This bug is missing log files that will aid in diagnosing the problem.
While running an Ubuntu kernel (not a mainline or third-party kernel)
please enter the following command in a terminal window:
apport-collect 1905975
and then change the status of the bug to 'Confirmed'.
If, due to the nature of the issue you have encountered, you are unable
to run this command, please add a comment stating that fact and change
the bug status to 'Confirmed'.
This change has been made by an automated script, maintained by the
Ubuntu Kernel Team.
** Changed in: linux (Ubuntu)
Status: New => Incomplete
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1905975
Title:
kernel: Enable CONFIG_BPF_LSM on Ubuntu
Status in linux package in Ubuntu:
Incomplete
Bug description:
== Impact ==
Enabling CONFIG_BPF_LSM in the KConfig of Ubuntu Kernels, allowing
users to use BPF LSM programs.
== Background ==
The BPF LSM was merged into the Linux kernel 5.7
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=641cd7b06c911c5935c34f24850ea18690649917
https://outflux.net/blog/archives/2020/09/21/security-things-in-
linux-v5-7
It allows users to implement MAC and Audit Policies using BPF
programs. As a follow-up from the interest generated by the LSM on
BPF/Linux conferences and on request from users, we’d like to request
the enabling of CONFIG_BPF_LSM on Ubuntu starting with H.
The LSM won't be added to the list of active LSMs by default (in
CONFIG_LSM or lsm= on the boot parameters) yet, as it adds an indirect
function call overhead by registering an empty LSM hook for all hooks.
However enabling it in the kernel config will support users who wish
to use BPF LSM programs without needing to replace their kernel image.
The LSM can be made "active" by default when our work on getting rid
of this overhead is merged in the kernel:
https://lore.kernel.org/bpf/[email protected]
== Regression Potential ==
None. The LSM is not active by default, so it does not have any
performance or functional regression.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1905975/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
