]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit - debian.master/config/config.common.ubuntu
UBUNTU: [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
authorAndrea Righi <andrea.righi@canonical.com>
Mon, 31 May 2021 10:02:50 +0000 (12:02 +0200)
committerAndrea Righi <andrea.righi@canonical.com>
Tue, 7 Dec 2021 06:32:03 +0000 (07:32 +0100)
commit77a0054f95f07ff8cf2c52bb8502cc59ee1a9745
tree0a127a666f7bf1c26d8eb61d2f04aa98e36bb36c
parentf5cca9637ed2b49c94875c7399ff8832ba988910
UBUNTU: [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y

This option will disable uprivileged BPF by default. It can be reenabled,
though, as it uses the new value 2 for the kernel.unprivileged_bpf_disabled
sysctl. That value disables it, but allows the sysctl knob to be set back
to 0.

This allows sysadmins to enable unprivileged BPF back by using sysctl
config files.

Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
Acked-by: Andrea Righi <andrea.righi@canonical.com>
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
debian.master/config/annotations
debian.master/config/config.common.ubuntu