.\" Man page generated from reStructuredText .\" by the Docutils 0.22.3 manpage writer. . . .nr rst2man-indent-level 0 . .de1 rstReportMargin \\$1 \\n[an-margin] level \\n[rst2man-indent-level] level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] - \\n[rst2man-indent0] \\n[rst2man-indent1] \\n[rst2man-indent2] .. .de1 INDENT .\" .rstReportMargin pre: . RS \\$1 . nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin] . nr rst2man-indent-level +1 .\" .rstReportMargin post: .. .de UNINDENT . RE .\" indent \\n[an-margin] .\" old: \\n[rst2man-indent\\n[rst2man-indent-level]] .nr rst2man-indent-level -1 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. .TH "bpftool-token" "8" "" "" .SH Name bpftool-token \- tool for inspection and simple manipulation of eBPF tokens .SH SYNOPSIS .sp \fBbpftool\fP [\fIOPTIONS\fP] \fBtoken\fP \fICOMMAND\fP .sp \fIOPTIONS\fP := { { \fB\-j\fP | \fB\-\-json\fP } [{ \fB\-p\fP | \fB\-\-pretty\fP }] | { \fB\-d\fP | \fB\-\-debug\fP } } .sp \fICOMMANDS\fP := { \fBshow\fP | \fBlist\fP | \fBhelp\fP } .SH TOKEN COMMANDS .nf \fBbpftool\fP \fBtoken\fP { \fBshow\fP | \fBlist\fP } \fBbpftool\fP \fBtoken help\fP .fi .sp .SH DESCRIPTION .INDENT 0.0 .TP .B bpftool token { show | list } List BPF token information for each \fIbpffs\fP mount point containing token information on the system. Information include mount point path, allowed \fBbpf\fP() system call commands, maps, programs, and attach types for the token. .TP .B bpftool prog help Print short help message. .UNINDENT .SH OPTIONS .INDENT 0.0 .TP .B \-h\fP,\fB \-\-help Print short help message (similar to \fBbpftool help\fP). .TP .B \-V\fP,\fB \-\-version Print bpftool\(aqs version number (similar to \fBbpftool version\fP), the number of the libbpf version in use, and optional features that were included when bpftool was compiled. Optional features include linking against LLVM or libbfd to provide the disassembler for JIT\-ted programs (\fBbpftool prog dump jited\fP) and usage of BPF skeletons (some features like \fBbpftool prog profile\fP or showing pids associated to BPF objects may rely on it). .TP .B \-j\fP,\fB \-\-json Generate JSON output. For commands that cannot produce JSON, this option has no effect. .TP .B \-p\fP,\fB \-\-pretty Generate human\-readable JSON output. Implies \fB\-j\fP\&. .TP .B \-d\fP,\fB \-\-debug Print all logs available, even debug\-level information. This includes logs from libbpf as well as from the verifier, when attempting to load programs. .UNINDENT .SH EXAMPLES .nf \fB# mkdir \-p /sys/fs/bpf/token\fP \fB# mount \-t bpf bpffs /sys/fs/bpf/token\fP .in +2 \fB\-o delegate_cmds=prog_load:map_create\fP \fB\-o delegate_progs=kprobe\fP \fB\-o delegate_attachs=xdp\fP .in -2 \fB# bpftool token list\fP .fi .sp .INDENT 0.0 .INDENT 3.5 .sp .EX token_info /sys/fs/bpf/token allowed_cmds: map_create prog_load allowed_maps: allowed_progs: kprobe allowed_attachs: xdp .EE .UNINDENT .UNINDENT .SH SEE ALSO .sp \fBbpf\fP(2), \fBbpf\-helpers\fP(7), \fBbpftool\fP(8), \fBbpftool\-btf\fP(8), \fBbpftool\-cgroup\fP(8), \fBbpftool\-feature\fP(8), \fBbpftool\-gen\fP(8), \fBbpftool\-iter\fP(8), \fBbpftool\-link\fP(8), \fBbpftool\-map\fP(8), \fBbpftool\-net\fP(8), \fBbpftool\-perf\fP(8), \fBbpftool\-prog\fP(8), \fBbpftool\-struct_ops\fP(8) .\" End of generated man page.