diff options
| author | Andrii Nakryiko <[email protected]> | 2024-01-23 18:21:01 -0800 |
|---|---|---|
| committer | Alexei Starovoitov <[email protected]> | 2024-01-24 16:21:01 -0800 |
| commit | a177fc2bf6fd83704854feaf7aae926b1df4f0b9 (patch) | |
| tree | 74cafa2a721c24e10f9cbbeacd7acf518584edcb /tools/testing/selftests/bpf/prog_tests/libbpf_probes.c | |
| parent | 35f96de04127d332a5c5e8a155d31f452f88c76d (diff) | |
bpf: Add BPF token support to BPF_MAP_CREATE command
Allow providing token_fd for BPF_MAP_CREATE command to allow controlled
BPF map creation from unprivileged process through delegated BPF token.
New BPF_F_TOKEN_FD flag is added to specify together with BPF token FD
for BPF_MAP_CREATE command.
Wire through a set of allowed BPF map types to BPF token, derived from
BPF FS at BPF token creation time. This, in combination with allowed_cmds
allows to create a narrowly-focused BPF token (controlled by privileged
agent) with a restrictive set of BPF maps that application can attempt
to create.
Signed-off-by: Andrii Nakryiko <[email protected]>
Signed-off-by: Alexei Starovoitov <[email protected]>
Link: https://lore.kernel.org/bpf/[email protected]
Diffstat (limited to 'tools/testing/selftests/bpf/prog_tests/libbpf_probes.c')
| -rw-r--r-- | tools/testing/selftests/bpf/prog_tests/libbpf_probes.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/tools/testing/selftests/bpf/prog_tests/libbpf_probes.c b/tools/testing/selftests/bpf/prog_tests/libbpf_probes.c index 9f766ddd946a..573249a2814d 100644 --- a/tools/testing/selftests/bpf/prog_tests/libbpf_probes.c +++ b/tools/testing/selftests/bpf/prog_tests/libbpf_probes.c @@ -68,6 +68,8 @@ void test_libbpf_probe_map_types(void) if (map_type == BPF_MAP_TYPE_UNSPEC) continue; + if (strcmp(map_type_name, "__MAX_BPF_MAP_TYPE") == 0) + continue; if (!test__start_subtest(map_type_name)) continue; |