From: "Edgecombe, Rick P" <rick.p.edgecombe@xxxxxxxxx> Date: Tue, 21 May 2019 00:20:13 +0000 > This behavior shouldn't happen until modules or BPF are being freed. Then that would rule out my theory. The only thing left is whether the permissions are actually set properly. If they aren't we'll take an exception when the BPF program is run and I'm not %100 sure that kernel execute permission violations are totally handled cleanly.
