hi > -----Original Message----- > From: netdev-ow...@vger.kernel.org [mailto:netdev-ow...@vger.kernel.org] > On Behalf Of Chenbo Feng > Sent: Thursday, June 01, 2017 2:07 AM > To: netdev@vger.kernel.org; David Miller > Cc: Lorenzo Colitti; Chenbo Feng > Subject: [PATCH net-next 2/2] bpf: Remove the capability check for cgroup skb > eBPF program > - if (type != BPF_PROG_TYPE_SOCKET_FILTER > && !capable(CAP_SYS_ADMIN)) > + if (type != BPF_PROG_TYPE_SOCKET_FILTER > + && type != BPF_PROG_TYPE_CGROUP_SKB > + && !capable(CAP_SYS_ADMIN))
checkpatch.pl prefer put && at end of line > return -EPERM; > > /* plain bpf_prog allocation */ > -- > 2.7.4
