[PATCH net-next] net: bpf: make eBPF interpreter images read-only

From: Daniel Borkmann With eBPF getting more extended and exposure to user space is on it's way, hardening the memory range the interpreter uses to steer its command flow seems appropriate. This patch moves the to be interpreted bytecode to read-only pages. In case we execute a corrupted BPF

[PATCH net-next] net: bpf: make eBPF interpreter images read-only

From: Daniel Borkmann dbork...@redhat.com With eBPF getting more extended and exposure to user space is on it's way, hardening the memory range the interpreter uses to steer its command flow seems appropriate. This patch moves the to be interpreted bytecode to read-only pages. In case we