From fa03239a811490fdd479fecf35bfad7f0adba406 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Maciej=20=C5=BBenczykowski?= Date: Wed, 10 Nov 2021 17:06:14 -0800 Subject: [PATCH] bpfloader.rc: set /proc/sys/kernel/unprivileged_bpf_disabled to 0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Needed to not have to carry https://android-review.googlesource.com/c/kernel/common/+/1886896 for 5.16-rc1+ kernels We set this before the bpfloader even executes so it will always be ready before anyone has a chance to use it. Test: TreeHugger Signed-off-by: Maciej Żenczykowski Change-Id: I418a534d6550c5b57286e261e6988d2debdf237f --- bpfloader/bpfloader.rc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/bpfloader/bpfloader.rc b/bpfloader/bpfloader.rc index 3c56c43..53219f4 100644 --- a/bpfloader/bpfloader.rc +++ b/bpfloader/bpfloader.rc @@ -15,6 +15,9 @@ # considered to have booted successfully. # on load_bpf_programs + # Linux 5.16-rc1 has changed the default to 2 (disabled but changeable), + # but we need 0 + write /proc/sys/kernel/unprivileged_bpf_disabled 0 # Enable the eBPF JIT -- but do note that on 64-bit kernels it is likely # already force enabled by the kernel config option BPF_JIT_ALWAYS_ON write /proc/sys/net/core/bpf_jit_enable 1