Re: bpf stable request

2018-03-26 Thread Daniel Borkmann 
On 03/27/2018 01:52 AM, Chenbo Feng wrote:
> 0fa4fe85f4724fff89b09741c437cbee9cf8b008 bpf: skip unnecessary capability 
> check
> 
> This patch fixes the false alarms from security system such as selinux when 
> doing the capability check. The problem exists since the 
> sysctl_unprivileged_bpf_disabled is added in linux 4.4. So I suggest to 
> backport this patch to all LTS stable branches starting from linux-4.4-y.

I will include this into the next batch, thanks guys!

bpf stable request

2018-03-26 Thread Chenbo Feng 
0fa4fe85f4724fff89b09741c437cbee9cf8b008 bpf: skip unnecessary 
capability check


This patch fixes the false alarms from security system such as selinux 
when doing the capability check. The problem exists since the 
sysctl_unprivileged_bpf_disabled is added in linux 4.4. So I suggest to 
backport this patch to all LTS stable branches starting from linux-4.4-y.