Daniel Borkmann f27f62fecd UPSTREAM: bpf: Add kconfig knob for disabling unpriv bpf by default ... commit 08389d8882 upstream. Add a kconfig knob which allows for unprivileged bpf to be disabled by default. If set, the knob sets /proc/sys/kernel/unprivileged_bpf_disabled to value of 2. This still allows a transition of 2 -> {0,1} through an admin. Similarly, this also still keeps 1 -> {1} behavior intact, so that once set to permanently disabled, it cannot be undone aside from a reboot. We've also added extra2 with max of 2 for the procfs handler, so that an admin still has a chance to toggle between 0 <-> 2. Either way, as an additional alternative, applications can make use of CAP_BPF that we added a while ago. Bug: 215557547 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/74ec548079189e4e4dffaeb42b8987bb3c852eee.1620765074.git.daniel@iogearbox.net Cc: Salvatore Bonaccorso <carnil@debian.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 8c15bfb36a) Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I6d80853f0bd2c8618d956d967681c97b931a6137		2022-03-14 14:42:39 +01:00
..
abi.rst	docs: rewrite admin-guide/sysctl/abi.rst	2020-09-24 11:01:44 -06:00
fs.rst	Replace HTTP links with HTTPS ones: Documentation/admin-guide	2020-07-05 14:13:00 -06:00
index.rst
kernel.rst	UPSTREAM: bpf: Add kconfig knob for disabling unpriv bpf by default	2022-03-14 14:42:39 +01:00
net.rst	docs: admin-guide: net.rst: add a missing blank line	2020-10-28 11:26:10 -06:00
sunrpc.rst
user.rst	time/namespace: Add max_time_namespaces ucount	2020-04-07 12:37:21 +02:00
vm.rst	FROMLIST: mm: compaction: support triggering of proactive compaction by user	2021-06-17 14:15:58 -07:00