refactor(aya-ebpf): make InnerMap a sealed trait

Seal the InnerMap trait to prevent external implementations.
This ensures only aya-ebpf map types can be used as inner maps
in map-of-maps structures.

Author: Brskt

ebpf/aya-ebpf/src/maps/array.rs

@@ -15,6 +15,7 @@ pub struct Array<T> {
 }
 
 unsafe impl<T: Sync> Sync for Array<T> {}
+impl<T> super::private::Sealed for Array<T> {}
 unsafe impl<T> InnerMap for Array<T> {}
 
 impl<T> Array<T> {

ebpf/aya-ebpf/src/maps/bloom_filter.rs

@@ -12,6 +12,7 @@ pub struct BloomFilter<T> {
     _t: PhantomData<T>,
 }
 
+impl<T> super::private::Sealed for BloomFilter<T> {}
 unsafe impl<T> InnerMap for BloomFilter<T> {}
 
 impl<T> BloomFilter<T> {

ebpf/aya-ebpf/src/maps/hash_map.rs

@@ -20,6 +20,7 @@ pub struct HashMap<K, V> {
 }
 
 unsafe impl<K: Sync, V: Sync> Sync for HashMap<K, V> {}
+impl<K: Sync, V: Sync> super::private::Sealed for HashMap<K, V> {}
 unsafe impl<K: Sync, V: Sync> InnerMap for HashMap<K, V> {}
 
 impl<K, V> HashMap<K, V> {
@@ -102,6 +103,7 @@ pub struct LruHashMap<K, V> {
 }
 
 unsafe impl<K: Sync, V: Sync> Sync for LruHashMap<K, V> {}
+impl<K: Sync, V: Sync> super::private::Sealed for LruHashMap<K, V> {}
 unsafe impl<K: Sync, V: Sync> InnerMap for LruHashMap<K, V> {}
 
 impl<K, V> LruHashMap<K, V> {
@@ -184,6 +186,7 @@ pub struct PerCpuHashMap<K, V> {
 }
 
 unsafe impl<K, V> Sync for PerCpuHashMap<K, V> {}
+impl<K: Sync, V: Sync> super::private::Sealed for PerCpuHashMap<K, V> {}
 unsafe impl<K: Sync, V: Sync> InnerMap for PerCpuHashMap<K, V> {}
 
 impl<K, V> PerCpuHashMap<K, V> {
@@ -266,6 +269,7 @@ pub struct LruPerCpuHashMap<K, V> {
 }
 
 unsafe impl<K, V> Sync for LruPerCpuHashMap<K, V> {}
+impl<K: Sync, V: Sync> super::private::Sealed for LruPerCpuHashMap<K, V> {}
 unsafe impl<K: Sync, V: Sync> InnerMap for LruPerCpuHashMap<K, V> {}
 
 impl<K, V> LruPerCpuHashMap<K, V> {

ebpf/aya-ebpf/src/maps/lpm_trie.rs

@@ -18,6 +18,7 @@ pub struct LpmTrie<K, V> {
 }
 
 unsafe impl<K: Sync, V: Sync> Sync for LpmTrie<K, V> {}
+impl<K, V> super::private::Sealed for LpmTrie<K, V> {}
 unsafe impl<K, V> InnerMap for LpmTrie<K, V> {}
 
 #[repr(C, packed)]

ebpf/aya-ebpf/src/maps/mod.rs

@@ -39,9 +39,16 @@ pub use stack::Stack;
 pub use stack_trace::StackTrace;
 pub use xdp::{CpuMap, DevMap, DevMapHash, XskMap};
 
+mod private {
+    pub trait Sealed {}
+}
+
 /// Marker trait for all eBPF maps that can be used in a map of maps.
 ///
+/// This trait is sealed and cannot be implemented outside this crate.
+///
 /// # Safety
 ///
-/// Only implement this trait for map types that can be safely used as inner maps.
-pub unsafe trait InnerMap {}
+/// This trait must only be implemented for map types that the kernel accepts
+/// as inner maps in a map-of-maps structure.
+pub unsafe trait InnerMap: private::Sealed {}

ebpf/aya-ebpf/src/maps/per_cpu_array.rs

@@ -13,6 +13,7 @@ pub struct PerCpuArray<T> {
 }
 
 unsafe impl<T> Sync for PerCpuArray<T> {}
+impl<T> super::private::Sealed for PerCpuArray<T> {}
 unsafe impl<T> InnerMap for PerCpuArray<T> {}
 
 impl<T> PerCpuArray<T> {

ebpf/aya-ebpf/src/maps/queue.rs

@@ -13,6 +13,7 @@ pub struct Queue<T> {
 }
 
 unsafe impl<T: Sync> Sync for Queue<T> {}
+impl<T> super::private::Sealed for Queue<T> {}
 unsafe impl<T> InnerMap for Queue<T> {}
 
 impl<T> Queue<T> {

ebpf/aya-ebpf/src/maps/ring_buf.rs

@@ -23,6 +23,7 @@ pub struct RingBuf {
 }
 
 unsafe impl Sync for RingBuf {}
+impl super::private::Sealed for RingBuf {}
 unsafe impl InnerMap for RingBuf {}
 
 /// A ring buffer entry, returned from [`RingBuf::reserve_bytes`].

ebpf/aya-ebpf/src/maps/sock_hash.rs

@@ -24,6 +24,7 @@ pub struct SockHash<K> {
 }
 
 unsafe impl<K: Sync> Sync for SockHash<K> {}
+impl<K> super::private::Sealed for SockHash<K> {}
 unsafe impl<K> InnerMap for SockHash<K> {}
 
 impl<K> SockHash<K> {

ebpf/aya-ebpf/src/maps/sock_map.rs

@@ -18,6 +18,7 @@ pub struct SockMap {
 }
 
 unsafe impl Sync for SockMap {}
+impl super::private::Sealed for SockMap {}
 unsafe impl InnerMap for SockMap {}
 
 impl SockMap {