Stanislav Fomichev 69fd337a97 bpf: per-cgroup lsm flavor ... Allow attaching to lsm hooks in the cgroup context. Attaching to per-cgroup LSM works exactly like attaching to other per-cgroup hooks. New BPF_LSM_CGROUP is added to trigger new mode; the actual lsm hook we attach to is signaled via existing attach_btf_id. For the hooks that have 'struct socket' or 'struct sock' as its first argument, we use the cgroup associated with that socket. For the rest, we use 'current' cgroup (this is all on default hierarchy == v2 only). Note that for some hooks that work on 'struct sock' we still take the cgroup from 'current' because some of them work on the socket that hasn't been properly initialized yet. Behind the scenes, we allocate a shim program that is attached to the trampoline and runs cgroup effective BPF programs array. This shim has some rudimentary ref counting and can be shared between several programs attaching to the same lsm hook from different cgroups. Note that this patch bloats cgroup size because we add 211 cgroup_bpf_attach_type(s) for simplicity sake. This will be addressed in the subsequent patch. Also note that we only add non-sleepable flavor for now. To enable sleepable use-cases, bpf_prog_run_array_cg has to grab trace rcu, shim programs have to be freed via trace rcu, cgroup_bpf.effective should be also trace-rcu-managed + maybe some other changes that I'm not aware of. Reviewed-by: Martin KaFai Lau <kafai@fb.com> Signed-off-by: Stanislav Fomichev <sdf@google.com> Link: https://lore.kernel.org/r/20220628174314.1216643-4-sdf@google.com Signed-off-by: Alexei Starovoitov <ast@kernel.org>		2022-06-29 13:21:51 -07:00
..
android	Char / Misc / Other smaller driver subsystem updates for 5.19-rc1	2022-06-03 11:36:34 -07:00
byteorder
caif
can	can: isotp: add support for transmission without flow control	2022-05-16 22:03:45 +02:00
cifs
dvb
genwqe
hdlc
hsi
iio
isdn
misc
mmc
netfilter
netfilter_arp
netfilter_bridge
netfilter_ipv4
netfilter_ipv6
nfsd
raid
sched
spi	spi: add SPI_RX_CPHA_FLIP mode bit	2022-04-19 13:13:47 +01:00
sunrpc
surface_aggregator
tc_act	net: sched: support hash selecting tx queue	2022-04-19 12:20:45 +02:00
tc_ematch
usb
a.out.h
acct.h	taskstats: version 12 with thread group and exe info	2022-04-29 14:38:03 -07:00
acrn.h
adb.h
adfs_fs.h
affs_hardblocks.h
agpgart.h	agpgart.h: do not include <stdlib.h> from exported header	2022-05-13 10:56:10 +02:00
aio_abi.h
am437x-vpfe.h
amt.h
apm_bios.h
arcfb.h
arm_sdei.h
aspeed-lpc-ctrl.h
aspeed-p2a-ctrl.h
atalk.h
atm.h
atm_eni.h
atm_he.h
atm_idt77105.h
atm_nicstar.h
atm_tcp.h
atmapi.h
atmarp.h
atmbr2684.h
atmclip.h
atmdev.h
atmioc.h
atmlec.h
atmmpc.h
atmppp.h
atmsap.h
atmsvc.h
audit.h	LoongArch: Add ELF-related definitions	2022-06-03 20:09:27 +08:00
auto_dev-ioctl.h
auto_fs.h
auto_fs4.h
auxvec.h
ax25.h
batadv_packet.h
batman_adv.h
baycom.h
bcm933xx_hcs.h
bfs_fs.h
binfmts.h
blkpg.h
blktrace_api.h
blkzoned.h
bpf.h	bpf: per-cgroup lsm flavor	2022-06-29 13:21:51 -07:00
bpf_common.h
bpf_perf_event.h
bpfilter.h
bpqether.h
bsg.h
bt-bmc.h
btf.h	bpf: Add btf enum64 support	2022-06-07 10:20:42 -07:00
btrfs.h	btrfs: add definitions and documentation for encoded I/O ioctls	2022-03-14 13:13:51 +01:00
btrfs_tree.h	btrfs: move definition of btrfs_raid_types to volumes.h	2022-05-16 17:03:16 +02:00
cachefiles.h	cachefiles: implement on-demand read	2022-05-18 00:11:18 +08:00
can.h
capability.h
capi.h
cciss_defs.h
cciss_ioctl.h
ccs.h
cdrom.h	cdrom: mark CDROMGETSPINDOWN/CDROMSETSPINDOWN obsolete	2022-05-15 18:31:28 -06:00
cec-funcs.h
cec.h	media: cec.h: add cec_msg_recv_is_rx/tx_result helpers	2022-04-24 07:40:13 +01:00
cfm_bridge.h
cgroupstats.h
chio.h
close_range.h
cm4000_cs.h
cn_proc.h
coda.h
coff.h
comedi.h
connector.h
const.h
coresight-stm.h
counter.h	counter: add new COUNTER_EVENT_CHANGE_OF_STATE	2022-03-18 14:04:30 +01:00
cramfs_fs.h
cryptouser.h
cuda.h
cxl_mem.h	cxl/mbox: Use type __u32 for mailbox payload sizes	2022-04-22 16:12:04 -07:00
cyclades.h
cycx_cfm.h
dcbnl.h
dccp.h
devlink.h	Revert "Merge branch 'mlxsw-line-card-model'"	2022-05-05 15:47:23 -07:00
dlm.h
dlm_device.h
dlm_netlink.h
dlm_plock.h
dlmconstants.h
dm-ioctl.h
dm-log-userspace.h
dma-buf.h	dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace	2022-05-17 13:05:19 +02:00
dma-heap.h
dn.h
dns_resolver.h
dqblk_xfs.h
edd.h
efs_fs_sb.h
elf-em.h	LoongArch: Add ELF-related definitions	2022-06-03 20:09:27 +08:00
elf-fdpic.h
elf.h	LoongArch: Add ELF-related definitions	2022-06-03 20:09:27 +08:00
errno.h
errqueue.h
erspan.h
ethtool.h	ethtool: Add 10base-T1L link mode entry	2022-05-01 17:45:35 +01:00
ethtool_netlink.h	net: ethtool: extend ringparam set/get APIs for tx_push	2022-04-15 11:41:35 -07:00
eventpoll.h
f2fs.h
fadvise.h
falloc.h
fanotify.h	fanotify: implement "evictable" inode marks	2022-04-25 14:43:03 +02:00
fb.h	linux/fb.h: Spelling s/palette/palette/	2022-04-04 08:55:23 +02:00
fcntl.h
fd.h
fdreg.h
fib_rules.h
fiemap.h
filter.h
firewire-cdev.h
firewire-constants.h
fou.h
fpga-dfl.h
fs.h
fscrypt.h
fsi.h
fsl_hypervisor.h
fsl_mc.h
fsmap.h
fsverity.h
fuse.h
futex.h
gameport.h
gen_stats.h
genetlink.h
gfs2_ondisk.h
gpio.h	gpiolib: cdev: Add hardware timestamp clock type	2022-05-04 11:06:13 +02:00
gsmmux.h
gtp.h	gtp: Implement GTP echo request	2022-03-11 08:28:05 -08:00
hash_info.h
hdlc.h
hdlcdrv.h
hdreg.h
hid.h
hiddev.h
hidraw.h
hpet.h
hsr_netlink.h
hw_breakpoint.h
hyperv.h
i2c-dev.h
i2c.h
i2o-dev.h
i8k.h
icmp.h
icmpv6.h
idxd.h	dmaengine: idxd: update IAA definitions for user header	2022-04-11 19:36:54 +05:30
if.h
if_addr.h
if_addrlabel.h
if_alg.h
if_arcnet.h
if_arp.h
if_bonding.h
