bpf: Implement task local storage
authorKP Singh <kpsingh@google.com>
Fri, 6 Nov 2020 10:37:40 +0000 (10:37 +0000)
committerAlexei Starovoitov <ast@kernel.org>
Fri, 6 Nov 2020 16:08:37 +0000 (08:08 -0800)
commit4cf1bc1f10452065a29d576fc5693fc4fab5b919
tree142a7cf6f1baf696dc72b54d510a59823ca139eb
parent9e7a4d9831e836eb03dedab89902277ee94eb7a6
bpf: Implement task local storage

Similar to bpf_local_storage for sockets and inodes add local storage
for task_struct.

The life-cycle of storage is managed with the life-cycle of the
task_struct.  i.e. the storage is destroyed along with the owning task
with a callback to the bpf_task_storage_free from the task_free LSM
hook.

The BPF LSM allocates an __rcu pointer to the bpf_local_storage in
the security blob which are now stackable and can co-exist with other
LSMs.

The userspace map operations can be done by using a pid fd as a key
passed to the lookup, update and delete operations.

Signed-off-by: KP Singh <kpsingh@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Song Liu <songliubraving@fb.com>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Link: https://lore.kernel.org/bpf/20201106103747.2780972-3-kpsingh@chromium.org
include/linux/bpf_lsm.h
include/linux/bpf_types.h
include/uapi/linux/bpf.h
kernel/bpf/Makefile
kernel/bpf/bpf_lsm.c
kernel/bpf/bpf_task_storage.c [new file with mode: 0644]
kernel/bpf/syscall.c
kernel/bpf/verifier.c
security/bpf/hooks.c
tools/include/uapi/linux/bpf.h