1 files changed, 2 insertions, 0 deletions

diff --git a/kernel/bpf/syscall.c b/kernel/bpf/syscall.c
index c28524483bf4..97a825ffc763 100644
--- a/kernel/bpf/syscall.c
+++ b/kernel/bpf/syscall.c
@@ -1504,6 +1504,8 @@ static int bpf_prog_test_run(const union bpf_attr *attr,
         struct bpf_prog *prog;
         int ret = -ENOTSUPP;
 
+        if (!capable(CAP_SYS_ADMIN))
+                return -EPERM;
         if (CHECK_ATTR(BPF_PROG_TEST_RUN))
                 return -EINVAL;