Understanding ZFS Channel Programs

Re:Understanding ZFS Channel Programs by IshKebab on Thursday September 09, 2021 @01:48PM (#28472505)

Does this mean there's a Lua interpreter in ZFS? That's pretty wild!

[ Parent | on HN ]

Re:Understanding ZFS Channel Programs by 0x000000001 on Thursday September 09, 2021 @05:19PM (#28474796)

Appears so

https://svnweb.freebsd.org/base/head/sys/cddl/contrib/openso...

[ Parent | on HN ]

Re:Understanding ZFS Channel Programs by ducktective on Thursday September 09, 2021 @03:32PM (#28473695)

Try pretty scary

[ Parent | on HN ]

Re:Understanding ZFS Channel Programs by wahern on Friday September 10, 2021 @12:27AM (#28477817)

> Channel Programs may only be run with root privileges

Compare to eBPF, which not only uses a JIT compiler in the kernel, but on popular Linux distributions like Fedora and Ubuntu permits unprivileged users to run eBPF programs.

I would never assume a lack of exploitable bugs in the fork of the Lua interpreter used in FreeBSD, but the fact is that eBPF has seen a steady, if infrequent, stream of actual exploits over the years and in particular unprivileged user exploits.

[ Parent | on HN ]

Re:Understanding ZFS Channel Programs by throwaway2048 on Friday September 10, 2021 @01:23AM (#28478080)

lua is significantly MORE powerful than eBPF not less, and correspondingly will be easier to build exploits in.

[ Parent | on HN ]

Re:Understanding ZFS Channel Programs by mnd999 on Friday September 10, 2021 @02:48AM (#28478485)

If you have to have root already this doesn’t buy you much though. Perhaps a hard-to-detect way for disgruntled bofhs to do bad things, that’s about it.

[ Parent | on HN ]