bpf_jit_harden 937 include/linux/filter.h extern int bpf_jit_harden; bpf_jit_harden 1000 include/linux/filter.h if (!bpf_jit_harden) bpf_jit_harden 1002 include/linux/filter.h if (bpf_jit_harden == 1 && capable(CAP_SYS_ADMIN)) bpf_jit_harden 1013 include/linux/filter.h if (bpf_jit_harden) bpf_jit_harden 522 kernel/bpf/core.c int bpf_jit_harden __read_mostly; bpf_jit_harden 403 net/core/sysctl_net_core.c .data = &bpf_jit_harden,