Disable Access to Network bpf() Syscall From Unprivileged Processes
Ubuntu 22.04
The 'kernel.unprivileged_bpf_disabled' kernel parameter should be set to the appropriate value in system configuration and system runtime.
Disable Access to Network bpf() Syscall From Unprivileged Processes
Ubuntu 22.04
The kernel 'kernel.unprivileged_bpf_disabled' parameter should be set to 1 or 2 in the system runtime.
kernel.unprivileged_bpf_disabled
1
2
Disable Access to Network bpf() Syscall From Unprivileged Processes
Ubuntu 22.04
The kernel 'kernel.unprivileged_bpf_disabled' parameter should be set to 1 or 2 in the system configuration.
object_static_etc_lib_sysctls_sysctl_kernel_unprivileged_bpf_disabled_accept_default
object_static_run_usr_local_sysctls_sysctl_kernel_unprivileged_bpf_disabled_accept_default
object_static_etc_sysctls_sysctl_kernel_unprivileged_bpf_disabled_accept_default
object_static_sysctl_sysctl_kernel_unprivileged_bpf_disabled_accept_default
object_static_etc_sysctld_sysctl_kernel_unprivileged_bpf_disabled_accept_default
object_static_usr_local_lib_sysctld_sysctl_kernel_unprivileged_bpf_disabled_accept_default
object_static_run_sysctld_sysctl_kernel_unprivileged_bpf_disabled_accept_default
/etc(/ufw){0,1}/sysctl.conf$
^[\s]*kernel.unprivileged_bpf_disabled[\s]*=[\s]*(.*\S)[\s]*$
1
/etc/sysctl.d
^.*\.conf$
^[\s]*kernel.unprivileged_bpf_disabled[\s]*=[\s]*(.*\S)[\s]*$
1
/run/sysctl.d
^.*\.conf$
^[\s]*kernel.unprivileged_bpf_disabled[\s]*=[\s]*(.*\S)[\s]*$
1
/usr/local/lib/sysctl.d
^.*\.conf$
^[\s]*kernel.unprivileged_bpf_disabled[\s]*=[\s]*(.*\S)[\s]*$
1
/usr/lib/sysctl.d
^.*\.conf$
^[\s]*kernel.unprivileged_bpf_disabled[\s]*=[\s]*(.*\S)[\s]*$
1
1
2