From: CKI Gitlab on gitlab.com
Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1160
NOTE: Truncated patchset due to missing public @redhat.com email
address on your GitLab profile at https://gitlab.com/-/profile
Once that is fixed, close and reopen the merge request to
retrigger sending the emails.
As part of the ongoing rebase effort, the following configuration
options need to be reviewed.
As a reminder, the ARK configuration flow involves moving unreviewed
configuration options from the pending directory to the ark directory.
In the diff below, options are removed from the pending directory and
added to the ark hierarchy. The final options that need to be ACKed
are the files that are being added to the ark hierarchy.
If the value for a file that is added should be changed, please reply
with a better option.
Disables unprivileged BPF by default by setting the corresponding
/proc/sys/kernel/unprivileged_bpf_disabled knob to 2. An admin can
still reenable it by setting it to 0 later on, or permanently
disable it by setting it to 1 (from which no other transition to
0 is possible anymore).
Symbol: BPF_UNPRIV_DEFAULT_OFF [=n]
Type : bool
Defined at kernel/bpf/Kconfig:65
Prompt: Disable unprivileged BPF by default
Depends on: BPF_SYSCALL [=y]
-> General setup
-> BPF subsystem
Signed-off-by: Fedora Kernel Team <kernel-team(a)fedoraproject.org>
redhat/configs/common/generic/CONFIG_BPF_UNPRIV_DEFAULT_OFF | 1 +
redhat/configs/pending-common/generic/CONFIG_BPF_UNPRIV_DEFAULT_OFF | 20 ----------
2 files changed, 1 insertions(+), 20 deletions(-)