On Wed, Aug 17, 2016 at 04:36:02PM +0200, Daniel Mack wrote:
On 08/17/2016 04:23 PM, Tejun Heo wrote:
quoted
On Wed, Aug 17, 2016 at 04:00:47PM +0200, Daniel Mack wrote:
quoted
@@ -78,6 +116,12 @@ int sk_filter_trim_cap(struct sock *sk, struct sk_buff *skb, unsigned int cap)
if (skb_pfmemalloc(skb) && !sock_flag(sk, SOCK_MEMALLOC))
return -ENOMEM;
+#ifdef CONFIG_CGROUP_BPF
+ err = sk_filter_cgroup_bpf(sk, skb, BPF_ATTACH_TYPE_CGROUP_INGRESS);
+ if (err)
+ return err;
+#endif
Hmm... where does egress hook into?
As stated in the cover letter, that's an open question on my list.
lol sorry about that. :)
--
tejun