Re: [PATCH v5 0/6] Add eBPF hooks for cgroups

 ❦ 12 septembre 2016 18:12 CEST, Daniel Mack [off-list ref] :

* The sample program learned to support both ingress and egress, and
  can now optionally make the eBPF program drop packets by making it
  return 0.

Ability to lock the eBPF program to avoid modification from a later
program or in a subcgroup would be pretty interesting from a security
perspective.
-- 
Use recursive procedures for recursively-defined data structures.
            - The Elements of Programming Style (Kernighan & Plauger)