Skip to content

Enable kernel config CONFIG_BPF_LSM for kernels >= 5.7 #343

@mauriciovasquezbernal

Description

@mauriciovasquezbernal

Current situation

CONFIG_BPF_LSM kernel config option is not set on Alpha and Beta channels that ship kernel >= 5.7.

Impact

It's not possible to use LSM hooks with eBPF in Flatcar.

Ideal future situation

CONFIG_BPF_LSM is enabled to make it possible to use LSM hooks with eBPF in Flatcar.

Additional information

This feature is important to implement some security features with eBPF like systemd/systemd#18145.

cc @iaguis

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions