John Fastabend fb50df8d32 bpf: require CAP_NET_ADMIN when using sockmap maps ...

Restrict sockmap to CAP_NET_ADMIN.

Signed-off-by: John Fastabend <john.fastabend@gmail.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

2017-10-20 13:01:29 +01:00

..

arraymap.c

bpf: do not test for PCPU_MIN_UNIT_SIZE before percpu allocations

2017-10-19 13:13:50 +01:00

bpf_lru_list.c

bpf: lru: Lower the PERCPU_NR_SCANS from 16 to 4

2017-04-17 13:55:52 -04:00

bpf_lru_list.h

bpf: Only set node->ref = 1 if it has not been set

2017-09-01 09:57:39 -07:00

cgroup.c

bpf: BPF support for sock_ops

2017-07-01 16:15:13 -07:00

core.c

bpf: fix bpf_tail_call() x64 JIT

2017-10-03 16:04:44 -07:00

devmap.c

bpf: fix splat for illegal devmap percpu allocation

2017-10-19 13:13:50 +01:00

hashtab.c

bpf: do not test for PCPU_MIN_UNIT_SIZE before percpu allocations

2017-10-19 13:13:50 +01:00

helpers.c

bpf: rename ARG_PTR_TO_STACK

2017-01-09 16:56:27 -05:00

inode.c

netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'

2017-10-09 15:18:04 +02:00

lpm_trie.c

bpf: Allow selecting numa node during map creation

2017-08-19 21:35:43 -07:00

Makefile

bpf: sock_map fixes for !CONFIG_BPF_SYSCALL and !STREAM_PARSER

2017-08-16 15:34:13 -07:00

map_in_map.c

bpf: Add syscall lookup support for fd array and htab

2017-06-29 13:13:25 -04:00

map_in_map.h

bpf: Add syscall lookup support for fd array and htab

2017-06-29 13:13:25 -04:00

percpu_freelist.c

bpf: introduce percpu_freelist

2016-03-08 15:28:31 -05:00

percpu_freelist.h

bpf: introduce percpu_freelist

2016-03-08 15:28:31 -05:00

sockmap.c

bpf: require CAP_NET_ADMIN when using sockmap maps

2017-10-20 13:01:29 +01:00

stackmap.c

bpf: Allow selecting numa node during map creation

2017-08-19 21:35:43 -07:00

syscall.c

bpf: do not disable/enable BH in bpf_map_free_id()

2017-09-19 15:42:54 -07:00

tnum.c

bpf/verifier: track signed and unsigned min/max values

2017-08-08 17:51:34 -07:00

verifier.c

bpf: disallow arithmetic operations on context pointer

2017-10-18 13:21:13 +01:00