bpf: introduce BPF_JIT_ALWAYS_ON config

[sagit-ice-cold/kernel_xiaomi_msm8998.git] / init / Kconfig

diff --git a/init/Kconfig b/init/Kconfig
index 235c7a2..ef2f97d 100644 (file)
--- a/init/Kconfig
+++ b/init/Kconfig
@@ -1556,6 +1556,13 @@ config BPF_SYSCALL
          Enable the bpf() system call that allows to manipulate eBPF
          programs and maps via file descriptors.
 
+config BPF_JIT_ALWAYS_ON
+       bool "Permanently enable BPF JIT and remove BPF interpreter"
+       depends on BPF_SYSCALL && HAVE_EBPF_JIT && BPF_JIT
+       help
+         Enables BPF JIT and removes BPF interpreter to avoid
+         speculative execution of BPF instructions by the interpreter
+
 config SHMEM
        bool "Use full shmem filesystem" if EXPERT
        default y