Unprivileged eBPF Support In The Works For The Linux Kernel

[phoronix]

Phoronix: Unprivileged eBPF Support In The Works For The Linux Kernel

In the past year or so there's been a lot to talk about when it comes to eBPF in the Linux kernel as an in-kernel virtual machine. The latest functionality being worked on is supporting eBPF for unprivileged users...

http://www.phoronix.com/scan.php?page=news_item&px=Non-Root-eBPF-Patches

[SystemCrasher]

IMHO its a very questionable idea to allow unprivileged user to mess with kernel on such level. Even via VM. Sounds like a plan for multiple vulnerability vectors and ways to try to DoS system where you got unprivileged access, trying to bypass scheduling limits, etc.

[gilboa]

Unprivileged eBFP: What could possible go wrong.
... Hopefully this feature will come with a huge red "disable" button.

- Gilboa