From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=91.218.175.191 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1794190541; b=msAksroulIrHkEdVD8gA/+h8Wh9mXcelBSHyB9M2yjFTypUANttMQiRe5vBn+zeYj+6I 6Jh6qoHKKBn90LnBbVtz0lCHmfjiYejfxuuq88O0QmkWZZTTNJ69ExY8u44eJ4CdMsrO7 eCeDm2FjOcNzrjkyzev+eqE/TVB0Q+73D6Xo9+W13D+Uv7GQVFzkmw74V3pPd/2wIv0Mr jb6fQAkI6fah/rVuJUuddqYZZhGsAspdj0wyd7eSDSdo5fWYw5xP+iryumpnpTWq7KOep Me/E7c6LBblABx9MoP4GWZkPj8e4AcPnMThOVC5Ms367OmXw0ArpDQLexB26ShGBH7w== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1794190541; h=DMARC-Filter:X-Envelope-To:DKIM-Signature:X-Envelope-To:Received: X-Mizu-Trace-ID:X-Migadu-Flow:Message-ID:Date:MIME-Version:User-Agent: Subject:To:Cc:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; bh=42Bgp9QK8SxMu4RaMFo7ITDdz1xu9H4f5I3RqLrzFX8=; b=oibDaMOiwsLoBfNQWf8+MUAwmw9JYXnv+Ol9QDojSz4Y53QusZzz+laECZ/+qwyMKHOk N4M8rqkycqSOCN09WY3/LGuoccBizO1yy5cFDM/fnE/UMdIvRCbI68Em3BqG7c4Q6BYs9 NURr5rTh970oRRHVSpjPTY4hG8MTxio6M0mknFJpe9yPjNpop9HHk6lu5hzBF9mRl8+SC 6upY8PJjcLw6iLV12hSabK/yQUgKxgCKXmARowR7CItKFu6IITJs98SaGdHxTINu9cO41 +aOgSByL1/HsVSpJ67GYVPURArT9fnIyg73nquUmLf/YfH54SA3IkictSJKcvAbzLvg== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass header.from=linux.dev; spf=pass smtp.mailfrom=linux.dev; dkim=pass header.d=linux.dev header.i=@linux.dev header.a=rsa-sha256 header.s=key1 header.b=CkqQONWS; arc=none smtp.remote-ip=91.218.175.191 Received: from mta0.migadu.com (out-191.mta0.migadu.com [91.218.175.191]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 8FCD5606A320 for ; Mon, 9 Nov 2026 02:15:40 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 8FCD5606A320 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.dev Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=linux.dev Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key, unprotected) header.d=linux.dev header.i=@linux.dev header.a=rsa-sha256 header.s=key1 header.b=CkqQONWS X-Envelope-To: linux-kernel@vger.kernel.org DKIM-Signature: a=rsa-sha256; bh=42Bgp9QK8SxMu4RaMFo7ITDdz1xu9H4f5I3RqLrzFX8=; c=simple/simple; d=linux.dev; h=from:to:subject:date:message-id:mime-version:content-type; s=key1; t=1794190538; v=1; x=1794795338; b=CkqQONWSG9KB95QZktl/P5f9lasdYz+ixAT14Lq8aTrrFSgJ17oYYEQUzmXfkUVsDouGzGV/ eFJImttXCM8vc5OiFQrrf+e+SETMZvZLsTb8q2lAdmK2kg1jkvotRh+G26Vvm+JW++zcLNsLoNV Rgi/Q4atLWoumpAfVrv9EcPs= X-Envelope-To: linux-kernel@vger.kernel.org Received: by smtp.migadu.com with ESMTPS id 8f4563db198ec34e; Mon, 09 Nov 2026 02:15:37 +0000 X-Mizu-Trace-ID: 8f4563db198ec34e X-Migadu-Flow: FLOW_OUT Message-ID: <47eae9bc-6d8b-4b73-8fe7-869753ef9600@linux.dev> Date: Mon, 9 Nov 2026 10:15:21 +0800 X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH bpf-next v3 2/8] bpf, sockmap: Restrict iter-context sockmap updates to iter/sockmap To: Michal Luczaj , Alexei Starovoitov , Daniel Borkmann , Andrii Nakryiko , Eduard Zingerman , Kumar Kartikeya Dwivedi , Martin KaFai Lau , Song Liu , Yonghong Song , Jiri Olsa , Emil Tsalapatis , Ihor Solodrai , Shuah Khan , John Fastabend , Eric Dumazet , Kuniyuki Iwashima , Paolo Abeni , Willem de Bruijn , Jakub Sitnicki , Jiayuan Chen , "David S. Miller" , Jakub Kicinski , Simon Horman , Jonathan Corbet , Shuah Khan , Randy Dunlap , Stanislav Fomichev Cc: bpf@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, linux-doc@vger.kernel.org, Sashiko References: <20261107-sockmap-update-limit-iter-v3-0-7c0bad1ad036@rbox.co> <20261107-sockmap-update-limit-iter-v3-2-7c0bad1ad036@rbox.co> From: Jiayuan Chen In-Reply-To: <20261107-sockmap-update-limit-iter-v3-2-7c0bad1ad036@rbox.co> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit On 11/8/26 1:58 AM, Michal Luczaj wrote: > Among tracing progs, allow only iter/sockmap to update sockmaps and > sockhashes. Previously, any BPF_TRACE_ITER program could perform these > updates, which caused locking issues in specific scenarios [1][2][3]. This > tightening is part of the broader effort to lock down the BPF API [4]. > > [1]: commit 4d328dd69538 ("bpf, sockmap: Fix af_unix iter deadlock") > [2]: commit 64c2f93fc325 ("bpf, sockmap: Take state lock for af_unix iter") > [3]: https://msgid.link/87echn2fhd.fsf@cloudflare.com > [4]: https://msgid.link/akRZ_e7DJh2aP-2i@john-p8 > > Reported-by: Sashiko > Closes: https://msgid.link/20260626205814.BAC3C1F000E9@smtp.kernel.org > Suggested-by: Jakub Sitnicki > Signed-off-by: Michal Luczaj Reviewed-by: Jiayuan Chen