Hmmm, this doesn't build for me:
security/selinux/hooks.c: In function ‘bpf_fd_pass’: security/selinux/hooks.c:6325:40: error: ‘SECCLASS_BPF_MAP’ undeclared (first use in this function); did you mean ‘SECCLASS_BPF’? ret = avc_has_perm(sid, bpfsec->sid, SECCLASS_BPF_MAP, ^~~~~~~~~~~~~~~~ SECCLASS_BPF security/selinux/hooks.c:6325:40: note: each undeclared identifier is reported only once for each function it appears in security/selinux/hooks.c:6332:40: error: ‘SECCLASS_BPF_PROG’ undeclared (first use in this function); did you mean ‘SECCLASS_BPF_MAP’? ret = avc_has_perm(sid, bpfsec->sid, SECCLASS_BPF_PROG, ^~~~~~~~~~~~~~~~~ SECCLASS_BPF_MAP