[OS-BUILD PATCH 0/0] [redhat] New configs in kernel/bpf

[CKI Gitlab (via Email Bridge)]

From: CKI Gitlab on gitlab.com
Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1160
NOTE: Truncated patchset due to missing public @redhat.com email
      address on your GitLab profile at https://gitlab.com/-/profile.
      Once that is fixed, close and reopen the merge request to
      retrigger sending the emails.

Hi,

As part of the ongoing rebase effort, the following configuration
options need to be reviewed.

As a reminder, the ARK configuration flow involves moving unreviewed
configuration options from the pending directory to the ark directory.
In the diff below, options are removed from the pending directory and
added to the ark hierarchy. The final options that need to be ACKed
are the files that are being added to the ark hierarchy.

If the value for a file that is added should be changed, please reply
with a better option.

 CONFIG_BPF_UNPRIV_DEFAULT_OFF:

 Disables unprivileged BPF by default by setting the corresponding
 /proc/sys/kernel/unprivileged_bpf_disabled knob to 2. An admin can
 still reenable it by setting it to 0 later on, or permanently
 disable it by setting it to 1 (from which no other transition to
 0 is possible anymore).

 Symbol: BPF_UNPRIV_DEFAULT_OFF [=n]
 Type  : bool
 Defined at kernel/bpf/Kconfig:65
   Prompt: Disable unprivileged BPF by default
   Depends on: BPF_SYSCALL [=y]
   Location:
     -> General setup
       -> BPF subsystem

---

Signed-off-by: Fedora Kernel Team <kernel-team(a)fedoraproject.org&gt;

---
 redhat/configs/common/generic/CONFIG_BPF_UNPRIV_DEFAULT_OFF         |   1 +
 redhat/configs/pending-common/generic/CONFIG_BPF_UNPRIV_DEFAULT_OFF |  20 ----------
 2 files changed, 1 insertions(+), 20 deletions(-)