Re: [PATCH bpf-next] bpf: Remove unnecessary CAP_MAC_ADMIN check

From: Alexei Starovoitov
Date: Thu Mar 05 2020 - 17:39:05 EST

Next message: Suman Anna: "[PATCH 1/2] remoteproc: fall back to using parent memory pool if no dedicated available"
Previous message: Jonathan NeuschÃfer: "[PATCH] dt-bindings: mfd: cros-ec: Fix indentation in the example"
In reply to: KP Singh: "[PATCH bpf-next] bpf: Remove unnecessary CAP_MAC_ADMIN check"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, Mar 05, 2020 at 09:49:55PM +0100, KP Singh wrote:
> From: KP Singh <kpsingh@xxxxxxxxxx>
>
> While well intentioned, checking CAP_MAC_ADMIN for attaching
> BPF_MODIFY_RETURN tracing programs to "security_" functions is not
> necessary as tracing BPF programs already require CAP_SYS_ADMIN.
>
> Fixes: 6ba43b761c41 ("bpf: Attachment verification for BPF_MODIFY_RETURN")
> Signed-off-by: KP Singh <kpsingh@xxxxxxxxxx>

Applied. Thanks

Next message: Suman Anna: "[PATCH 1/2] remoteproc: fall back to using parent memory pool if no dedicated available"
Previous message: Jonathan NeuschÃfer: "[PATCH] dt-bindings: mfd: cros-ec: Fix indentation in the example"
In reply to: KP Singh: "[PATCH bpf-next] bpf: Remove unnecessary CAP_MAC_ADMIN check"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]