Chenbo Feng 0fa4fe85f4 bpf: skip unnecessary capability check ... The current check statement in BPF syscall will do a capability check for CAP_SYS_ADMIN before checking sysctl_unprivileged_bpf_disabled. This code path will trigger unnecessary security hooks on capability checking and cause false alarms on unprivileged process trying to get CAP_SYS_ADMIN access. This can be resolved by simply switch the order of the statement and CAP_SYS_ADMIN is not required anyway if unprivileged bpf syscall is allowed. Signed-off-by: Chenbo Feng <fengc@google.com> Acked-by: Lorenzo Colitti <lorenzo@google.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>		2018-03-20 23:50:39 +01:00
..
arraymap.c
bpf_lru_list.c
bpf_lru_list.h
cgroup.c
core.c
cpumap.c
devmap.c
disasm.c
disasm.h
hashtab.c
helpers.c
inode.c
lpm_trie.c
Makefile
map_in_map.c
map_in_map.h
offload.c
percpu_freelist.c
percpu_freelist.h
sockmap.c
stackmap.c
syscall.c	bpf: skip unnecessary capability check	2018-03-20 23:50:39 +01:00
tnum.c
verifier.c