bpf: Consistently use BPF token throughout BPF verifier logic
authorAndrii Nakryiko <andrii@kernel.org>
Wed, 24 Jan 2024 02:21:05 +0000 (18:21 -0800)
committerAlexei Starovoitov <ast@kernel.org>
Thu, 25 Jan 2024 00:21:01 +0000 (16:21 -0800)
commitd79a3549754725bb90e58104417449edddf3da3d
treedbcb8b033e1d9bc85127d229aa6d7bd3b933e356
parentbbc1d24724e110b86a1a7c3c1724ce0d62cc1e2e
bpf: Consistently use BPF token throughout BPF verifier logic

Remove remaining direct queries to perfmon_capable() and bpf_capable()
in BPF verifier logic and instead use BPF token (if available) to make
decisions about privileges.

Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/20240124022127.2379740-9-andrii@kernel.org
include/linux/bpf.h
include/linux/filter.h
kernel/bpf/arraymap.c
kernel/bpf/core.c
kernel/bpf/verifier.c
net/core/filter.c