Vasiliy Ulyanov 81707abd33 ebpf: fix device access check ...

Checking the access mode as bellow

    if (R3 & bpfAccess == 0 /* use R1 as a temp var */) goto next

does not handle correctly device file probing with:

    access(dev_name, F_OK)

F_OK does not trigger read or write access. Instead the access type in
R3 in that case will be zero and the check will not pass even if "rw" is
allowed for the device file. Comparing the 'masked' access type with the
requested one solves the issue:

    if (R3 & bpfAccess != R3 /* use R1 as a temp var */) goto next

Signed-off-by: Vasiliy Ulyanov <vulyanov@suse.de>

2021-02-07 19:33:10 +01:00

..

devicefilter

ebpf: fix device access check

2021-02-07 19:33:10 +01:00

ebpf.go

cgroup2: ebpf: increase RLIM_MEMLOCK to avoid BPF_PROG_LOAD error

2019-11-07 15:43:27 +09:00