Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1574916

Re: [PATCH net-next v1 7/7] bpf: Always test unprivileged programs

From Daniel Borkmann <daniel@iogearbox.net>
Newsgroups linux.kernel
Subject Re: [PATCH net-next v1 7/7] bpf: Always test unprivileged programs
Date 2017-02-06 16:50 +0100
Message-ID <t7TIe-6NW-9@gated-at.bofh.it> (permalink)
References <t7Eg9-5mH-3@gated-at.bofh.it> <t7Eg9-5mH-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On 02/06/2017 12:14 AM, Mickaël Salaün wrote:
> If selftests are run as root, then execute the unprivileged checks as
> well. This switch from 240 to 364 tests.
>
> The test numbers are suffixed with "/u" when executed as unprivileged or
> with "/p" when executed as privileged.
>
> The geteuid() check is replaced with a capability check.
>
> Handling capabilities require the libcap dependency.
>
> Signed-off-by: Mickaël Salaün <mic@digikod.net>
> Cc: Alexei Starovoitov <ast@fb.com>
> Cc: Daniel Borkmann <daniel@iogearbox.net>
> Cc: Shuah Khan <shuah@kernel.org>

Very useful! Could probably also go as stand-alone to net-next,
but how you prefer.

Acked-by: Daniel Borkmann <daniel@iogearbox.net>

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH net-next v1 7/7] bpf: Always test unprivileged programs Mickaël Salaün <mic@digikod.net> - 2017-02-06 00:20 +0100
  Re: [PATCH net-next v1 7/7] bpf: Always test unprivileged programs Daniel Borkmann <daniel@iogearbox.net> - 2017-02-06 16:50 +0100
  Re: [PATCH net-next v1 7/7] bpf: Always test unprivileged programs Mickaël Salaün <mic@digikod.net> - 2017-02-06 20:30 +0100

csiph-web