| Date | Thu, 9 Jan 2020 05:25:01 +1100 (AEDT) | From | James Morris <> | Subject | Re: [PATCH bpf-next v1 12/13] bpf: lsm: Add selftests for BPF_PROG_TYPE_LSM |
| |
On Fri, 20 Dec 2019, KP Singh wrote:
> From: KP Singh <kpsingh@google.com> > > * Load a BPF program that audits mprotect calls > * Attach the program to the "file_mprotect" LSM hook > * Verify if the program is actually loading by reading > securityfs > * Initialize the perf events buffer and poll for audit events > * Do an mprotect on some memory allocated on the heap > * Verify if the audit event was received > > Signed-off-by: KP Singh <kpsingh@google.com>
Good to see!
Reviewed-by: James Morris <jamorris@linux.microsoft.com>
-- James Morris <jmorris@namei.org>
|