1. 18 6月, 2020 1 次提交
  2. 10 6月, 2020 1 次提交
  3. 22 5月, 2020 2 次提交
  4. 02 5月, 2020 1 次提交
  5. 01 5月, 2020 3 次提交
  6. 29 4月, 2020 3 次提交
  7. 28 4月, 2020 1 次提交
  8. 23 4月, 2020 1 次提交
  9. 14 4月, 2020 1 次提交
    • O
      device_cgroup: Cleanup cgroup eBPF device filter code · eec8fd02
      Odin Ugedal 提交于
      Original cgroup v2 eBPF code for filtering device access made it
      possible to compile with CONFIG_CGROUP_DEVICE=n and still use the eBPF
      filtering. Change
      commit 4b7d4d45 ("device_cgroup: Export devcgroup_check_permission")
      reverted this, making it required to set it to y.
      
      Since the device filtering (and all the docs) for cgroup v2 is no longer
      a "device controller" like it was in v1, someone might compile their
      kernel with CONFIG_CGROUP_DEVICE=n. Then (for linux 5.5+) the eBPF
      filter will not be invoked, and all processes will be allowed access
      to all devices, no matter what the eBPF filter says.
      Signed-off-by: NOdin Ugedal <odin@ugedal.com>
      Acked-by: NRoman Gushchin <guro@fb.com>
      Signed-off-by: NTejun Heo <tj@kernel.org>
      eec8fd02
  10. 02 4月, 2020 1 次提交
  11. 19 3月, 2020 1 次提交
  12. 11 3月, 2020 2 次提交
  13. 07 3月, 2020 2 次提交
  14. 05 3月, 2020 1 次提交
  15. 29 2月, 2020 2 次提交
  16. 27 2月, 2020 7 次提交
  17. 13 2月, 2020 2 次提交
  18. 07 2月, 2020 1 次提交
  19. 04 2月, 2020 1 次提交
  20. 17 1月, 2020 4 次提交
  21. 10 1月, 2020 1 次提交
  22. 08 1月, 2020 1 次提交