Re: [PATCH bpf-next] tools: bpftool: make capability check account for new BPF caps

On Mon, May 18, 2020 at 6:03 PM Quentin Monnet wrote: > > 2020-05-18 17:07 UTC-0700 ~ Andrii Nakryiko > > On Fri, May 15, 2020 at 5:52 PM Quentin Monnet > > wrote: > >> > >> Following the introduction of CAP_BPF, and the switch from CAP_SYS_ADMIN > >> to other capabilities for various BPF featu

Re: [PATCH bpf-next] tools: bpftool: make capability check account for new BPF caps

2020-05-18 17:07 UTC-0700 ~ Andrii Nakryiko > On Fri, May 15, 2020 at 5:52 PM Quentin Monnet wrote: >> >> Following the introduction of CAP_BPF, and the switch from CAP_SYS_ADMIN >> to other capabilities for various BPF features, update the capability >> checks (and potentially, drops) in bpftool

Re: [PATCH bpf-next] tools: bpftool: make capability check account for new BPF caps

On Fri, May 15, 2020 at 5:52 PM Quentin Monnet wrote: > > Following the introduction of CAP_BPF, and the switch from CAP_SYS_ADMIN > to other capabilities for various BPF features, update the capability > checks (and potentially, drops) in bpftool for feature probes. Because > bpftool and/or the s

[PATCH bpf-next] tools: bpftool: make capability check account for new BPF caps

Following the introduction of CAP_BPF, and the switch from CAP_SYS_ADMIN to other capabilities for various BPF features, update the capability checks (and potentially, drops) in bpftool for feature probes. Because bpftool and/or the system might not know of CAP_BPF yet, some caution is necessary: