- l += [SysctlCheck('self_protection', 'kspp', 'net.core.bpf_jit_harden', '2')]
+ # Use an omnipresent kconfig symbol to see if we have a kconfig file for checking
+ have_config_file = KconfigCheck('-', '-', 'LOCALVERSION', 'is present')
+
+ l += [OR(SysctlCheck('self_protection', 'kspp', 'net.core.bpf_jit_harden', '2'),
+ AND(KconfigCheck('-', '-', 'BPF_JIT', 'is not set'),
+ have_config_file))]