search

fishinabarrel / linux-kernel-module-rust

Framework for writing Linux kernel modules in safe Rust
GNU General Public License v2.0
1.33k stars 119 forks source link

support extending bpf #279

Closed dvc94ch closed 3 years ago

dvc94ch commented 3 years ago

Hi, I watched your presentation from 2019 on youtube and you were asking about potential use cases for out of tree modules. I'd be interested in extending the bpf vm in out of tree kernel modules, but I'm not sure if that is possible. Specifically add support for unwinding user space stacks without frame pointers. Some related work I've done for creating better rust program analysis tools are in [0] and [1].

alex commented 3 years ago

Hi David,

First: New development is happening at https://github.com/Rust-for-Linux/linux/

Second: The first question to ask is whether ther kernel has existing APIs for this. Thus far our focus has been on enabling folks to do things in Rust, that can already be done in C. Discussions of new kernel functionality need to start upstream, not with us.

On Mon, Feb 1, 2021 at 5:34 PM David Craven notifications@github.com wrote:

Hi, I watched your presentation from 2019 on youtube and you were asking about potential use cases for out of tree modules. I'd be interested in extending the bpf vm in out of tree kernel modules, but I'm not sure if that is possible. Specifically add support for unwinding user space stacks without frame pointers. Some related work I've done for creating better rust program analysis tools are in [0] and [1].

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/fishinabarrel/linux-kernel-module-rust/issues/279, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAAAGBAIJW6PKIDTWK53EX3S44T7VANCNFSM4W5SS4XA .

-- All that is necessary for evil to succeed is for good people to do nothing.

dvc94ch commented 3 years ago

So this could fundamentally not be built using an out of tree kernel module? Sorry I don't know anything about kernel development.

alex commented 3 years ago

I have no idea if the kernel supports extending BPF in the way you suggest.

On Mon, Feb 1, 2021 at 5:44 PM David Craven notifications@github.com wrote:

So this could fundamentally not be built using an out of tree kernel module? Sorry I don't know anything about kernel development.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

-- All that is necessary for evil to succeed is for good people to do nothing.

dvc94ch commented 3 years ago

Ok thanks