guix-commits
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

05/05: gnu: linux-libre: Disable unprivileged BPF by default.


From: guix-commits
Subject: 05/05: gnu: linux-libre: Disable unprivileged BPF by default.
Date: Wed, 15 Feb 2023 05:46:30 -0500 (EST)

nckx pushed a commit to branch master
in repository guix.

commit 017f1779e937a85e525debdb89807592b35f55ea
Author: Tobias Geerinckx-Rice <me@tobias.gr>
AuthorDate: Sun Jan 29 01:00:00 2023 +0100

    gnu: linux-libre: Disable unprivileged BPF by default.
    
    * gnu/packages/aux-files/linux-libre/5.15-arm.conf:
    Set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y.
    * gnu/packages/aux-files/linux-libre/5.15-arm64.conf: Likewise.
    * gnu/packages/aux-files/linux-libre/5.15-i686.conf: Likewise.
    * gnu/packages/aux-files/linux-libre/5.15-x86_64.conf: Likewise.
    * gnu/packages/aux-files/linux-libre/6.1-arm.conf: Likewise.
    * gnu/packages/aux-files/linux-libre/6.1-arm64.conf: Likewise.
    * gnu/packages/aux-files/linux-libre/6.1-i686.conf: Likewise.
    * gnu/packages/aux-files/linux-libre/6.1-x86_64.conf: Likewise.
---
 gnu/packages/aux-files/linux-libre/5.15-arm.conf    | 2 +-
 gnu/packages/aux-files/linux-libre/5.15-arm64.conf  | 2 +-
 gnu/packages/aux-files/linux-libre/5.15-i686.conf   | 2 +-
 gnu/packages/aux-files/linux-libre/5.15-x86_64.conf | 2 +-
 gnu/packages/aux-files/linux-libre/6.1-arm.conf     | 2 +-
 gnu/packages/aux-files/linux-libre/6.1-arm64.conf   | 2 +-
 gnu/packages/aux-files/linux-libre/6.1-i686.conf    | 2 +-
 gnu/packages/aux-files/linux-libre/6.1-x86_64.conf  | 2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/gnu/packages/aux-files/linux-libre/5.15-arm.conf 
b/gnu/packages/aux-files/linux-libre/5.15-arm.conf
index a45530711e..2d5b20f1de 100644
--- a/gnu/packages/aux-files/linux-libre/5.15-arm.conf
+++ b/gnu/packages/aux-files/linux-libre/5.15-arm.conf
@@ -101,7 +101,7 @@ CONFIG_HAVE_EBPF_JIT=y
 CONFIG_BPF_SYSCALL=y
 CONFIG_BPF_JIT=y
 # CONFIG_BPF_JIT_ALWAYS_ON is not set
-# CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
+CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
 CONFIG_BPF_LSM=y
 # end of BPF subsystem
diff --git a/gnu/packages/aux-files/linux-libre/5.15-arm64.conf 
b/gnu/packages/aux-files/linux-libre/5.15-arm64.conf
index 3a3d144330..5ed52b3c76 100644
--- a/gnu/packages/aux-files/linux-libre/5.15-arm64.conf
+++ b/gnu/packages/aux-files/linux-libre/5.15-arm64.conf
@@ -96,7 +96,7 @@ CONFIG_BPF_SYSCALL=y
 CONFIG_BPF_JIT=y
 # CONFIG_BPF_JIT_ALWAYS_ON is not set
 CONFIG_BPF_JIT_DEFAULT_ON=y
-# CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
+CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
 CONFIG_BPF_LSM=y
 # end of BPF subsystem
diff --git a/gnu/packages/aux-files/linux-libre/5.15-i686.conf 
b/gnu/packages/aux-files/linux-libre/5.15-i686.conf
index ab2008f3e5..d2bf661acf 100644
--- a/gnu/packages/aux-files/linux-libre/5.15-i686.conf
+++ b/gnu/packages/aux-files/linux-libre/5.15-i686.conf
@@ -108,7 +108,7 @@ CONFIG_HAVE_EBPF_JIT=y
 #
 CONFIG_BPF_SYSCALL=y
 # CONFIG_BPF_JIT is not set
-# CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
+CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
 # end of BPF subsystem
 
diff --git a/gnu/packages/aux-files/linux-libre/5.15-x86_64.conf 
b/gnu/packages/aux-files/linux-libre/5.15-x86_64.conf
index 8fbb48bcb6..973fd2e47c 100644
--- a/gnu/packages/aux-files/linux-libre/5.15-x86_64.conf
+++ b/gnu/packages/aux-files/linux-libre/5.15-x86_64.conf
@@ -112,7 +112,7 @@ CONFIG_ARCH_WANT_DEFAULT_BPF_JIT=y
 #
 CONFIG_BPF_SYSCALL=y
 # CONFIG_BPF_JIT is not set
-# CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
+CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
 # end of BPF subsystem
 
diff --git a/gnu/packages/aux-files/linux-libre/6.1-arm.conf 
b/gnu/packages/aux-files/linux-libre/6.1-arm.conf
index d0e1c9ad08..59dd0ad9f7 100644
--- a/gnu/packages/aux-files/linux-libre/6.1-arm.conf
+++ b/gnu/packages/aux-files/linux-libre/6.1-arm.conf
@@ -103,7 +103,7 @@ CONFIG_HAVE_EBPF_JIT=y
 CONFIG_BPF_SYSCALL=y
 CONFIG_BPF_JIT=y
 # CONFIG_BPF_JIT_ALWAYS_ON is not set
-# CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
+CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
 CONFIG_BPF_LSM=y
 # end of BPF subsystem
diff --git a/gnu/packages/aux-files/linux-libre/6.1-arm64.conf 
b/gnu/packages/aux-files/linux-libre/6.1-arm64.conf
index b5654dcd8e..6d25a1c2b5 100644
--- a/gnu/packages/aux-files/linux-libre/6.1-arm64.conf
+++ b/gnu/packages/aux-files/linux-libre/6.1-arm64.conf
@@ -112,7 +112,7 @@ CONFIG_BPF_SYSCALL=y
 CONFIG_BPF_JIT=y
 # CONFIG_BPF_JIT_ALWAYS_ON is not set
 CONFIG_BPF_JIT_DEFAULT_ON=y
-# CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
+CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
 CONFIG_BPF_LSM=y
 # end of BPF subsystem
diff --git a/gnu/packages/aux-files/linux-libre/6.1-i686.conf 
b/gnu/packages/aux-files/linux-libre/6.1-i686.conf
index b91ff79b72..f06280b0ff 100644
--- a/gnu/packages/aux-files/linux-libre/6.1-i686.conf
+++ b/gnu/packages/aux-files/linux-libre/6.1-i686.conf
@@ -111,7 +111,7 @@ CONFIG_HAVE_EBPF_JIT=y
 #
 CONFIG_BPF_SYSCALL=y
 # CONFIG_BPF_JIT is not set
-# CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
+CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
 # end of BPF subsystem
 
diff --git a/gnu/packages/aux-files/linux-libre/6.1-x86_64.conf 
b/gnu/packages/aux-files/linux-libre/6.1-x86_64.conf
index 68187506f1..7224770c4a 100644
--- a/gnu/packages/aux-files/linux-libre/6.1-x86_64.conf
+++ b/gnu/packages/aux-files/linux-libre/6.1-x86_64.conf
@@ -116,7 +116,7 @@ CONFIG_ARCH_WANT_DEFAULT_BPF_JIT=y
 #
 CONFIG_BPF_SYSCALL=y
 # CONFIG_BPF_JIT is not set
-# CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
+CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
 # end of BPF subsystem
 



reply via email to

[Prev in Thread] Current Thread [Next in Thread]