Chenbo Feng 80b7d81912 bpf: Remove the capability check for cgroup skb eBPF program
Currently loading a cgroup skb eBPF program require a CAP_SYS_ADMIN
capability while attaching the program to a cgroup only requires the
user have CAP_NET_ADMIN privilege. We can escape the capability
check when load the program just like socket filter program to make
the capability requirement consistent.

Change since v1:
Change the code style in order to be compliant with checkpatch.pl
preference

Signed-off-by: Chenbo Feng <fengc@google.com>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-06-02 14:24:40 -04:00
..
2017-05-12 15:57:15 -07:00
2017-05-08 18:49:23 -07:00
2017-05-12 15:57:15 -07:00
2015-11-19 17:51:48 +01:00
2017-01-12 07:01:56 -07:00
2015-11-23 09:44:58 +01:00
2017-05-08 17:15:12 -07:00
2017-04-21 20:30:46 +08:00
2016-03-01 20:36:56 +01:00
2016-12-22 22:58:37 -05:00