netdev.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* bpf stable request
@ 2018-03-26 23:52 Chenbo Feng
  2018-03-27  0:00 ` Daniel Borkmann
  0 siblings, 1 reply; 2+ messages in thread
From: Chenbo Feng @ 2018-03-26 23:52 UTC (permalink / raw)
  To: Daniel Borkmann; +Cc: netdev, Lorenzo Colitti, Joel Fernandes

0fa4fe85f4724fff89b09741c437cbee9cf8b008 bpf: skip unnecessary 
capability check

This patch fixes the false alarms from security system such as selinux 
when doing the capability check. The problem exists since the 
sysctl_unprivileged_bpf_disabled is added in linux 4.4. So I suggest to 
backport this patch to all LTS stable branches starting from linux-4.4-y.

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: bpf stable request
  2018-03-26 23:52 bpf stable request Chenbo Feng
@ 2018-03-27  0:00 ` Daniel Borkmann
  0 siblings, 0 replies; 2+ messages in thread
From: Daniel Borkmann @ 2018-03-27  0:00 UTC (permalink / raw)
  To: Chenbo Feng; +Cc: netdev, Lorenzo Colitti, Joel Fernandes

On 03/27/2018 01:52 AM, Chenbo Feng wrote:
> 0fa4fe85f4724fff89b09741c437cbee9cf8b008 bpf: skip unnecessary capability check
> 
> This patch fixes the false alarms from security system such as selinux when doing the capability check. The problem exists since the sysctl_unprivileged_bpf_disabled is added in linux 4.4. So I suggest to backport this patch to all LTS stable branches starting from linux-4.4-y.

I will include this into the next batch, thanks guys!

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2018-03-27  0:00 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-03-26 23:52 bpf stable request Chenbo Feng
2018-03-27  0:00 ` Daniel Borkmann

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).