Why is that so complicated?

Posted Oct 30, 2025 10:32 UTC (Thu) by jbarns231 (subscriber, #152627)
In reply to: Why is that so complicated? by aszs
Parent article: BPF signing LSM hook change rejected

Pretty much 99% of use cases in eBPF need relocations which are done by a loader, for example, even just using a BPF map in a program cannot work if the signature validation is purely over static bytecode. This means the entire ecosystem will not be able to make use of this facility if the validation were entirely static. So this has nothing to do with admin or not.