Description
Provides a library for loading eBPF programs and reading or manipulating eBPF objects from user space. It is used by tracing, networking, observability, and security tools built around eBPF.
Most users receive it as a dependency. Developers and administrators use it when building or running tools that inspect kernel behavior through eBPF, which can require elevated privileges.