Commit c6fdcd6e authored Sep 28, 2018 by Roman Gushchin Committed by Daniel Borkmann Oct 01, 2018

bpf: don't allow create maps of per-cpu cgroup local storages

Explicitly forbid creating map of per-cpu cgroup local storages.
This behavior matches the behavior of shared cgroup storages.

Signed-off-by: Roman Gushchin <guro@fb.com>
Acked-by: Song Liu <songliubraving@fb.com>
Cc: Daniel Borkmann <daniel@iogearbox.net>
Cc: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>

parent b741f163

kernel/bpf/map_in_map.c

+2 −1

Original line number	Diff line number	Diff line
		@@ -24,7 +24,8 @@ struct bpf_map *bpf_map_meta_alloc(int inner_map_ufd)
		* in the verifier is not enough.
		*/
		if (inner_map->map_type == BPF_MAP_TYPE_PROG_ARRAY \|\|
		inner_map->map_type == BPF_MAP_TYPE_CGROUP_STORAGE) {
		inner_map->map_type == BPF_MAP_TYPE_CGROUP_STORAGE \|\|
		inner_map->map_type == BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE) {
		fdput(f);
		return ERR_PTR(-ENOTSUPP);
		}

Admin message