614b8f58b4f4: io_uring: allow registration of per-task restrictions (2026-02-06 07:29:19 -0700) ---------------------------------------------------------------- io_uring-bpf-restrictions.4-20260206 ---------------------------------------------------------------- Jens Axboe (7): io_uring: add support for BPF filtering for opcode restrictions io_uring/net: allow filtering on IORING_OP_SOCKET data io_uring/bpf_filter: allow filtering on contents of struct open_how io_uring/bpf_filter: cache lookup table in ctx->bpf_filters io_uring/bpf_filter: add ref counts to struct io_bpf_filter io_uring: add task fork hook io_uring: allow registration of per-task restrictions include/linux/io_uring.h | 14 +- include/linux/io_uring_types.h | 13 + include/linux/sched.h | 1 + include/uapi/linux/io_uring.h | 10 + include/uapi/linux/io_uring/bpf_filter.h | 62 +++++ io_uring/Kconfig | 5 + io_uring/Makefile | 1 + io_uring/bpf_filter.c | 430 +++++++++++++++++++++++++++++++ io_uring/bpf_filter.h | 48 ++++ io_uring/io_uring.c | 48 ++++ io_uring/io_uring.h | 1 + io_uring/net.c | 9 + io_uring/net.h | 6 + io_uring/openclose.c | 9 + io_uring/openclose.h | 3 + io_uring/register.c | 91 +++++++ io_uring/tctx.c | 42 ++- kernel/fork.c | 6 + 18 files changed, 789 insertions(+), 10 deletions(-) create mode 100644 include/uapi/linux/io_uring/bpf_filter.h create mode 100644 io_uring/bpf_filter.c create mode 100644 io_uring/bpf_filter.h -- Jens Axboe[GIT PULL] io_uring cBPF filter supportJens Axboe undefinedLinus Torvalds undefined undefined undefined undefined°