bpf: don't allow create maps of cgroup local storages
As there is one-to-one relation between a bpf program and cgroup local storage map, there is no sense in creating a map of cgroup local storage maps. Forbid it explicitly to avoid possible side effects. Signed-off-by: Roman Gushchin <guro@fb.com> Cc: Alexei Starovoitov <ast@kernel.org> Cc: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Martin KaFai Lau <kafai@fb.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
This commit is contained in:
parent
3e6a4b3e02
commit
7b5dd2bde7
|
@ -23,7 +23,8 @@ struct bpf_map *bpf_map_meta_alloc(int inner_map_ufd)
|
||||||
* is a runtime binding. Doing static check alone
|
* is a runtime binding. Doing static check alone
|
||||||
* in the verifier is not enough.
|
* in the verifier is not enough.
|
||||||
*/
|
*/
|
||||||
if (inner_map->map_type == BPF_MAP_TYPE_PROG_ARRAY) {
|
if (inner_map->map_type == BPF_MAP_TYPE_PROG_ARRAY ||
|
||||||
|
inner_map->map_type == BPF_MAP_TYPE_CGROUP_STORAGE) {
|
||||||
fdput(f);
|
fdput(f);
|
||||||
return ERR_PTR(-ENOTSUPP);
|
return ERR_PTR(-ENOTSUPP);
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue