Describe the VFS result, output buffer, and calling requirements. Signed-off-by: Anastasios Papagiannis --- Documentation/bpf/fs_kfuncs.rst | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/Documentation/bpf/fs_kfuncs.rst b/Documentation/bpf/fs_kfuncs.rst index 8762c3233a3d..05cc9b657a42 100644 --- a/Documentation/bpf/fs_kfuncs.rst +++ b/Documentation/bpf/fs_kfuncs.rst @@ -13,9 +13,22 @@ BPF kfuncs can be used to get these data. * ``bpf_get_fsverity_digest()`` + * ``bpf_path_getattr()`` + To avoid recursions, these kfuncs follow the following rules: 1. These kfuncs are only permitted from BPF LSM function. 2. These kfuncs should not call into other LSM hooks, i.e. security_*(). For example, ``bpf_get_file_xattr()`` does not use ``vfs_getxattr()``, because the latter calls LSM hook ``security_inode_getxattr``. + +File attributes +=============== + +``bpf_path_getattr()`` queries filesystem attributes through +``vfs_getattr_nosec()`` and returns ``struct kstat``. Use a trusted hook +argument, such as the path in ``lsm.s/inode_getattr`` or +``&file->f_path`` in ``lsm.s/file_open``. + +.. kernel-doc:: fs/bpf_fs_kfuncs.c + :identifiers: bpf_path_getattr -- 2.56.0