base-files: enable BPF JIT kallsyms by default
authorTony Ambardar <itugrok@yahoo.com>
Fri, 26 May 2023 08:41:18 +0000 (01:41 -0700)
committerHauke Mehrtens <hauke@hauke-m.de>
Fri, 2 Jun 2023 18:53:49 +0000 (20:53 +0200)
Set net.core.bpf_jit_kallsyms=1 in /etc/sysctl.d/10-default.conf.

For privileged users, this exports addresses of JIT-compiled programs to
appear in /proc/kallsyms when present, allowing their use for debugging
and in traces.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
package/base-files/files/etc/sysctl.d/10-default.conf

index bc8c57969514e62f60b78ac13e58bc7f40012111..ee7df2bfa61b85ea9a04717b986534ed3ecb0c6b 100644 (file)
@@ -9,6 +9,7 @@ fs.protected_hardlinks=1
 fs.protected_symlinks=1
 
 net.core.bpf_jit_enable=1
+net.core.bpf_jit_kallsyms=1
 
 net.ipv4.conf.default.arp_ignore=1
 net.ipv4.conf.all.arp_ignore=1