bpf_jit_harden

file: /proc/sys/net/core/bpf_jit_harden
variable: net.core.bpf_jit_harden
Official reference

This enables hardening for the BPF JIT compiler. Supported are eBPF JIT backends. Enabling hardening trades off performance, but can mitigate JIT spraying. Values : 0 - disable JIT hardening (default value) 1 - enable JIT hardening for unprivileged users only 2 - enable JIT hardening for all users

source

Last update: 2018-12-09 18:93:01 UTC

Sysctl Explorer is available under the GPL-2.0.
Kernel documentation © the Linux kernel authors.
Linux® is a registered trademark of Linus Torvalds.