On 10/7/15 11:21 PM, Ingo Molnar wrote:> so I see no reason why unprivileged eBPF couldn't have a sysctl too - with the> default value set to permissive.agreed. sent out v2 follows 'modules_disabled' style.