Re: [PATCHSET v2] netfilter, cgroup: implement xt_cgroup2 match

From
David Miller <hidden>
Date
2015-11-20 18:59:19
Also in
cgroups, lkml, netfilter-devel
Reply to
Tejun Heo, 2015-11-19
From: Tejun Heo <redacted>
Date: Thu, 19 Nov 2015 13:52:44 -0500
This is the second take of the xt_cgroup2 patchset.  Changes from the
last take are

* Instead of adding sock->sk_cgroup separately, sock->sk_cgrp_data now
  carries either (prioidx, classid) pair or cgroup2 pointer.  This
  avoids inflating struct sock with yet another cgroup related field.
  Unfortunately, this does add some complexity but that's the
  trade-off and the complexity is contained in cgroup proper.

* Various small updats as per David and Jan's reviews.
I like this a lot better, thanks.

Please address Daniel's feedback on patch #6 and then I'm personally
fine with this series.

Pablo, are you ok with me merging this into net-next directly or
would you rather I take patches 1-6 into net-next and then you can
merge and then add patch #7 on top?

Thanks.
Thread (20 messages) 20 messages, 5 authors, last reply 2015-11-20
Keyboard shortcuts
hback out one level
jnext message in thread / next series-diff position
kprevious message in thread / previous series-diff position
ldrill in
Escclose help / fold thread tree
?toggle this help