Yauheni Kaliuta bfeb7e399b bpf: Use bpf_capable() instead of CAP_SYS_ADMIN for blinding decision ...

The full CAP_SYS_ADMIN requirement for blinding looks too strict nowadays.
These days given unprivileged BPF is disabled by default, the main users
for constant blinding coming from unprivileged in particular via cBPF -> eBPF
migration (e.g. old-style socket filters).

Signed-off-by: Yauheni Kaliuta <ykaliuta@redhat.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/bpf/20220831090655.156434-1-ykaliuta@redhat.com
Link: https://lore.kernel.org/bpf/20220905090149.61221-1-ykaliuta@redhat.com

2022-09-16 22:11:57 +02:00

..

abi.rst

docs: admin-guide: sysctl: avoid using ReST :doc:foo markup

2021-06-17 13:24:36 -06:00

fs.rst

Update Documentation/admin-guide/sysctl/fs.rst

2021-01-28 15:45:10 -07:00

index.rst

…

kernel.rst

powerpc updates for 6.0

2022-08-06 16:38:17 -07:00

net.rst

bpf: Use bpf_capable() instead of CAP_SYS_ADMIN for blinding decision

2022-09-16 22:11:57 +02:00

sunrpc.rst

…

user.rst

time/namespace: Add max_time_namespaces ucount

2020-04-07 12:37:21 +02:00

vm.rst

mm: hugetlb_vmemmap: introduce the name HVO

2022-08-08 18:06:42 -07:00