enable BPF JIT hardening by default (if available)

anthraxx · thestinger · commit 2db4dcdee8ea · 2018-05-26T15:03:49.000-04:00
diff --git a/kernel/bpf/core.c b/kernel/bpf/core.c
@@ -539,7 +539,7 @@ void __weak bpf_jit_free(struct bpf_prog *fp)
 	bpf_prog_unlock_free(fp);
 }
 
-int bpf_jit_harden __read_mostly;
+int bpf_jit_harden __read_mostly = 2;
 
 static int bpf_jit_blind_insn(const struct bpf_insn *from,
 			      const struct bpf_insn *aux,

Original file line number	Diff line number	Diff line change
`@@ -539,7 +539,7 @@ void __weak bpf_jit_free(struct bpf_prog *fp)`
`539`	`539`	`bpf_prog_unlock_free(fp);`
`540`	`540`	`}`
`541`	`541`
`542`		`-int bpf_jit_harden __read_mostly;`
	`542`	`+int bpf_jit_harden __read_mostly = 2;`
`543`	`543`
`544`	`544`	`static int bpf_jit_blind_insn(const struct bpf_insn *from,`
`545`	`545`	`const struct bpf_insn *aux,`