tree b9fdd4d3c3693de18200ab474b48566137367e86
parent caf8f28e036c4ba1e823355da6c0c01c39e70ab9
author Andrii Nakryiko <andrii@kernel.org> 1706062864 -0800
committer Alexei Starovoitov <ast@kernel.org> 1706142061 -0800

bpf: Take into account BPF token when fetching helper protos

Instead of performing unconditional system-wide bpf_capable() and
perfmon_capable() calls inside bpf_base_func_proto() function (and other
similar ones) to determine eligibility of a given BPF helper for a given
program, use previously recorded BPF token during BPF_PROG_LOAD command
handling to inform the decision.

Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/20240124022127.2379740-8-andrii@kernel.org