Re: [PATCH v3 1/6] bpf: add new prog type for cgroup socket filtering

2016-09-05 Thread Daniel Mack
On 08/30/2016 12:14 AM, Daniel Borkmann wrote: > On 08/26/2016 09:58 PM, Daniel Mack wrote: >> For now, this program type is equivalent to BPF_PROG_TYPE_SOCKET_FILTER in >> terms of checks during the verification process. It may access the skb as >> well. >> >> Programs of this type will be

Re: [PATCH v3 1/6] bpf: add new prog type for cgroup socket filtering

2016-08-29 Thread Daniel Borkmann
On 08/26/2016 09:58 PM, Daniel Mack wrote: For now, this program type is equivalent to BPF_PROG_TYPE_SOCKET_FILTER in terms of checks during the verification process. It may access the skb as well. Programs of this type will be attached to cgroups for network filtering and accounting.

[PATCH v3 1/6] bpf: add new prog type for cgroup socket filtering

2016-08-26 Thread Daniel Mack
For now, this program type is equivalent to BPF_PROG_TYPE_SOCKET_FILTER in terms of checks during the verification process. It may access the skb as well. Programs of this type will be attached to cgroups for network filtering and accounting. Signed-off-by: Daniel Mack ---