Daniel Borkmann 8c15bfb36a bpf: Add kconfig knob for disabling unpriv bpf by default ... commit 08389d8882 upstream. Add a kconfig knob which allows for unprivileged bpf to be disabled by default. If set, the knob sets /proc/sys/kernel/unprivileged_bpf_disabled to value of 2. This still allows a transition of 2 -> {0,1} through an admin. Similarly, this also still keeps 1 -> {1} behavior intact, so that once set to permanently disabled, it cannot be undone aside from a reboot. We've also added extra2 with max of 2 for the procfs handler, so that an admin still has a chance to toggle between 0 <-> 2. Either way, as an additional alternative, applications can make use of CAP_BPF that we added a while ago. Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/74ec548079189e4e4dffaeb42b8987bb3c852eee.1620765074.git.daniel@iogearbox.net Cc: Salvatore Bonaccorso <carnil@debian.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-01-05 12:40:34 +01:00
..
calibrate.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
do_mounts.c	init: add an init_chroot helper	2020-07-31 08:17:52 +02:00
do_mounts.h	init: add an init_mknod helper	2020-07-31 08:17:54 +02:00
do_mounts_initrd.c	Merge branch 'hch.init_path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2020-08-07 09:40:34 -07:00
do_mounts_rd.c	init: add an init_unlink helper	2020-07-31 08:17:52 +02:00
init_task.c	seccomp: Fix CONFIG tests for Seccomp_filters	2021-05-14 09:50:24 +02:00
initramfs.c	initramfs: fix clang build failure	2020-12-11 14:02:14 -08:00
Kconfig	bpf: Add kconfig knob for disabling unpriv bpf by default	2022-01-05 12:40:34 +01:00
main.c	bootconfig: init: Fix memblock leak in xbc_make_cmdline()	2021-11-21 13:46:35 +01:00
Makefile	md: move the early init autodetect code to drivers/md/	2020-07-16 15:34:47 +02:00
noinitramfs.c	init: add an init_mknod helper	2020-07-31 08:17:54 +02:00
version.c	treewide: Add SPDX license identifier for missed files	2019-05-21 10:50:45 +02:00