if_bridge.h	net: bridge: mst: Support setting and reporting MST port states	2022-03-17 16:49:57 -07:00
if_cablemodem.h
if_eql.h
if_ether.h	if_ether.h: add EtherCAT Ethertype	2022-03-01 18:29:27 -08:00
if_fc.h
if_fddi.h
if_hippi.h
if_infiniband.h
if_link.h	net: add IFLA_TSO_{MAX_SIZE|SEGS} attributes	2022-05-16 10:18:55 +01:00
if_ltalk.h
if_macsec.h
if_packet.h
if_phonet.h
if_plip.h
if_ppp.h
if_pppol2tp.h
if_pppox.h
if_slip.h
if_team.h
if_tun.h
if_tunnel.h	net/sched: Allow flower to match on GTP options	2022-03-11 08:28:27 -08:00
if_vlan.h
if_x25.h
if_xdp.h
ife.h
igmp.h
ila.h
in.h
in6.h
in_route.h
inet_diag.h
inotify.h
input-event-codes.h	Input: add Marine Navigation Keycodes	2022-04-17 13:13:53 -07:00
input.h	HID: amd_sfh: Move bus declaration outside of amd-sfh	2022-05-11 14:16:26 +02:00
io_uring.h	io_uring: let IORING_OP_FILES_UPDATE support choosing fixed file slots	2022-05-31 02:50:06 -06:00
ioam6.h
ioam6_genl.h
ioam6_iptunnel.h
ioctl.h
iommu.h	iommu: Remove guest pasid related interfaces and definitions	2022-02-28 13:25:48 +01:00
ioprio.h
ip.h
ip6_tunnel.h
ip_vs.h
ipc.h
ipmi.h
ipmi_bmc.h
ipmi_msgdefs.h
ipsec.h
ipv6.h	net/ipv6: Expand and rename accept_unsolicited_na to accept_untracked_na	2022-05-31 11:36:57 +02:00
ipv6_route.h
irqnr.h
iso_fs.h
isst_if.h
ivtv.h
ivtvfb.h
jffs2.h
joystick.h
kcm.h
kcmp.h
kcov.h
kd.h
kdev_t.h
kernel-page-flags.h
kernel.h
kernelcapi.h
kexec.h	LoongArch: Add ELF-related definitions	2022-06-03 20:09:27 +08:00
keyboard.h
keyctl.h
kfd_ioctl.h	drm/amdkfd: CRIU export dmabuf handles for GTT BOs	2022-03-15 14:25:17 -04:00
kfd_sysfs.h
kvm.h	KVM/arm64 updates for 5.19	2022-05-25 05:09:23 -04:00
kvm_para.h
l2tp.h
landlock.h	landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER	2022-05-23 13:27:59 +02:00
libc-compat.h
limits.h
lirc.h	media: lirc: revert removal of unused feature flags	2022-05-25 09:51:36 -07:00
llc.h
loop.h	loop: remove most the top-of-file boilerplate comment from the UAPI header	2022-05-10 06:30:05 -06:00
lp.h
lwtunnel.h
magic.h
major.h
map_to_7segment.h
map_to_14segment.h
matroxfb.h
max2175.h
mctp.h
mdio.h	net: phy: Add 10BASE-T1L support in phy-c45	2022-05-01 17:45:35 +01:00
media-bus-format.h
media.h	media: media.h: remove unneeded <stdint.h> inclusion	2022-04-24 08:27:37 +01:00
mei.h
membarrier.h
memfd.h
mempolicy.h
meye.h
mii.h
minix_fs.h
mman.h
mmtimer.h
module.h
mount.h
mpls.h
mpls_iptunnel.h
mptcp.h	mptcp: netlink: allow userspace-driven subflow establishment	2022-05-04 10:49:32 +01:00
mqueue.h
mroute.h
mroute6.h
mrp_bridge.h
msdos_fs.h
msg.h
mtio.h
nbd-netlink.h
nbd.h
ncsi.h
ndctl.h	nvdimm/region: Delete nd_blk_region infrastructure	2022-03-11 15:53:13 -08:00
neighbour.h	net: rtnetlink: add ndm flags and state mask attributes	2022-04-13 12:46:26 +01:00
net.h
net_dropmon.h
net_namespace.h
net_tstamp.h
netconf.h
netdevice.h
netfilter.h
