Daniel Borkmann 8c15bfb36a bpf: Add kconfig knob for disabling unpriv bpf by default ... commit 08389d888287c3823f80b0216766b71e17f0aba5 upstream. Add a kconfig knob which allows for unprivileged bpf to be disabled by default. If set, the knob sets /proc/sys/kernel/unprivileged_bpf_disabled to value of 2. This still allows a transition of 2 -> {0,1} through an admin. Similarly, this also still keeps 1 -> {1} behavior intact, so that once set to permanently disabled, it cannot be undone aside from a reboot. We've also added extra2 with max of 2 for the procfs handler, so that an admin still has a chance to toggle between 0 <-> 2. Either way, as an additional alternative, applications can make use of CAP_BPF that we added a while ago. Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/74ec548079189e4e4dffaeb42b8987bb3c852eee.1620765074.git.daniel@iogearbox.net Cc: Salvatore Bonaccorso <carnil@debian.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-01-05 12:40:34 +01:00
..
ABI	powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable	2021-07-14 16:56:49 +02:00
accounting
admin-guide	bpf: Add kconfig knob for disabling unpriv bpf by default	2022-01-05 12:40:34 +01:00
arm	ARM: 9012/1: move device tree mapping out of linear region	2021-05-19 10:13:18 +02:00
arm64	userfaultfd: do not untag user pointers	2021-07-28 14:35:46 +02:00
block	block-5.10-2020-10-24	2020-10-24 12:46:42 -07:00
bpf
cdrom
core-api	dma-mapping: document dma_{alloc,free}_pages	2020-10-23 12:07:46 +02:00
cpu-freq
crypto
dev-tools	linux-kselftest-kunit-fixes-5.10-rc5	2020-11-18 11:57:55 -08:00
devicetree	dt-bindings: net: Reintroduce PHY no lane swap binding	2021-12-14 11:32:42 +01:00
doc-guide
driver-api	Documentation: Fix intiramfs script name	2021-07-28 14:35:47 +02:00
fault-injection	lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ	2021-09-15 09:50:42 +02:00
fb	drm fixes (round two) for 5.10-rc1	2020-10-23 13:56:34 -07:00
features
filesystems	fscrypt: allow 256-bit master keys with AES-256-XTS	2021-11-18 14:03:54 +01:00
firmware_class
firmware-guide	Documentation: ACPI: fix spelling mistakes	2020-11-10 18:48:56 +01:00
fpga
gpu	drm: Use USB controller's DMA mask when importing dmabufs	2021-03-17 17:06:19 +01:00
hid
hwmon	hwmon: (lm90) Add basic support for TI TMP461	2021-12-29 12:25:59 +01:00
i2c
ia64
ide
iio
infiniband
input
isdn
kbuild	Documentation/Kbuild: Remove references to gcc-plugin.sh	2021-12-14 11:32:46 +01:00
kernel-hacking
leds	docs: leds: index.rst: add a missing file	2020-11-02 13:45:37 +01:00
litmus-tests
livepatch
locking	Documentation/locking/locktypes: Update migrate_disable() bits.	2021-12-14 11:32:42 +01:00
m68k
maintainer
mhi
mips
misc-devices	Documentation: remove mic/index from misc-devices/index.rst	2020-11-04 11:38:32 +01:00
netlabel
networking	bonding: fix ad_actor_system option setting to default	2021-12-29 12:25:57 +01:00
nios2
nvdimm
openrisc
parisc
PCI
pcmcia
power
powerpc	powerpc/64s/syscall: Use pt_regs.trap to distinguish syscall ABI difference between sc and scv syscalls	2021-05-26 12:06:53 +02:00
process	docs: networking: drop special stable handling	2021-03-17 17:06:13 +01:00
RCU
riscv
s390
scheduler
scsi	scsi: libsas: Introduce a _gfp() variant of event notifiers	2021-03-25 09:04:11 +01:00
security	watch_queue: Drop references to /dev/watch_queue	2021-03-04 11:37:59 +01:00
sh
sound	ALSA: hda/realtek: Add new alc285-hp-amp-init model	2021-12-29 12:26:00 +01:00
sparc
sphinx	tweewide: Fix most Shebang lines	2021-05-22 11:40:55 +02:00
sphinx-static
spi
staging
target	tweewide: Fix most Shebang lines	2021-05-22 11:40:55 +02:00
timers
trace	tracing/histogram: Rename "cpu" to "common_cpu"	2021-07-28 14:35:45 +02:00
translations	net: switch to the kernel.org patchwork instance	2020-11-11 17:12:00 -08:00
usb
userspace-api	media: hevc: Fix dependent slice segment flags	2021-07-14 16:55:51 +02:00
virt	KVM: X86: MMU: Use the correct inherited permissions to get shadow page	2021-06-16 12:01:40 +02:00
vm	mm/debug_vm_pgtable/basic: add validation for dirtiness after write protect	2021-07-14 16:56:13 +02:00
w1
watchdog
x86	x86/CPU/AMD: Save AMD NodeId as cpu_die_id	2020-12-30 11:54:29 +01:00
xtensa	xtensa: fix TLBTEMP area placement	2020-11-16 02:13:15 -08:00
.gitignore
asm-annotations.rst	x86/entry: Emit a symbol for register restoring thunk	2021-02-03 23:28:40 +01:00
atomic_bitops.txt
atomic_t.txt
Changes
CodingStyle
conf.py	This pull contains a series of warning fixes from Mauro; once applied, the	2020-11-03 13:14:14 -08:00
COPYING-logo
docutils.conf
dontdiff	kbuild: generate Module.symvers only when vmlinux exists	2021-05-19 10:12:59 +02:00
index.rst
Kconfig	docs: Kconfig/Makefile: add a check for broken ABI files	2020-10-30 13:08:07 +01:00
logo.gif
Makefile	A small number of fixes, plus a build tweak to respect the desire for	2020-11-03 09:57:30 -08:00
memory-barriers.txt
SubmittingPatches
watch_queue.rst