]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
bpf: Implement exclusive map creation
authorKP Singh <kpsingh@kernel.org>
Sun, 14 Sep 2025 21:51:31 +0000 (23:51 +0200)
committerAlexei Starovoitov <ast@kernel.org>
Fri, 19 Sep 2025 02:11:42 +0000 (19:11 -0700)
commitbaefdbdf6812e120c9fba9cfb101d3656f478026
tree222ccd1c61819475bb6a46a761b7d5e4092c1e6c
parent603b4416232524dafde8e2cf859788dae786dea1
bpf: Implement exclusive map creation

Exclusive maps allow maps to only be accessed by program with a
program with a matching hash which is specified in the excl_prog_hash
attr.

For the signing use-case, this allows the trusted loader program
to load the map and verify the integrity

Signed-off-by: KP Singh <kpsingh@kernel.org>
Link: https://lore.kernel.org/r/20250914215141.15144-3-kpsingh@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
include/linux/bpf.h
include/uapi/linux/bpf.h
kernel/bpf/syscall.c
kernel/bpf/verifier.c
tools/include/uapi/linux/bpf.h