enable BPF JIT hardening by default (if available)

This commit is contained in:
Levente Polyak 2018-05-07 20:37:55 +02:00
parent 35e7bc6bf1
commit 87a4cd3844
No known key found for this signature in database
GPG key ID: FC1B547C8D8172C8

View file

@ -551,7 +551,7 @@ void bpf_prog_kallsyms_del_all(struct bpf_prog *fp)
/* All BPF JIT sysctl knobs here. */
int bpf_jit_enable __read_mostly = IS_BUILTIN(CONFIG_BPF_JIT_DEFAULT_ON);
int bpf_jit_kallsyms __read_mostly = IS_BUILTIN(CONFIG_BPF_JIT_DEFAULT_ON);
int bpf_jit_harden __read_mostly;
int bpf_jit_harden __read_mostly = 2;
long bpf_jit_limit __read_mostly;
long bpf_jit_limit_max __read_mostly;