]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commit
netdevsim: Add debugfs toggle to reject BPF programs in verifier
authorToke Høiland-Jørgensen <toke@redhat.com>
Wed, 9 Dec 2020 13:57:39 +0000 (14:57 +0100)
committerDaniel Borkmann <daniel@iogearbox.net>
Wed, 9 Dec 2020 15:27:42 +0000 (16:27 +0100)
commite4ff5aa469403462091eb22e2b0843b894167e10
treebc94e8ae64a5bb78bbacf4a08b5d1db1e9faf292
parent0b5b6e747c86e57b7ebd64ccb84314a227ccfcc2
netdevsim: Add debugfs toggle to reject BPF programs in verifier

This adds a new debugfs toggle ('bpf_bind_verifier_accept') that can be
used to make netdevsim reject BPF programs from being accepted by the
verifier. If this toggle (which defaults to true) is set to false,
nsim_bpf_verify_insn() will return EOPNOTSUPP on the last
instruction (after outputting the 'Hello from netdevsim' verifier message).

This makes it possible to check the verification callback in the driver
from test_offload.py in selftests, since the verifier now clears the
verifier log on a successful load, hiding the message from the driver.

Fixes: 6f8a57ccf851 ("bpf: Make verifier log more relevant by default")
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Jakub Kicinski <kuba@kernel.org>
Link: https://lore.kernel.org/bpf/160752225964.110217.12584017165318065332.stgit@toke.dk
drivers/net/netdevsim/bpf.c
drivers/net/netdevsim/netdevsim.h