On Thu, Apr 27, 2017 at 6:17 AM, Hannes Frederic Sowa <han...@stressinduktion.org> wrote: > > cap_sys_admin influences the verifier a lot in terms which programs are > accepted and which are not. So during investigations it might be even > interesting if the bpf program required those special flags or if the > same program could be loaded just as underprivileged.
there are bunch of other things that influence verifier. should we add all of them ? there is prog->aux->user which is more than enough for debugging.
