]> Git Repo - linux.git/commit
bpf: Move bpf_loop and bpf_for_each_map_elem under CAP_BPF
authorKumar Kartikeya Dwivedi <[email protected]>
Tue, 23 Aug 2022 01:31:17 +0000 (03:31 +0200)
committerAlexei Starovoitov <[email protected]>
Tue, 23 Aug 2022 23:21:59 +0000 (16:21 -0700)
commit5679ff2f138f77b281c468959dc5022cc524d400
tree8a9fed6c23507723412c96b55fe5455b1d432f62
parentf52c8947347d43546581ab1bf8fa19867b664a8c
bpf: Move bpf_loop and bpf_for_each_map_elem under CAP_BPF

They would require func_info which needs prog BTF anyway. Loading BTF
and setting the prog btf_fd while loading the prog indirectly requires
CAP_BPF, so just to reduce confusion, move both these helpers taking
callback under bpf_capable() protection as well, since they cannot be
used without CAP_BPF.

Signed-off-by: Kumar Kartikeya Dwivedi <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Alexei Starovoitov <[email protected]>
kernel/bpf/helpers.c
This page took 0.055165 seconds and 4 git commands to generate.