bpf: allow socket_filter programs to use bpf_prog_test_run

Browse source

in order to improve test coverage allow socket_filter program type
to be run via bpf_prog_test_run command.
Since such programs can be loaded by non-root tighten
permissions for bpf_prog_test_run to be root only
to avoid surprises.

Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>

...

This commit is contained in:

Alexei Starovoitov 2018-01-17 16:52:02 -08:00 • committed by Daniel Borkmann

parent e7b2823a58

commit 61f3c964df

2 changed files with 3 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

kernel/bpf/syscall.c

View file

1

net/core/filter.c

View file