Toke Høiland-Jørgensen b7004ecafa bpf: Enforce that struct_ops programs be GPL-only ...

commit 12aa8a9467b354ef893ce0fc5719a4de4949a9fb upstream.

With the introduction of the struct_ops program type, it became possible to
implement kernel functionality in BPF, making it viable to use BPF in place
of a regular kernel module for these particular operations.

Thus far, the only user of this mechanism is for implementing TCP
congestion control algorithms. These are clearly marked as GPL-only when
implemented as modules (as seen by the use of EXPORT_SYMBOL_GPL for
tcp_register_congestion_control()), so it seems like an oversight that this
was not carried over to BPF implementations. Since this is the only user
of the struct_ops mechanism, just enforcing GPL-only for the struct_ops
program type seems like the simplest way to fix this.

Fixes: 0baf26b0fc ("bpf: tcp: Support tcp_congestion_ops in bpf")
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Link: https://lore.kernel.org/bpf/20210326100314.121853-1-toke@redhat.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-04-14 08:42:00 +02:00

..

preload

bpf: Fix umd memory leak in copy_process()

2021-03-30 14:32:03 +02:00

arraymap.c

bpf: Allow for map-in-map with dynamic inner array map entries

2020-10-11 10:21:04 -07:00

bpf_inode_storage.c

bpf: Change inode_storage's lookup_elem return value from NULL to -EBADF

2021-03-30 14:31:56 +02:00

bpf_iter.c

bpf: Fix an unitialized value in bpf_iter

2021-03-04 11:37:33 +01:00

bpf_local_storage.c

bpf: Use hlist_add_head_rcu when linking to local_storage

2020-09-19 01:12:35 +02:00

bpf_lru_list.c

bpf_lru_list: Read double-checked variable once without lock

2021-03-04 11:37:29 +01:00

bpf_lru_list.h

bpf: Fix a typo "inacitve" -> "inactive"

2020-04-06 21:54:10 +02:00

bpf_lsm.c

bpf: Update verification logic for LSM programs

2020-11-06 13:15:21 -08:00

bpf_struct_ops_types.h

…

bpf_struct_ops.c

bpf: Fix fexit trampoline.

2021-04-07 15:00:03 +02:00

btf.c

bpf: Introduce bpf_per_cpu_ptr()

2020-10-02 15:00:49 -07:00

cgroup.c

bpf, cgroup: Fix problematic bounds check

2021-02-10 09:29:12 +01:00

core.c

bpf: Fix fexit trampoline.

2021-04-07 15:00:03 +02:00

cpumap.c

bpf, cpumap: Remove rcpu pointer from cpu_map_build_skb signature

2020-09-28 23:30:42 +02:00

devmap.c

bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation

2021-03-04 11:37:33 +01:00

disasm.c

…

disasm.h

…

dispatcher.c

bpf: Remove bpf_image tree

2020-03-13 12:49:52 -07:00

hashtab.c

bpf: Zero-fill re-used per-cpu map element

2020-11-05 19:55:57 -08:00

helpers.c

bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback

2021-01-23 16:03:59 +01:00

inode.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2020-09-22 16:45:34 -07:00

local_storage.c

bpf/local_storage: Fix build without CONFIG_CGROUP

2020-07-25 20:16:36 -07:00

lpm_trie.c

bpf: Add map_meta_equal map ops

2020-08-28 15:41:30 +02:00

Makefile

bpf: Don't rely on GCC __attribute__((optimize)) to disable GCSE

2020-10-29 20:01:46 -07:00

map_in_map.c

bpf: Relax max_entries check for most of the inner map types

2020-08-28 15:41:30 +02:00

map_in_map.h

bpf: Add map_meta_equal map ops

2020-08-28 15:41:30 +02:00

map_iter.c

bpf: Implement link_query callbacks in map element iterators

2020-08-21 14:01:39 -07:00

net_namespace.c

bpf: Add support for forced LINK_DETACH command

2020-08-01 20:38:28 -07:00

offload.c

…

percpu_freelist.c

bpf: Use raw_spin_trylock() for pcpu_freelist_push/pop in NMI

2020-10-06 00:04:11 +02:00

percpu_freelist.h

bpf: Use raw_spin_trylock() for pcpu_freelist_push/pop in NMI

2020-10-06 00:04:11 +02:00

prog_iter.c

bpf: Refactor bpf_iter_reg to have separate seq_info member

2020-07-25 20:16:32 -07:00

queue_stack_maps.c

bpf: Add map_meta_equal map ops

2020-08-28 15:41:30 +02:00

reuseport_array.c

bpf, net: Rework cookie generator as per-cpu one

2020-09-30 11:50:35 -07:00

ringbuf.c

bpf: Add map_meta_equal map ops

2020-08-28 15:41:30 +02:00

stackmap.c

bpf: Check for integer overflow when using roundup_pow_of_two()

2021-02-17 11:02:25 +01:00

syscall.c

bpf: Prevent double bpf_prog_put call from bpf_tracing_prog_attach

2021-01-27 11:55:07 +01:00

sysfs_btf.c

bpf: Fix sysfs export of empty BTF section

2020-09-21 21:50:24 +02:00

task_iter.c

bpf: Save correct stopping point in file seq iteration

2021-01-19 18:27:28 +01:00

tnum.c

bpf: Verifier, do explicit ALU32 bounds tracking

2020-03-30 14:59:53 -07:00

trampoline.c

bpf: Fix fexit trampoline.

2021-04-07 15:00:03 +02:00

verifier.c

bpf: Enforce that struct_ops programs be GPL-only

2021-04-14 08:42:00 +02:00