HID-BPF
summary
HID-BPF embeds BPF into the HID stack so small per‑device BPF programs can rewrite report descriptors and mutate or drop input bytes before kernel driver processing, letting fixes ship as BPF objects instead of kernel patches. Userland proof‑of‑concept auto‑loads matching objects on plug and successfully fixes devices at connect time. The API exposes hid_bpf_get_data to read/write the report/input buffer and uses vppf_attach_prog to bind one or more programs to a specific device, enabling a HID firewall and context‑dependent behaviors.
AI-written summary · about
chapters (5)
- 0:00Start
- 1:53HID report descriptor
- 2:41Device Class Definition
- 4:56HID-BPF: base principles
- 19:12HID-BPF: from a testing user perspective
related talks
27mHotBPF - An On-demand and On-the-fly Memory Protection for the Linux Ker...
43mHotBPF++: A More Powerful Memory Protection for the Linux Kernel
34mWhat's new in the BPF world?
31meBPF 101
32meBPF: BPF kernel infrastructure
16mWhy Everyone Should Care About eBPF
33meBPF: exploring use case of BPF kernel infrastructure
47mBPF: The Status of BTF, producers, consumers.