From: Daniel Borkmann <dan...@iogearbox.net> Date: Fri, 2 Oct 2015 15:17:33 +0200
> The current ongoing effort to dump existing cBPF seccomp filters back > to user space requires to hold the pre-transformed instructions like > we do in case of socket filters from sk_attach_filter() side, so they > can be reloaded in original form at a later point in time by utilities > such as criu. > > To prepare for this, simply extend the bpf_prog_create_from_user() > API to hold a flag that tells whether we should store the original > or not. Also, fanout filters could make use of that in future for > things like diag. While fanout filters already use bpf_prog_destroy(), > move seccomp over to them as well to handle original programs when > present. > > Signed-off-by: Daniel Borkmann <dan...@iogearbox.net> Applied, thanks Daniel. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
