{ "type": "excalidraw", "version": 2, "source": "https://excalidraw.com", "elements": [ { "id": "r1670015750", "type": "rectangle", "x": 24, "y": 210, "width": 548, "height": 118, "angle": 0, "strokeColor": "#dddddd", "backgroundColor": "#fafafa", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 932875371, "versionNonce": 1761389914, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t1618617807", "type": "text", "x": 36, "y": 216, "width": 310.20000000000005, "height": 15.0, "angle": 0, "strokeColor": "#888888", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 609268761, "versionNonce": 1970034424, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "container (user namespace) \u2014 no init-ns CAP_BPF", "fontSize": 12, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "container (user namespace) \u2014 no init-ns CAP_BPF", "lineHeight": 1.25, "baseline": 12 }, { "id": "r446459342", "type": "rectangle", "x": 40, "y": 54, "width": 200, "height": 58, "angle": 0, "strokeColor": "#2f6db5", "backgroundColor": "#eef4fb", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 904235246, "versionNonce": 1707228586, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t329378671", "type": "text", "x": 50, "y": 62, "width": 138.60000000000002, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 3108918, "versionNonce": 1782697017, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "privileged runtime", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "privileged runtime", "lineHeight": 1.25, "baseline": 14 }, { "id": "t1317627363", "type": "text", "x": 50, "y": 82, "width": 78.65, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1054869855, "versionNonce": 1712863250, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "(init userns)", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "(init userns)", "lineHeight": 1.25, "baseline": 11 }, { "id": "r600913039", "type": "rectangle", "x": 300, "y": 44, "width": 250, "height": 78, "angle": 0, "strokeColor": "#e8870c", "backgroundColor": "#fff8ef", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 84834372, "versionNonce": 529837869, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t885371006", "type": "text", "x": 310, "y": 52, "width": 84.7, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1821795055, "versionNonce": 1052251068, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "bpffs mount", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "bpffs mount", "lineHeight": 1.25, "baseline": 14 }, { "id": "t512795320", "type": "text", "x": 310, "y": 72, "width": 121.00000000000001, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1046009646, "versionNonce": 1958633102, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "delegate_cmds / maps", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "delegate_cmds / maps", "lineHeight": 1.25, "baseline": 11 }, { "id": "t286532010", "type": "text", "x": 310, "y": 87, "width": 102.85000000000001, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 466723804, "versionNonce": 16098282, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "/ progs / attachs", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "/ progs / attachs", "lineHeight": 1.25, "baseline": 11 }, { "id": "r882576593", "type": "rectangle", "x": 48, "y": 248, "width": 200, "height": 62, "angle": 0, "strokeColor": "#2f6db5", "backgroundColor": "#eef4fb", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 712490003, "versionNonce": 1290991053, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t408589240", "type": "text", "x": 58, "y": 256, "width": 123.20000000000002, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1563558894, "versionNonce": 155114330, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "unprivileged app", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "unprivileged app", "lineHeight": 1.25, "baseline": 14 }, { "id": "r50134633", "type": "rectangle", "x": 300, "y": 250, "width": 240, "height": 58, "angle": 0, "strokeColor": "#111111", "backgroundColor": "#ffffff", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 1292133199, "versionNonce": 866592686, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t989747872", "type": "text", "x": 310, "y": 258, "width": 123.20000000000002, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 820932943, "versionNonce": 1152533054, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "BPF_TOKEN_CREATE", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "BPF_TOKEN_CREATE", "lineHeight": 1.25, "baseline": 14 }, { "id": "t1637692384", "type": "text", "x": 310, "y": 278, "width": 60.50000000000001, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1892420, "versionNonce": 1288442784, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "\u2192 token fd", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "\u2192 token fd", "lineHeight": 1.25, "baseline": 11 }, { "id": "r500252221", "type": "rectangle", "x": 610, "y": 132, "width": 250, "height": 82, "angle": 0, "strokeColor": "#888888", "backgroundColor": "#f4f4f4", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 1374958960, "versionNonce": 1743372343, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t177077044", "type": "text", "x": 620, "y": 140, "width": 207.9, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1117091689, "versionNonce": 501357124, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "bpf(PROG_LOAD, MAP_CREATE\u2026)", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "bpf(PROG_LOAD, MAP_CREATE\u2026)", "lineHeight": 1.25, "baseline": 14 }, { "id": "t1621721025", "type": "text", "x": 620, "y": 160, "width": 157.3, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 475023061, "versionNonce": 1029364423, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "checked against the token,", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "checked against the token,", "lineHeight": 1.25, "baseline": 11 }, { "id": "t1494542917", "type": "text", "x": 620, "y": 175, "width": 96.80000000000001, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1285426051, "versionNonce": 923402819, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "not init-ns caps", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "not init-ns caps", "lineHeight": 1.25, "baseline": 11 }, { "id": "a82707993", "type": "arrow", "x": 240, "y": 82, "width": 60, "height": 0, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 154976853, "versionNonce": 757493940, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 60, 0 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "t337832632", "type": "text", "x": 270.0, "y": 68.0, "width": 96.80000000000001, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 221849590, "versionNonce": 1694860899, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "mount + delegate", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "mount + delegate", "lineHeight": 1.25, "baseline": 11 }, { "id": "a353798505", "type": "arrow", "x": 420, "y": 122, "width": 0, "height": 128, "angle": 0, "strokeColor": "#b8650a", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 1975269627, "versionNonce": 1130338378, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 0, 128 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "t332391704", "type": "text", "x": 420.0, "y": 172.0, "width": 102.85000000000001, "height": 13.75, "angle": 0, "strokeColor": "#b8650a", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 230301135, "versionNonce": 937812269, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "derive token from", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "derive token from", "lineHeight": 1.25, "baseline": 11 }, { "id": "a326629636", "type": "arrow", "x": 248, "y": 279, "width": 52, "height": 0, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 1928300180, "versionNonce": 208589022, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 52, 0 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "t1339227935", "type": "text", "x": 274.0, "y": 265.0, "width": 40, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1833063558, "versionNonce": 1381921694, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "open", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "open", "lineHeight": 1.25, "baseline": 11 }, { "id": "a161848133", "type": "arrow", "x": 540, "y": 272, "width": 70, "height": 76, "angle": 0, "strokeColor": "#b8650a", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 443754683, "versionNonce": 1232765552, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 70, -76 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "t1105554805", "type": "text", "x": 575.0, "y": 220.0, "width": 48.400000000000006, "height": 13.75, "angle": 0, "strokeColor": "#b8650a", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1300018444, "versionNonce": 1882313038, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "token_fd", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "token_fd", "lineHeight": 1.25, "baseline": 11 }, { "id": "t666083363", "type": "text", "x": 440, "y": 16, "width": 387.20000000000005, "height": 13.75, "angle": 0, "strokeColor": "#b8650a", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1290392411, "versionNonce": 34146243, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "delegating BPF into a container without init-namespace privilege", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "delegating BPF into a container without init-namespace privilege", "lineHeight": 1.25, "baseline": 11 }, { "id": "t1934627006", "type": "text", "x": 440, "y": 340, "width": 822.8000000000001, "height": 13.75, "angle": 0, "strokeColor": "#888888", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 599328618, "versionNonce": 426643904, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "the four axes (cmds / maps / progs / attachs) are the policy \u2014 the token grants only what was delegated: trust, not unconditional access", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "the four axes (cmds / maps / progs / attachs) are the policy \u2014 the token grants only what was delegated: trust, not unconditional access", "lineHeight": 1.25, "baseline": 11 } ], "appState": { "viewBackgroundColor": "#ffffff", "gridSize": null }, "files": {} }