Home
last modified time | relevance | path

Searched refs:CAP_BPF (Results 1 – 21 of 21) sorted by relevance

/linux-6.15/tools/testing/selftests/bpf/
H A Dcap_helpers.h13 #ifndef CAP_BPF
14 #define CAP_BPF 39 macro
H A Dtest_loader.c791 1ULL << CAP_PERFMON | 1ULL << CAP_BPF); in drop_capabilities()
H A Dtest_verifier.c71 1ULL << CAP_BPF)
/linux-6.15/tools/testing/selftests/bpf/progs/
H A Dverifier_mtu.c10 __caps_unpriv(CAP_BPF|CAP_NET_ADMIN)
H A Dverifier_spill_fill.c1250 __caps_unpriv(CAP_BPF) in __caps_unpriv() argument
1268 __caps_unpriv(CAP_BPF) in __caps_unpriv() argument
H A Dbpf_misc.h145 #define CAP_BPF 39 macro
/linux-6.15/tools/bpf/bpftool/
H A Dfeature.c1072 #ifdef CAP_BPF in handle_perms()
1073 capability(CAP_BPF), in handle_perms()
1092 #ifdef CAP_BPF in handle_perms()
1093 if (CAP_IS_SUPPORTED(CAP_BPF)) in handle_perms()
1135 #ifdef CAP_BPF in handle_perms()
/linux-6.15/include/uapi/linux/
H A Dcapability.h413 #define CAP_BPF 39 macro
/linux-6.15/include/linux/
H A Dcapability.h197 return capable(CAP_BPF) || capable(CAP_SYS_ADMIN); in bpf_capable()
H A Dfilter.h1326 if (bpf_jit_harden == 1 && bpf_token_capable(prog->aux->token, CAP_BPF)) in bpf_jit_blinding_enabled()
/linux-6.15/kernel/bpf/
H A Dtoken.c146 if (!ns_capable(userns, CAP_BPF)) in bpf_token_create()
H A Dsyscall.c1241 if (!bpf_token_capable(token, CAP_BPF)) { in map_check_btf()
1425 if (sysctl_unprivileged_bpf_disabled && !bpf_token_capable(token, CAP_BPF)) in map_create()
1460 if (!bpf_token_capable(token, CAP_BPF)) in map_create()
2801 bpf_cap = bpf_token_capable(token, CAP_BPF); in bpf_prog_load()
5134 if (!bpf_token_capable(token, CAP_BPF)) { in bpf_btf_load()
H A Dhelpers.c1972 if (!bpf_token_capable(prog->aux->token, CAP_BPF)) in bpf_base_func_proto()
H A Dcore.c696 !bpf_token_capable(fp->aux->token, CAP_BPF)) in bpf_prog_kallsyms_add()
H A Dverifier.c23940 env->bpf_capable = is_priv = bpf_token_capable(env->prog->aux->token, CAP_BPF); in bpf_check()
/linux-6.15/tools/testing/selftests/bpf/prog_tests/
H A Dunpriv_bpf_disabled.c18 #define ALL_CAPS ((2ULL << CAP_BPF) - 1)
H A Dtc_bpf.c405 ret = cap_enable_effective(1ULL << CAP_BPF | 1ULL << CAP_NET_ADMIN, &caps); in tc_bpf_non_root()
H A Dtoken.c60 return cap_disable_effective((1ULL << CAP_BPF) | in drop_priv_caps()
/linux-6.15/Documentation/admin-guide/sysctl/
H A Dnet.rst108 CAP_BPF or CAP_SYS_ADMIN in the root user name space.
H A Dkernel.rst1624 once disabled, calling ``bpf()`` without ``CAP_SYS_ADMIN`` or ``CAP_BPF``
/linux-6.15/net/core/
H A Dfilter.c8765 if (!bpf_token_capable(prog->aux->token, CAP_BPF)) in cg_skb_is_valid_access()
8777 if (!bpf_token_capable(prog->aux->token, CAP_BPF)) in cg_skb_is_valid_access()