eBPF bytecode signing like kernel module signing

Hi all,

I have one question regarding eBPF bytecode. When bytecodes are generated in bcc, why are we not signing it for security reasons like kernel module is signed in linux as we are sending generated bytecodes to kernel, for verification. Has it ever been tried?

The issue discusses signing eBPF bytecode generated in bcc before sending it to the Linux kernel, analogous to kernel module signing. Start by investigating whether this has been tried and how kernel verification currently works; done would require a decided, technically scoped approach rather than answering the question alone.

Written by the indexing model from the issue text.