| From | Michael Weiß <> | Subject | [RFC PATCH v2 12/14] bpf: Add flag BPF_DEVCG_ACC_MKNOD_UNS for device access | Date | Wed, 18 Oct 2023 12:50:31 +0200 |
| |
With this new flag for bpf cgroup device programs, it should be possible to guard mknod() access in non-initial user namespaces later on.
Signed-off-by: Michael Weiß <michael.weiss@aisec.fraunhofer.de> --- include/uapi/linux/bpf.h | 1 + 1 file changed, 1 insertion(+)
diff --git a/include/uapi/linux/bpf.h b/include/uapi/linux/bpf.h index 0448700890f7..0196b9c72d3e 100644 --- a/include/uapi/linux/bpf.h +++ b/include/uapi/linux/bpf.h @@ -6927,6 +6927,7 @@ enum { BPF_DEVCG_ACC_MKNOD = (1ULL << 0), BPF_DEVCG_ACC_READ = (1ULL << 1), BPF_DEVCG_ACC_WRITE = (1ULL << 2), + BPF_DEVCG_ACC_MKNOD_UNS = (1ULL << 3), }; enum { -- 2.30.2
|