Daniel Borkmann f1f7714ea5 bpf: rework prog_digest into prog_tag ... Commit 7bd509e311 ("bpf: add prog_digest and expose it via fdinfo/netlink") was recently discussed, partially due to admittedly suboptimal name of "prog_digest" in combination with sha1 hash usage, thus inevitably and rightfully concerns about its security in terms of collision resistance were raised with regards to use-cases. The intended use cases are for debugging resp. introspection only for providing a stable "tag" over the instruction sequence that both kernel and user space can calculate independently. It's not usable at all for making a security relevant decision. So collisions where two different instruction sequences generate the same tag can happen, but ideally at a rather low rate. The "tag" will be dumped in hex and is short enough to introspect in tracepoints or kallsyms output along with other data such as stack trace, etc. Thus, this patch performs a rename into prog_tag and truncates the tag to a short output (64 bits) to make it obvious it's not collision-free. Should in future a hash or facility be needed with a security relevant focus, then we can think about requirements, constraints, etc that would fit to that situation. For now, rework the exposed parts for the current use cases as long as nothing has been released yet. Tested on x86_64 and s390x. Fixes: 7bd509e311 ("bpf: add prog_digest and expose it via fdinfo/netlink") Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Alexei Starovoitov <ast@kernel.org> Cc: Andy Lutomirski <luto@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-01-16 14:03:31 -05:00
..
bpf	bpf: rework prog_digest into prog_tag	2017-01-16 14:03:31 -05:00
configs
debug	kdb: call vkdb_printf() from vprintk_default() only when wanted	2016-12-14 16:04:08 -08:00
events	Merge branch 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2016-12-23 16:49:12 -08:00
gcov
irq	genirq/affinity: Fix node generation from cpumask	2016-12-15 12:32:35 +01:00
livepatch
locking	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
power	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
printk	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
rcu	rcu: Don't kick unless grace period or request	2016-11-14 10:46:31 -08:00
sched	ktime: Cleanup ktime_set() usage	2016-12-25 17:21:22 +01:00
time	ktime: Cleanup ktime_set() usage	2016-12-25 17:21:22 +01:00
trace	clocksource: Use a plain u64 instead of cycle_t	2016-12-25 11:04:12 +01:00
.gitignore
acct.c
async.c
audit_fsnotify.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-17 18:44:00 -08:00
audit_tree.c	Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/audit	2017-01-05 23:06:06 -08:00
audit_watch.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-17 18:44:00 -08:00
audit.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-17 18:44:00 -08:00
audit.h	audit_log_{name,link_denied}: constify struct path	2016-12-05 19:00:38 -05:00
auditfilter.c	audit: add support for session ID user filter	2016-11-29 15:10:12 -05:00
auditsc.c	Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/audit	2016-12-14 14:06:40 -08:00
backtracetest.c
bounds.c
capability.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
cgroup_freezer.c
cgroup_pids.c
cgroup.c	cgroup: add support for eBPF programs	2016-11-25 16:25:52 -05:00
compat.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
configs.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
context_tracking.c
cpu_pm.c
cpu.c	smp/hotplug: Undo tglxs brainfart	2016-12-26 17:30:24 -08:00
cpuset.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
crash_dump.c
cred.c
delayacct.c
dma.c
elfcore.c
exec_domain.c
exit.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
extable.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
fork.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
freezer.c
futex_compat.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
futex.c	ktime: Get rid of the union	2016-12-25 17:21:22 +01:00
groups.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
hung_task.c	hung_task: decrement sysctl_hung_task_warnings only if it is positive	2016-12-12 18:55:09 -08:00
irq_work.c
jump_label.c
kallsyms.c
kcmp.c
Kconfig.freezer
Kconfig.hz
Kconfig.locks	locking/mutex: Allow MUTEX_SPIN_ON_OWNER when DEBUG_MUTEXES	2016-10-25 11:31:51 +02:00
Kconfig.preempt
kcov.c	kcov: make kcov work properly with KASLR enabled	2016-12-20 09:48:47 -08:00
kexec_core.c	kexec: add cond_resched into kimage_alloc_crash_control_pages	2016-12-14 16:04:07 -08:00
kexec_file.c	ima: on soft reboot, save the measurement list	2016-12-20 09:48:44 -08:00
kexec_internal.h	kexec_file: Allow arch-specific memory walking for kexec_add_buffer	2016-11-30 23:14:57 +11:00
kexec.c
kmod.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
kprobes.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
ksysfs.c
kthread.c	kthread: add __printf attributes	2016-12-12 18:55:06 -08:00
latencytop.c
Makefile	Merge branch 'akpm' (patches from Andrew)	2016-12-14 17:25:18 -08:00
membarrier.c
memremap.c	mm: fix devm_memremap_pages crash, use mem_hotplug_{begin, done}	2017-01-10 18:31:54 -08:00
module_signing.c
module-internal.h
module.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
notifier.c
nsproxy.c
padata.c	padata: Remove unused but set variables	2016-10-25 11:08:10 +08:00
panic.c	taint/module: Clean up global and module taint flags handling	2016-11-26 11:18:01 -08:00
params.c
pid_namespace.c
pid.c
profile.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
ptrace.c	ptrace: Don't allow accessing an undumpable mm	2016-11-22 12:57:38 -06:00
range.c
reboot.c
relay.c	relay: check array offset before using it	2016-12-14 16:04:08 -08:00
resource.c
seccomp.c	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-12-14 13:57:44 -08:00
signal.c	signal: protect SIGNAL_UNKILLABLE from unintentional clearing.	2017-01-10 18:31:55 -08:00
smp.c	kernel/smp: Tell the user we're bringing up secondary CPUs	2016-10-26 12:02:35 +02:00
smpboot.c
smpboot.h
softirq.c	softirq: Display IRQ_POLL for irq-poll statistics	2016-10-21 15:45:47 -06:00
stacktrace.c
stop_machine.c	locking/core, stop_machine: Yield the CPU during stop machine()	2016-11-16 10:15:09 +01:00
sys_ni.c	move aio compat to fs/aio.c	2016-12-22 22:58:37 -05:00
sys.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
sysctl_binary.c	sysctl: add KERN_CONT to deprecated_sysctl_warning()	2016-12-14 16:04:07 -08:00
sysctl.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
task_work.c
taskstats.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-11-15 10:54:36 -05:00
test_kprobes.c
torture.c
tracepoint.c	tracing: Have the reg function allow to fail	2016-12-09 09:13:30 -05:00
tsacct.c
ucount.c
uid16.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
up.c
user_namespace.c
user-return-notifier.c
user.c
utsname_sysctl.c
utsname.c
watchdog_hld.c	kernel/watchdog.c: move hardlockup detector to separate file	2016-12-14 16:04:08 -08:00
watchdog.c	kernel/watchdog.c: move hardlockup detector to separate file	2016-12-14 16:04:08 -08:00
workqueue_internal.h
workqueue.c	Merge branch 'for-4.9' into for-4.10	2016-10-19 12:12:40 -04:00