW4gc3RyaW5nIHByaW50aW5nLg0KDQo+IFRoZSB1c2VyIGNvdWxk IHRoZW4ganVzdCBlbmFibGUgdGhlIHRyYWNlIGV2ZW50IGZyb20gdGhlIGZpbGUgc3lzdGVtLiBJ DQo+IGNvdWxkIGFsc28gd29yayBvbiBtYWtpbmcgaW5zdGFuY2VzIHdvcmsgbGlrZSAvdG1wIGRv ZXMgKHdpdGggdGhlDQo+IHN0aWNreSBiaXQpIGluIGNyZWF0aW9uLiBUaGF0IHdheSBwZW9wbGUg d2l0aCB3cml0ZSBhY2Nlc3MgdG8gdGhlDQo+IGluc3RhbmNlcyBkaXJlY3RvcnksIGNhbiBtYWtl IHRoZWlyIG93biBidWZmZXJzIHRoYXQgdGhleSBjYW4gdXNlIChhbmQNCj4gb3RoZXJzIGNhbid0 IGFjY2VzcykuDQoNCldlIHRyaWVkIGluc3RhbmNlcyBpbiBiY2MgaW4gdGhlIHBhc3QgYW5kIGV2 ZW50dWFsbHkgcmVtb3ZlZCBhbGwgdGhlIA0Kc3VwcG9ydC4gVGhlIG92ZXJoZWFkIG9mIGluc3Rh bmNlcyBpcyB0b28gaGlnaCB0byBiZSB1c2FibGUuDQoNCj4gDQo+IA0KPj4NCj4+IEJvdGggJ3Ry YWNlJyBhbmQgJ3RyYWNlX3BpcGUnIGhhdmUgcXVpcmt5IHNpZGUgZWZmZWN0cy4NCj4+IExpa2Ug b3BlbmluZyAndHJhY2UnIGZpbGUgd2lsbCBtYWtlIGFsbCBwYXJhbGxlbCB0cmFjZV9wcmludGso KSB0byBiZSBpZ25vcmVkLg0KPj4gV2hpbGUgcmVhZGluZyAndHJhY2VfcGlwZScgZmlsZSB3aWxs IGNsZWFyIGl0Lg0KPj4gVGhlIHBvaW50IHRoYXQgdHJhZGl0aW9uYWwgJ3JlYWQnIGFuZCAnd3Jp dGUnIEFDTHMgZG9uJ3QgbWFwIGFzLWlzDQo+PiB0byB0cmFjZWZzLCBzbyBJIHdvdWxkIGJlIGNh cmVmdWwgY2F0ZWdvcml6aW5nIHRoaW5ncyBpbnRvDQo+PiBjb25maWRlbnRpYWxpdHkgdnMgaW50 ZWdyaXR5IG9ubHkgYmFzZWQgb24gYWNjZXNzIHR5cGUuDQo+IA0KPiBXaGF0IGV4YWN0bHkgaXMg dGhlIGJwZl90cmFjZV9wcmludGsoKSB1c2VkIGZvcj8gSSBtYXkgaGF2ZSBvdGhlciBpZGVhcw0K PiB0aGF0IGNhbiBoZWxwLg0KDQpJdCdzIGRlYnVnZ2luZyBvZiBicGYgcHJvZ3JhbXMuIFNhbWUg aXMgd2hhdCBwcmludGsoKSBpcyB1c2VkIGZvcg0KYnkga2VybmVsIGRldmVsb3BlcnMuDQoNCg==