| commit | 69191754ff299a64575003d9e2a79db190d27115 | [log] [tgz] |
|---|---|---|
| author | KP Singh <kpsingh@google.com> | Thu Mar 05 21:49:55 2020 +0100 |
| committer | Alexei Starovoitov <ast@kernel.org> | Thu Mar 05 14:27:22 2020 -0800 |
| tree | 7eca4e53a82b517dba3d314bdbacbd1e4e44f160 | |
| parent | dad737c926b5b286b9c91abbda66811a8a6618e9 [diff] |
bpf: Remove unnecessary CAP_MAC_ADMIN check
While well intentioned, checking CAP_MAC_ADMIN for attaching
BPF_MODIFY_RETURN tracing programs to "security_" functions is not
necessary as tracing BPF programs already require CAP_SYS_ADMIN.
Fixes: 6ba43b761c41 ("bpf: Attachment verification for BPF_MODIFY_RETURN")
Signed-off-by: KP Singh <kpsingh@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/20200305204955.31123-1-kpsingh@chromium.org