arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
[ Upstream commit f300769e ] Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB. In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless. Signed-off-by:James Morse <james.morse@arm.com> Reviewed-by:
Catalin Marinas <catalin.marinas@arm.com> Acked-by:
Daniel Borkmann <daniel@iogearbox.net> Signed-off-by:
Pu Lehui <pulehui@huawei.com> Signed-off-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Loading