Subject Verify BPF signed loader at load time
Author daniel@iogearbox.net
Date 2026-07-06 13:56:36 +0000 UTC
Version
Cc a.s.protopopov@gmail.com ast@kernel.org bboscaccy@linux.microsoft.com bpf@vger.kernel.org daniel@iogearbox.net james.bottomley@hansenpartnership.com kpsingh@kernel.org linux-security-module@vger.kernel.org memxor@gmail.com paul@paul-moore.com torvalds@linux-foundation.org
Patches (9)
Name Content [All]
[PATCH bpf-next v4 1/9] bpf: Resolve and cache fd_array objects at load time [Body]
[PATCH bpf-next v4 2/9] bpf: Move bigger allocations below fd_array resolution [Body]
[PATCH bpf-next v4 3/9] bpf: Verify signed loader metadata at load time [Body]
[PATCH bpf-next v4 4/9] libbpf: Drop in-loader metadata check for load-time verification [Body]
[PATCH bpf-next v4 5/9] bpftool: Check EVP_Digest when computing excl_prog_hash [Body]
[PATCH bpf-next v4 6/9] bpftool: Cover loader metadata with the program signature [Body]
[PATCH bpf-next v4 7/9] selftests/bpf: Adjust bpf_map layout in verifier_map_ptr [Body]
[PATCH bpf-next v4 8/9] selftests/bpf: Verify load-time signed loader metadata [Body]
[PATCH bpf-next v4 9/9] Documentation/bpf: Add BPF signing and enforcement doc [Body]
Session 2026-07-06
ID (for dev) 78a2f6d5-2c6d-4cfe-9d94-5218e1cbed5e
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 87bfe634b1193db90e5170e1ddbad04a63ef4501 [Config] passed [Log]
[KASAN] Boot test: Base 87bfe634b1193db90e5170e1ddbad04a63ef4501 [Config] passed [Log]
[KASAN] Build Patched 87bfe634b1193db90e5170e1ddbad04a63ef4501 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 87bfe634b1193db90e5170e1ddbad04a63ef4501 [Config] [patched] passed [Log]
[KASAN] Fuzz 87bfe634b1193db90e5170e1ddbad04a63ef4501 [Config] 87bfe634b1193db90e5170e1ddbad04a63ef4501 [Config] [patched] passed [Log] [Artifacts]