netfilter_arp.h
netfilter_bridge.h
netfilter_decnet.h
netfilter_ipv4.h
netfilter_ipv6.h
netlink.h	net: netlink: add NLM_F_BULK delete request modifier	2022-04-13 12:46:26 +01:00
netlink_diag.h
netrom.h
nexthop.h
nfc.h
nfs.h
nfs2.h
nfs3.h
nfs4.h	NFSv4.1 support for NFS4_RESULT_PRESERVER_UNLINKED	2022-02-25 18:50:12 -05:00
nfs4_mount.h
nfs_fs.h	NFS: Remove remaining dfprintks related to fscache and remove NFSDBG_FSCACHE	2022-03-13 12:59:35 -04:00
nfs_idmap.h
nfs_mount.h
nfsacl.h
nilfs2_api.h
nilfs2_ondisk.h
nitro_enclaves.h
nl80211-vnd-intel.h
nl80211.h	wifi: nl80211: fix typo in comment	2022-06-10 15:35:51 +02:00
nsfs.h
nubus.h
nvme_ioctl.h	nvme: enable uring-passthrough for admin commands	2022-05-20 06:17:33 -06:00
nvram.h
omap3isp.h	media: omap3isp: Use struct_group() for memcpy() region	2022-02-27 10:58:04 -08:00
omapfb.h
oom.h
openat2.h
openvswitch.h	net: openvswitch: fix uAPI incompatibility with existing user space	2022-03-10 20:14:52 -08:00
packet_diag.h
param.h
parport.h
patchkey.h
pci.h
pci_regs.h	PCI: Add PCI_EXP_SLTCTL_ASPL_DISABLE macro	2022-04-25 10:53:38 +01:00
pcitest.h
perf_event.h	Changes for this cycle were:	2022-03-22 13:06:49 -07:00
personality.h
pfkeyv2.h
pfrut.h
pg.h
phantom.h
phonet.h
pidfd.h
pkt_cls.h	net/sched: flower: Add number of vlan tags filter	2022-04-20 11:09:13 +01:00
pkt_sched.h
pktcdvd.h
pmu.h
poll.h
posix_acl.h
posix_acl_xattr.h
posix_types.h
ppdev.h
ppp-comp.h
ppp-ioctl.h
ppp_defs.h
pps.h
pr.h
prctl.h	arm64/sme: Implement vector length configuration prctl()s	2022-04-22 18:50:54 +01:00
psample.h
psci.h
psp-sev.h
ptp_clock.h
ptrace.h	ptrace: Move setting/clearing ptrace_message into ptrace_stop	2022-03-18 09:44:19 -05:00
qemu_fw_cfg.h
qnx4_fs.h
qnxtypes.h
qrtr.h
quota.h
radeonfb.h
random.h
rds.h
reboot.h
reiserfs_fs.h
reiserfs_xattr.h
remoteproc_cdev.h
resource.h
rfkill.h	rfkill: uapi: fix RFKILL_IOCTL_MAX_SIZE ioctl request definition	2022-05-09 14:00:07 +02:00
rio_cm_cdev.h
rio_mport_cdev.h
rkisp1-config.h
romfs_fs.h
rose.h
route.h
rpl.h
rpl_iptunnel.h
rpmsg.h	rpmsg: ctrl: Introduce new RPMSG_CREATE/RELEASE_DEV_IOCTL controls	2022-03-13 11:49:53 -05:00
rpmsg_types.h
rseq.h
rtc.h	rtc: add new RTC_FEATURE_ALARM_WAKEUP_ONLY feature	2022-03-23 19:58:40 +01:00
rtnetlink.h	net: bridge: mst: Support setting and reporting MST port states	2022-03-17 16:49:57 -07:00
rxrpc.h
scc.h
sched.h
scif_ioctl.h
screen_info.h
sctp.h
seccomp.h	seccomp: Add wait_killable semantic to seccomp user notifier	2022-05-03 14:11:58 -07:00
securebits.h
sed-opal.h
seg6.h
seg6_genl.h
seg6_hmac.h
seg6_iptunnel.h
seg6_local.h
selinux_netlink.h
sem.h
serial.h
serial_core.h	serial: sunplus-uart: Add Sunplus SoC UART Driver	2022-02-26 10:03:21 +01:00
serial_reg.h
serio.h
sev-guest.h	virt: sevguest: Add support to get extended report	2022-04-07 16:47:12 +02:00
shm.h
