Re: capable_bpf_net_admin()

[John Stultz <john.stultz@xxxxxxxxxx>]

On Thu, Jun 18, 2020 at 12:22 PM Maciej Żenczykowski
<zenczykowski@xxxxxxxxx> wrote:
>
> Ok so I think
>
> > +       if (is_net_admin_prog_type(type) && !capable(CAP_NET_ADMIN))
> > +               return -EPERM;
>
> should be
>
> > +       if (is_net_admin_prog_type(type) && !capable(CAP_NET_ADMIN) && !capable(CAP_SYS_ADMIN))
> > +               return -EPERM;
>
> and presumably similar change just below that for perfmon.

Looks ok to me. Do you want to send out such a patch? If not I'll do
so on Monday.

thanks
-john