Unprivileged eBPF Support In The Works For The Linux Kernel

Written by Michael Larabel in Linux Kernel on 6 October 2015 at 10:03 PM EDT. 2 Comments
In the past year or so there's been a lot to talk about when it comes to eBPF in the Linux kernel as an in-kernel virtual machine. The latest functionality being worked on is supporting eBPF for unprivileged users.

Alexei Starovoitov has published patches to "liberate eBPF from CAP_SYS_ADMIN" and takes care of work from its start to allow it to be used by non-root users.

However, not all users will be able to benefit from eBPF as non-root users. Alexei explained, "Unprivileged eBPF is only meaningful for 'socket filter'-like programs. eBPF programs for tracing and TC classifiers/actions will stay root only."

Those wishing to learn more can see this kernel mailing list post with the relevant patches.
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week