signal.h
signalfd.h
smc.h
smc_diag.h
smiapp.h
snmp.h
sock_diag.h
socket.h	socket: Don't use u8 type in uapi socket.h	2022-06-01 16:48:05 -07:00
sockios.h
sonet.h
sonypi.h
sound.h
soundcard.h
stat.h
stddef.h	uapi/linux/stddef.h: Add include guards	2022-03-31 13:04:44 -07:00
stm.h
string.h
suspend_ioctls.h
swab.h
switchtec_ioctl.h
sync_file.h
synclink.h
sysctl.h
sysinfo.h
target_core_user.h
taskstats.h	delayacct: track delays from write-protect copy	2022-06-01 15:55:25 -07:00
tcp.h
tcp_metrics.h
tee.h	tee: remove flags TEE_IOCTL_SHM_MAPPED and TEE_IOCTL_SHM_DMA_BUF	2022-04-26 10:17:03 +02:00
termios.h
thermal.h
time.h
time_types.h
timerfd.h
times.h
timex.h
tiocl.h
tipc.h
tipc_config.h	net, uapi: remove inclusion of arpa/inet.h	2022-04-06 13:48:02 +01:00
tipc_netlink.h
tipc_sockets_diag.h
tls.h	tls: Rename TLS_INFO_ZC_SENDFILE to TLS_INFO_ZC_TX	2022-06-09 21:51:57 -07:00
toshiba.h
tty.h	tty: Reserve ldisc 29 for development purposes	2022-02-26 10:03:21 +01:00
tty_flags.h
types.h	linux/types.h: reinstate "__bitwise__" macro for user space use	2022-05-25 10:08:59 -07:00
udf_fs_i.h
udmabuf.h
udp.h
uhid.h
uinput.h
uio.h
uleds.h
ultrasound.h
um_timetravel.h
un.h
unistd.h
unix_diag.h
usbdevice_fs.h
usbip.h
userfaultfd.h	mm/uffd: enable write protection for shmem & hugetlbfs	2022-05-13 07:20:11 -07:00
userio.h
utime.h
utsname.h
uuid.h
uvcvideo.h
v4l2-common.h
v4l2-controls.h	media: v4l2-ctrls: Add intra-refresh type control	2022-04-24 08:35:01 +01:00
v4l2-dv-timings.h
v4l2-mediabus.h
v4l2-subdev.h
vbox_err.h
vbox_vmmdev_types.h
vboxguest.h
vdpa.h	vdpa: Add support for querying vendor statistics	2022-05-31 12:44:20 -04:00
vduse.h
veth.h
vfio.h	include/uapi/linux/vfio.h: Fix trivial typo - _IORW should be _IOWR instead	2022-05-16 12:39:43 -06:00
vfio_ccw.h
vfio_zdev.h
vhost.h	vhost-vdpa: introduce uAPI to set group ASID	2022-05-31 12:44:31 -04:00
vhost_types.h	vhost: support ASID in IOTLB API	2022-05-31 12:44:29 -04:00
videodev2.h	media: uapi: Add IPU3 packed Y10 format	2022-05-17 09:36:03 +02:00
virtio_9p.h
virtio_balloon.h
virtio_blk.h
virtio_bt.h
virtio_config.h	Add definition of VIRTIO_F_IN_ORDER feature bit	2022-03-28 16:52:58 -04:00
virtio_console.h
virtio_crypto.h	virtio-crypto: introduce akcipher service	2022-03-28 16:52:58 -04:00
virtio_fs.h
virtio_gpio.h
virtio_gpu.h
virtio_i2c.h
virtio_ids.h	virtio: fix virtio transitional ids	2022-05-10 07:22:28 -04:00
virtio_input.h
virtio_iommu.h
virtio_mem.h
virtio_mmio.h
virtio_net.h
virtio_pci.h
virtio_pcidev.h
virtio_pmem.h
virtio_ring.h
virtio_rng.h
virtio_scmi.h
virtio_scsi.h
virtio_snd.h
virtio_types.h
virtio_vsock.h
vm_sockets.h
vm_sockets_diag.h
vmcore.h
vsockmon.h
vt.h
vtpm_proxy.h
wait.h
watch_queue.h
watchdog.h
wireguard.h
wireless.h
wmi.h
wwan.h
x25.h
xattr.h
xdp_diag.h
xfrm.h
xilinx-v4l2-controls.h
zorro.h
zorro_ids.h