Component Type: kbuild config

Description: Disable unprivileged BPF by default

More info: Disables unprivileged BPF by default by setting the corresponding /proc/sys/kernel/unprivileged_bpf_disabled knob to 2. An admin can still reenable it by setting it to 0 later on, or permanently disable it by setting it to 1 (from which no other transition to 0 is possible anymore). Unprivileged BPF could be used to exploit certain potential speculative execution side-channel vulnerabilities on unmitigated affected hardware. If you are unsure how to answer this question, answer Y.

Build project: Kconfig (Linux kconfig) (Path: kernel\bpf\Kconfig )

Other views: file explorer