Subject	Verify BPF signed loader at load time
Author	daniel@iogearbox.net
Date	2026-07-02 14:36:00 +0000 UTC
Version	Version 1 Version 2 Version 3 Version 4 Version 5 Version 6
Cc	a.s.protopopov@gmail.com ast@kernel.org bboscaccy@linux.microsoft.com bpf@vger.kernel.org daniel@iogearbox.net james.bottomley@hansenpartnership.com kpsingh@kernel.org linux-security-module@vger.kernel.org memxor@gmail.com paul@paul-moore.com torvalds@linux-foundation.org

Patches (6)

Name	Content [All]
[PATCH bpf-next v3 1/6] bpf: Resolve and cache fd_array objects at load time	[Body]
[PATCH bpf-next v3 2/6] bpf: Verify signed loader metadata at load time	[Body]
[PATCH bpf-next v3 3/6] libbpf: Drop in-loader metadata check for load-time verification	[Body]
[PATCH bpf-next v3 4/6] bpftool: Cover loader metadata with the program signature	[Body]
[PATCH bpf-next v3 5/6] selftests/bpf: Verify load-time signed loader metadata	[Body]
[PATCH bpf-next v3 6/6] Documentation/bpf: Add BPF signing and enforcement doc	[Body]

Sessions