On Fri, 2025-07-04 at 21:15 +0200, Kumar Kartikeya Dwivedi wrote: [...] > Yeah, so if the user specifies a type and has co-re enabled, they're > accessing a kernel struct. > If they're doing it without co-re, it's broken today already, or they > know the struct is fixed in layout somehow so it's ok. > If not, they want to access things at fixed offsets. So we can just > use the type they're using to model untrusted derefs. > > So always using prog BTF makes sense to me. Ok, I'm switching to always using prog BTF.
