diff options
| author | Mahe Tardy <mahe.tardy@gmail.com> | 2026-08-13 11:05:39 +0000 |
|---|---|---|
| committer | Daniel Borkmann <daniel@iogearbox.net> | 2026-08-15 23:36:19 +0200 |
| commit | 7b0dfbf5776bf75fadcb59fce1417c187bbb9943 (patch) | |
| tree | f08a8a449cf9a6a90b1363f203228fa90b2f372b /kernel | |
| parent | c7838e3dc61a1e3e0a44f73267ffd33fa2d5e083 (diff) | |
selftests/bpf: Test forbidden bpf_ksock_send() LSM attach
The bpf_ksock_send() kfunc eventually calls security_socket_sendmsg(),
thus creating a possible recursion if a program calling the kfunc is
attached on that specific hook. A filter is added on the kfunc
registration to prevent that at load time from the verifier. This test
exercises that the verifier will reject such program on that attach
point.
Signed-off-by: Mahe Tardy <mahe.tardy@gmail.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Stanislav Fomichev <sdf@fomichev.me>
Acked-by: Song Liu <song@kernel.org>
Link: https://lore.kernel.org/bpf/20260813110540.103550-5-mahe.tardy@gmail.com
Diffstat (limited to 'kernel')
0 files changed, 0 insertions, 0 deletions
