You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Daniel Borkmann f952e6d7e1 bpf: Add kconfig knob for disabling unpriv bpf by default ... commit 08389d888287c3823f80b0216766b71e17f0aba5 upstream. Add a kconfig knob which allows for unprivileged bpf to be disabled by default. If set, the knob sets /proc/sys/kernel/unprivileged_bpf_disabled to value of 2. This still allows a transition of 2 -> {0,1} through an admin. Similarly, this also still keeps 1 -> {1} behavior intact, so that once set to permanently disabled, it cannot be undone aside from a reboot. We've also added extra2 with max of 2 for the procfs handler, so that an admin still has a chance to toggle between 0 <-> 2. Either way, as an additional alternative, applications can make use of CAP_BPF that we added a while ago. Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/74ec548079189e4e4dffaeb42b8987bb3c852eee.1620765074.git.daniel@iogearbox.net [fllinden@amazon.com: backported to 4.14] Signed-off-by: Frank van der Linden <fllinden@amazon.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Change-Id: I097aa89fba1483edf2f59d14ca59016e2d1af9ad		11 months ago
..
Kconfig	bpf: Add kconfig knob for disabling unpriv bpf by default	11 months ago
Makefile	Import A525FXXU3AUG4	3 years ago
calibrate.c	Import A525FXXU3AUG4	3 years ago
do_mounts.c	Import A525FXXU3AUG4	3 years ago
do_mounts.h	Import A525FXXU3AUG4	3 years ago
do_mounts_dm.c	Import A525FXXU3AUG4	3 years ago
do_mounts_initrd.c	Import A525FXXU3AUG4	3 years ago
do_mounts_md.c	Import A525FXXU3AUG4	3 years ago
do_mounts_rd.c	Import A525FXXU3AUG4	3 years ago
init_task.c	Import A525FXXU3AUG4	3 years ago
initramfs.c	Import A525FXXU3AUG4	3 years ago
main.c	Import A525FXXU3AUG4	3 years ago
noinitramfs.c	Import A525FXXU3AUG4	3 years ago
version.c	Import A525FXXU3AUG4	3 years ago