Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
From: Alexei Starovoitov <ast@xxxxxxxxxxxx>
Date: Wed, 7 Oct 2015 23:30:26 -0700
Cc: Kees Cook <keescook@xxxxxxxxxxxx>, Daniel Borkmann <daniel@xxxxxxxxxxxxx>, "David S. Miller" <davem@xxxxxxxxxxxxx>, Andy Lutomirski <luto@xxxxxxxxxxxxxx>, Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>, Eric Dumazet <edumazet@xxxxxxxxxx>, Linux API <linux-api@xxxxxxxxxxxxxxx>, Network Development <netdev@xxxxxxxxxxxxxxx>, LKML <linux-kernel@xxxxxxxxxxxxxxx>
In-reply-to: <20151008062155.GA18452@gmail.com>
References: <1444078101-29060-1-git-send-email-ast@plumgrid.com> <1444078101-29060-2-git-send-email-ast@plumgrid.com> <5612F639.2050305@iogearbox.net> <56131B1F.80002@plumgrid.com> <5613C261.4080302@iogearbox.net> <56158CAF.9030209@plumgrid.com> <561597A6.4000203@iogearbox.net> <CAGXu5jLM5Wp_PjdcEcxUo-VoEmsSycF236MZaJd2wvLjbQx+eQ@mail.gmail.com> <5615AF92.50402@plumgrid.com> <20151008062155.GA18452@gmail.com>
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0

On 10/7/15 11:21 PM, Ingo Molnar wrote:

so I see no reason why unprivileged eBPF couldn't have a sysctl too - with the
default value set to permissive.


agreed. sent out v2 follows 'modules_disabled' style.
--
To unsubscribe from this list: send the line "unsubscribe linux-api" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

References:
- [PATCH net-next 0/2] bpf: unprivileged
  - From: Alexei Starovoitov
- [PATCH net-next 1/2] bpf: enable non-root eBPF programs
  - From: Alexei Starovoitov
- Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
  - From: Daniel Borkmann
- Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
  - From: Alexei Starovoitov
- Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
  - From: Daniel Borkmann
- Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
  - From: Alexei Starovoitov
- Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
  - From: Daniel Borkmann
- Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
  - From: Kees Cook
- Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
  - From: Alexei Starovoitov
- Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
  - From: Ingo Molnar

Prev by Date: Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
Next by Date: Re: [RFC 0/3] kdbus: extend selftests
Previous by thread: Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
Next by thread: Re: [PATCH net-next 1/2] bpf: enable non-root eBPF programs
Index(es):
- Date
- Thread

[Index of Archives] [Linux USB Devel] [Video for Linux] [Linux Audio Users] [Yosemite News] [Linux Kernel] [Linux SCSI]