sys-kernel: enable CONFIG_BPF_JIT_ALWAYS_ON

CONFIG_BPF_JIT_ALWAYS_ON enables BPF JIT and removes BPF interpreter
to avoid speculative execution of BPF instructions by the interpreter.

See also https://github.com/kinvolk/Flatcar/issues/185.
This commit is contained in:
Dongsu Park 2020-11-17 14:12:23 +01:00
parent 20712d803b
commit 50fdab4387

View File

@ -50,6 +50,7 @@ CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC=y
CONFIG_BOOT_PRINTK_DELAY=y
CONFIG_BPF_EVENTS=y
CONFIG_BPF_JIT=y
CONFIG_BPF_JIT_ALWAYS_ON=y
CONFIG_BPF_SYSCALL=y
CONFIG_BRIDGE=m
CONFIG_BRIDGE_EBT_802_3=m