Re: [PATCHSET v2] netfilter, cgroup: implement xt_cgroup2 match
From: David Miller <hidden>
Date: 2015-11-20 18:59:19
Also in:
cgroups, lkml, netfilter-devel
From: David Miller <hidden>
Date: 2015-11-20 18:59:19
Also in:
cgroups, lkml, netfilter-devel
From: Tejun Heo <redacted> Date: Thu, 19 Nov 2015 13:52:44 -0500
This is the second take of the xt_cgroup2 patchset. Changes from the last take are * Instead of adding sock->sk_cgroup separately, sock->sk_cgrp_data now carries either (prioidx, classid) pair or cgroup2 pointer. This avoids inflating struct sock with yet another cgroup related field. Unfortunately, this does add some complexity but that's the trade-off and the complexity is contained in cgroup proper. * Various small updats as per David and Jan's reviews.
I like this a lot better, thanks. Please address Daniel's feedback on patch #6 and then I'm personally fine with this series. Pablo, are you ok with me merging this into net-next directly or would you rather I take patches 1-6 into net-next and then you can merge and then add patch #7 on top? Thanks.