Subject Verify BPF signed loader at load time
Author daniel@iogearbox.net
Date 2026-07-07 19:30:57 +0000 UTC
Version
Cc a.s.protopopov@gmail.com ast@kernel.org bboscaccy@linux.microsoft.com bpf@vger.kernel.org daniel@iogearbox.net james.bottomley@hansenpartnership.com kpsingh@kernel.org linux-security-module@vger.kernel.org memxor@gmail.com paul@paul-moore.com torvalds@linux-foundation.org
Patches (8)
Name Content [All]
[PATCH bpf-next v5 1/8] bpf: Resolve and cache fd_array objects at load time [Body]
[PATCH bpf-next v5 2/8] bpf: Verify signed loader metadata at load time [Body]
[PATCH bpf-next v5 3/8] libbpf: Drop in-loader metadata check for load-time verification [Body]
[PATCH bpf-next v5 4/8] bpftool: Check EVP_Digest when computing excl_prog_hash [Body]
[PATCH bpf-next v5 5/8] bpftool: Cover loader metadata with the program signature [Body]
[PATCH bpf-next v5 6/8] selftests/bpf: Adjust bpf_map layout in verifier_map_ptr [Body]
[PATCH bpf-next v5 7/8] selftests/bpf: Verify load-time signed loader metadata [Body]
[PATCH bpf-next v5 8/8] Documentation/bpf: Add BPF signing and enforcement doc [Body]
Session 2026-07-07
ID (for dev) 0fae55a4-3051-49e0-8725-9be6363be383
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 602701718649936eb287bf6c7ecf870ec54c6f71 [Config] passed [Log]
[KASAN] Boot test: Base 602701718649936eb287bf6c7ecf870ec54c6f71 [Config] passed [Log]
[KASAN] Build Patched 602701718649936eb287bf6c7ecf870ec54c6f71 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 602701718649936eb287bf6c7ecf870ec54c6f71 [Config] [patched] passed [Log]
[KASAN] Fuzz 602701718649936eb287bf6c7ecf870ec54c6f71 [Config] 602701718649936eb287bf6c7ecf870ec54c6f71 [Config] [patched] passed [Log] [Artifacts]