Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v1.1] enforcer backport #2528

Merged
merged 1 commit into from
Jun 7, 2024
Merged

[v1.1] enforcer backport #2528

merged 1 commit into from
Jun 7, 2024

Conversation

kkourt
Copy link
Contributor

@kkourt kkourt commented Jun 7, 2024

backport of #2524

enforcer: fix issue when using multiple calls with fmod_ret

[ upstream commit 7bf5502 ]

When using fmod_ret, we need to load multiple programs -- one for each
attach point we want to enforce.

In the current implementation, each program would use its own map which
means that the enforcer notification worked only for a single program.

This patch fixes the code so that all programs use the same map. It also
adds a test.

Signed-off-by: Kornilios Kourtis <[email protected]>
@kkourt kkourt requested a review from a team as a code owner June 7, 2024 10:01
@kkourt kkourt requested review from kevsecurity and removed request for a team June 7, 2024 10:01
@kkourt kkourt added the release-note/bug This PR fixes an issue in a previous release of Tetragon. label Jun 7, 2024
@kkourt kkourt requested a review from olsajiri June 7, 2024 10:02
@kkourt kkourt merged commit 6a98dee into v1.1 Jun 7, 2024
36 of 37 checks passed
@kkourt kkourt deleted the pr/kkourt/v1.1-enforcer-backport branch June 7, 2024 13:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release-note/bug This PR fixes an issue in a previous release of Tetragon.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants