Alexei Starovoitov <ast@xxxxxxxxxx> writes: > CAP_BPF allows the following BPF operations: > - Loading all types of BPF programs > - Creating all types of BPF maps except: > - stackmap that needs CAP_TRACING > - devmap that needs CAP_NET_ADMIN > - cpumap that needs CAP_SYS_ADMIN Why CAP_SYS_ADMIN instead of CAP_NET_ADMIN for cpumap? -Toke
