Re: [PATCH v1 bpf-next/net 2/8] bpf: Add a bpf hook in __inet_accept().
From: Martin KaFai Lau <martin.lau@linux.dev>
Date: 2025-08-25 17:57:43
Also in:
bpf
On 8/22/25 3:17 PM, Kuniyuki Iwashima wrote:
quoted hunk ↗ jump to hunk
diff --git a/net/ipv4/af_inet.c b/net/ipv4/af_inet.c index ae83ecda3983..ab613abdfaa4 100644 --- a/net/ipv4/af_inet.c +++ b/net/ipv4/af_inet.c@@ -763,6 +763,8 @@ void __inet_accept(struct socket *sock, struct socket *newsock, struct sock *new kmem_cache_charge(newsk, gfp); } + BPF_CGROUP_RUN_PROG_INET_SOCK_ACCEPT(newsk); + if (mem_cgroup_sk_enabled(newsk)) { int amt;diff --git a/tools/include/uapi/linux/bpf.h b/tools/include/uapi/linux/bpf.h index 233de8677382..80df246d4741 100644 --- a/tools/include/uapi/linux/bpf.h +++ b/tools/include/uapi/linux/bpf.h@@ -1133,6 +1133,7 @@ enum bpf_attach_type { BPF_NETKIT_PEER, BPF_TRACE_KPROBE_SESSION, BPF_TRACE_UPROBE_SESSION, + BPF_CGROUP_INET_SOCK_ACCEPT,
Instead of adding another hook, can the SK_BPF_MEMCG_SOCK_ISOLATED bit be inherited from the listener?