Re: [PATCH v7 net-next 2/6] bpf: Add new cgroup attach type to enable sock modifications

2016-12-01 Thread Alexei Starovoitov
On Thu, Dec 01, 2016 at 08:48:04AM -0800, David Ahern wrote: > Add new cgroup based program type, BPF_PROG_TYPE_CGROUP_SOCK. Similar to > BPF_PROG_TYPE_CGROUP_SKB programs can be attached to a cgroup and run > any time a process in the cgroup opens an AF_INET or AF_INET6 socket. > Currently only sk

[PATCH v7 net-next 2/6] bpf: Add new cgroup attach type to enable sock modifications

2016-12-01 Thread David Ahern
Add new cgroup based program type, BPF_PROG_TYPE_CGROUP_SOCK. Similar to BPF_PROG_TYPE_CGROUP_SKB programs can be attached to a cgroup and run any time a process in the cgroup opens an AF_INET or AF_INET6 socket. Currently only sk_bound_dev_if is exported to userspace for modification by a bpf prog