Re: [PATCH net-next v6 6/6] samples/bpf: add userspace example for prohibiting sockets

2016-12-05 Thread David Ahern
On 12/5/16 3:51 AM, David Laight wrote: > You can at least improve the comment. I fixed the header files for v7.

RE: [PATCH net-next v6 6/6] samples/bpf: add userspace example for prohibiting sockets

2016-12-05 Thread David Laight
From: David Ahern > Sent: 01 December 2016 15:14 > On 11/30/16 10:59 PM, Alexei Starovoitov wrote: > > On Wed, Nov 30, 2016 at 10:16:50AM -0800, David Ahern wrote: > >> Add examples preventing a process in a cgroup from opening a socket > >> based family, protocol and type. > >> > >> Signed-off-by:

Re: [PATCH net-next v6 6/6] samples/bpf: add userspace example for prohibiting sockets

2016-12-01 Thread David Ahern
On 11/30/16 10:59 PM, Alexei Starovoitov wrote: > On Wed, Nov 30, 2016 at 10:16:50AM -0800, David Ahern wrote: >> Add examples preventing a process in a cgroup from opening a socket >> based family, protocol and type. >> >> Signed-off-by: David Ahern > ... >> +++ b/samples/bpf/sock_flags_kern.c >>

Re: [PATCH net-next v6 6/6] samples/bpf: add userspace example for prohibiting sockets

2016-11-30 Thread Alexei Starovoitov
On Wed, Nov 30, 2016 at 10:16:50AM -0800, David Ahern wrote: > Add examples preventing a process in a cgroup from opening a socket > based family, protocol and type. > > Signed-off-by: David Ahern ... > +++ b/samples/bpf/sock_flags_kern.c > @@ -0,0 +1,37 @@ > +#include > +#include > +#include "

[PATCH net-next v6 6/6] samples/bpf: add userspace example for prohibiting sockets

2016-11-30 Thread David Ahern
Add examples preventing a process in a cgroup from opening a socket based family, protocol and type. Signed-off-by: David Ahern --- v6 - new patch for version 6 samples/bpf/Makefile| 4 ++ samples/bpf/sock_flags_kern.c | 37 +++ samples/bpf/test_cgrp2_sock2.c | 6