Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9ef2a8cd authored by John Fastabend's avatar John Fastabend Committed by David S. Miller
Browse files

bpf: require CAP_NET_ADMIN when using devmap 



Devmap is used with XDP which requires CAP_NET_ADMIN so lets also
make CAP_NET_ADMIN required to use the map.

Signed-off-by: default avatarJohn Fastabend <john.fastabend@gmail.com>
Acked-by: default avatarDaniel Borkmann <daniel@iogearbox.net>
Acked-by: default avatarAlexei Starovoitov <ast@kernel.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent fb50df8d

kernel/bpf/devmap.c

+3 −0
Original line number Diff line number Diff line
@@ -78,6 +78,9 @@ static struct bpf_map *dev_map_alloc(union bpf_attr *attr) 
	int err = -EINVAL;

	u64 cost;



	if (!capable(CAP_NET_ADMIN))

		return ERR_PTR(-EPERM);



	/* check sanity of attributes */

	if (attr->max_entries == 0 || attr->key_size != 4 ||

	    attr->value_size != 4 || attr->map_flags & ~BPF_F_NUMA_NODE)