Daniel Borkmann
c230f6ba10
bpf: Add kconfig knob for disabling unpriv bpf by default ...
commit 08389d888287c3823f80b0216766b71e17f0aba5 upstream.
Add a kconfig knob which allows for unprivileged bpf to be disabled by default.
If set, the knob sets /proc/sys/kernel/unprivileged_bpf_disabled to value of 2.
This still allows a transition of 2 -> {0,1} through an admin. Similarly,
this also still keeps 1 -> {1} behavior intact, so that once set to permanently
disabled, it cannot be undone aside from a reboot.
We've also added extra2 with max of 2 for the procfs handler, so that an admin
still has a chance to toggle between 0 <-> 2.
Either way, as an additional alternative, applications can make use of CAP_BPF
that we added a while ago.
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/74ec548079189e4e4dffaeb42b8987bb3c852eee.1620765074.git.daniel@iogearbox.net
[fllinden@amazon.com: backported to 5.4]
Signed-off-by: Frank van der Linden <fllinden@amazon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-16 12:52:49 +01:00
evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded
2021-07-14 16:53:08 +02:00
psi: Fix uaf issue when psi trigger is destroyed while being polled
2022-02-05 12:35:36 +01:00
bpf: Add kconfig knob for disabling unpriv bpf by default
2022-02-16 12:52:49 +01:00
ARM: 9012/1: move device tree mapping out of linear region
2021-05-19 10:08:32 +02:00
userfaultfd: do not untag user pointers
2021-07-28 13:31:01 +02:00
XArray: add xas_split
2021-06-10 13:37:14 +02:00
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-09-18 12:11:14 -07:00
mm, page_owner: decouple freeing stack trace from debug_pagealloc
2019-10-14 15:04:00 -07:00
dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
2022-02-01 17:24:39 +01:00
Documentation: fix firewire.rst ABI file path error
2022-01-27 09:19:52 +01:00
fbdev: fix numbering of fbcon options
2020-02-24 08:36:42 +01:00
It's a somewhat calmer cycle for docs this time, as the churn of the mass
2019-09-17 16:22:26 -07:00
sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output
2021-03-07 12:20:48 +01:00
Documentation: ACPI: Fix data node reference documentation
2022-01-27 09:19:52 +01:00
hwmon: (lm90) Add basic support for TI TMP461
2021-12-29 12:23:35 +01:00
kbuild: support LLVM=1 to switch the default tools to Clang/LLVM
2020-08-26 10:40:47 +02:00
media: videodev2.h: RGB BT2020 and HSV are always full range
2020-11-05 11:43:15 +01:00
Main MIPS changes for v5.4:
2019-09-22 09:30:30 -07:00
bonding: fix ad_actor_system option setting to default
2021-12-29 12:23:35 +01:00
Merge branches 'pm-opp', 'pm-qos', 'acpi-pm', 'pm-domains' and 'pm-tools'
2019-09-17 09:49:19 +02:00
docs: powerpc: Add missing documentation reference
2019-09-17 23:59:34 +10:00
Documentation/process: Add fallthrough pseudo-keyword
2019-10-11 09:26:05 -07:00
It's a somewhat calmer cycle for docs this time, as the churn of the mass
2019-09-17 16:22:26 -07:00
scsi: smartpqi: Update attribute name to driver_version
2020-01-17 19:48:27 +01:00
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity
2019-09-27 19:37:27 -07:00
ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups
2020-04-17 10:50:08 +02:00
tweewide: Fix most Shebang lines
2021-05-22 11:38:30 +02:00
tweewide: Fix most Shebang lines
2021-05-22 11:38:30 +02:00
tracing/histogram: Rename "cpu" to "common_cpu"
2021-07-28 13:31:00 +02:00
USB: rio500: Remove Rio 500 kernel driver
2019-10-04 10:53:36 +02:00
Documentation: seccomp: Fix user notification documentation
2021-06-03 08:59:03 +02:00
KVM: X86: MMU: Use the correct inherited permissions to get shadow page
2021-08-15 13:08:04 +02:00
mm/slub: clarify verification reporting
2021-06-23 14:41:30 +02:00
linux-watchdog 5.4-rc1 tag
2019-09-27 11:17:38 -07:00
x86/CPU/AMD: Save AMD NodeId as cpu_die_id
2020-12-30 11:51:47 +01:00
xtensa: fix TLBTEMP area placement
2020-11-24 13:29:22 +01:00
linkage: Introduce new macros for assembler symbols
2020-11-10 12:37:24 +01:00
linkage: Introduce new macros for assembler symbols
2020-11-10 12:37:24 +01:00
lib/lzo: fix ambiguous encoding bug in lzo-rle
2020-06-17 16:40:28 +02:00
c230f6ba10
