Re: [PATCH bpf-next v5 4/5] selftests/bpf: Test forbidden bpf_ksock_send() LSM attach
Stanislav Fomichev <[email protected]>
| Newsgroups | org.kernel.vger.netdev,org.kernel.vger.bpf |
|---|---|
| Message-ID | <[email protected]> |
On 08/07, Mahe Tardy wrote: > The bpf_ksock_send() kfunc eventually calls security_socket_sendmsg(), > thus creating a possible recursion if a program calling the kfunc is > attached on that specific hook. A filter is added on the kfunc > registration to prevent that at load time from the verifier. This test > exercises that the verifier will reject such program on that attach > point. > > Signed-off-by: Mahe Tardy <[email protected]> Acked-by: Stanislav Fomichev <[email protected]>