Chenbo Feng 0fa4fe85f4 bpf: skip unnecessary capability check ... The current check statement in BPF syscall will do a capability check for CAP_SYS_ADMIN before checking sysctl_unprivileged_bpf_disabled. This code path will trigger unnecessary security hooks on capability checking and cause false alarms on unprivileged process trying to get CAP_SYS_ADMIN access. This can be resolved by simply switch the order of the statement and CAP_SYS_ADMIN is not required anyway if unprivileged bpf syscall is allowed. Signed-off-by: Chenbo Feng <fengc@google.com> Acked-by: Lorenzo Colitti <lorenzo@google.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>		2018-03-20 23:50:39 +01:00
..
arraymap.c	bpf: add schedule points in percpu arrays management	2018-02-22 21:27:06 +01:00
bpf_lru_list.c
bpf_lru_list.h
cgroup.c
core.c	bpf: fix bpf_prog_array_copy_to_user warning from perf event prog query	2018-02-14 08:59:37 -08:00
cpumap.c	bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()	2018-02-14 15:34:27 +01:00
devmap.c
disasm.c
disasm.h
hashtab.c
helpers.c
inode.c
lpm_trie.c	bpf: fix rcu lockdep warning for lpm_trie map_free callback	2018-02-22 21:29:12 +01:00
Makefile
map_in_map.c
map_in_map.h
offload.c
percpu_freelist.c
percpu_freelist.h
sockmap.c	bpf: fix sock_map_alloc() error path	2018-02-13 19:19:15 -08:00
stackmap.c
syscall.c	bpf: skip unnecessary capability check	2018-03-20 23:50:39 +01:00
tnum.c
verifier.c	bpf: allow xadd only on aligned memory	2018-02-23 14:33:39 -08:00