CONFIG_BPF_UNPRIV_DEFAULT_OFF: Disable unprivileged BPF by default

General informations

The Linux kernel configuration item CONFIG_BPF_UNPRIV_DEFAULT_OFF:

• prompt: Disable unprivileged BPF by default
• type: bool
• depends on: CONFIG_BPF_SYSCALL
• defined in kernel/bpf/Kconfig
• found in Linux kernels: 5.13–5.19, 6.0–6.10, 6.11-rc+HEAD

Help text

Disables unprivileged BPF by default by setting the corresponding /proc/sys/kernel/unprivileged_bpf_disabled knob to 2. An admin can still reenable it by setting it to 0 later on, or permanently disable it by setting it to 1 (from which no other transition to 0 is possible anymore).

Unprivileged BPF could be used to exploit certain potential speculative execution side-channel vulnerabilities on unmitigated affected hardware.

If you are unsure how to answer this question, answer Y.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: