]> git.ipfire.org Git - thirdparty/systemd.git/commit
core: add options to delegate BPFFS token creation 36134/head
authorMatteo Croce <teknoraver@meta.com>
Thu, 15 May 2025 14:32:46 +0000 (16:32 +0200)
committerMatteo Croce <teknoraver@meta.com>
Tue, 8 Jul 2025 20:35:29 +0000 (22:35 +0200)
commitea9826eb946d57aaba7e6bfa2d6b120136c6b20f
tree3757f673054e92fe301e371ab0b08e98a995cc6c
parent3a47437fc9f37637c2924a7663cf2b8849ceb10d
core: add options to delegate BPFFS token creation

Add four new options BPFDelegate{Commands,Maps,Programs,Attachments}=
in order to delegate to a BPFFS instance the permission to create tokens.

The value is a list of options taken from:
https://github.com/torvalds/linux/blob/v6.14/include/uapi/linux/bpf.h#L922-L1121
The special value "any" means to allow every possible values.

More informations about BPF tokens here:
https://lwn.net/Articles/947173/
21 files changed:
.github/workflows/linter.yml
man/meson.build
man/org.freedesktop.systemd1.xml
man/systemd.exec.xml
src/basic/generate-bpf-delegate-configs.py [new file with mode: 0755]
src/basic/meson.build
src/core/dbus-execute.c
src/core/exec-invoke.c
src/core/execute-serialize.c
src/core/execute.c
src/core/execute.h
src/core/load-fragment-gperf.gperf.in
src/core/load-fragment.c
src/core/load-fragment.h
src/core/namespace.c
src/core/namespace.h
src/shared/bus-unit-util.c
src/test/meson.build
src/test/test-bpf-token.c [new file with mode: 0644]
test/units/TEST-07-PID1.private-bpf.sh
tools/xml_helper.py