Searched refs:CAP_BPF (Results 1 – 20 of 20) sorted by relevance
/linux/tools/testing/selftests/bpf/ |
H A D | cap_helpers.h | 12 #ifndef CAP_BPF 13 #define CAP_BPF 39 macro
|
H A D | test_loader.c | 771 1ULL << CAP_PERFMON | 1ULL << CAP_BPF); in drop_capabilities()
|
/linux/tools/testing/selftests/bpf/progs/ |
H A D | verifier_mtu.c | 10 __caps_unpriv(CAP_BPF|CAP_NET_ADMIN)
|
H A D | verifier_spill_fill.c | 1250 __caps_unpriv(CAP_BPF) in __caps_unpriv() argument 1268 __caps_unpriv(CAP_BPF) in __caps_unpriv() argument
|
H A D | bpf_misc.h | 143 #define CAP_BPF 39 macro
|
/linux/tools/bpf/bpftool/ |
H A D | feature.c | 1072 #ifdef CAP_BPF in handle_perms() 1073 capability(CAP_BPF), in handle_perms() 1092 #ifdef CAP_BPF in handle_perms() 1093 if (CAP_IS_SUPPORTED(CAP_BPF)) in handle_perms() 1135 #ifdef CAP_BPF in handle_perms()
|
/linux/include/uapi/linux/ |
H A D | capability.h | 412 #define CAP_BPF 39 macro
|
/linux/include/linux/ |
H A D | capability.h | 202 return capable(CAP_BPF) || capable(CAP_SYS_ADMIN); in bpf_capable()
|
H A D | filter.h | 1306 if (bpf_jit_harden == 1 && bpf_token_capable(prog->aux->token, CAP_BPF)) in bpf_jit_blinding_enabled()
|
/linux/kernel/bpf/ |
H A D | token.c | 146 if (!ns_capable(userns, CAP_BPF)) in bpf_token_create()
|
H A D | syscall.c | 1221 if (!bpf_token_capable(token, CAP_BPF)) { in map_check_btf() 1404 if (sysctl_unprivileged_bpf_disabled && !bpf_token_capable(token, CAP_BPF)) in map_create() 1439 if (!bpf_token_capable(token, CAP_BPF)) in map_create() 2782 bpf_cap = bpf_token_capable(token, CAP_BPF); in bpf_prog_load() 5114 if (!bpf_token_capable(token, CAP_BPF)) { in bpf_btf_load()
|
H A D | helpers.c | 1961 if (!bpf_token_capable(prog->aux->token, CAP_BPF)) in bpf_base_func_proto()
|
H A D | core.c | 696 !bpf_token_capable(fp->aux->token, CAP_BPF)) in bpf_prog_kallsyms_add()
|
H A D | verifier.c | 23075 env->bpf_capable = is_priv = bpf_token_capable(env->prog->aux->token, CAP_BPF); in bpf_check()
|
/linux/tools/testing/selftests/bpf/prog_tests/ |
H A D | unpriv_bpf_disabled.c | 18 #define ALL_CAPS ((2ULL << CAP_BPF) - 1)
|
H A D | tc_bpf.c | 405 ret = cap_enable_effective(1ULL << CAP_BPF | 1ULL << CAP_NET_ADMIN, &caps); in tc_bpf_non_root()
|
H A D | token.c | 59 return cap_disable_effective((1ULL << CAP_BPF) | in drop_priv_caps()
|
/linux/Documentation/admin-guide/sysctl/ |
H A D | net.rst | 108 CAP_BPF or CAP_SYS_ADMIN in the root user name space.
|
H A D | kernel.rst | 1624 once disabled, calling ``bpf()`` without ``CAP_SYS_ADMIN`` or ``CAP_BPF``
|
/linux/net/core/ |
H A D | filter.c | 8692 if (!bpf_token_capable(prog->aux->token, CAP_BPF)) in cg_skb_is_valid_access() 8704 if (!bpf_token_capable(prog->aux->token, CAP_BPF)) in cg_skb_is_valid_access()
|