Re: [PATCH net-next v7 3/5] security: bpf: Add LSM hooks for bpf object related syscall

2017-10-19 Thread James Morris
On Wed, 18 Oct 2017, Chenbo Feng wrote: > From: Chenbo Feng > > Introduce several LSM hooks for the syscalls that will allow the > userspace to access to eBPF object such as eBPF programs and eBPF maps. > The security check is aimed to enforce a per object security protection > for eBPF object s

[PATCH net-next v7 3/5] security: bpf: Add LSM hooks for bpf object related syscall

2017-10-18 Thread Chenbo Feng
From: Chenbo Feng Introduce several LSM hooks for the syscalls that will allow the userspace to access to eBPF object such as eBPF programs and eBPF maps. The security check is aimed to enforce a per object security protection for eBPF object so only processes with the right priviliges can read/w