Martin KaFai Lau 4a482f34af cgroup: bpf: Add bpf_skb_in_cgroup_proto ... Adds a bpf helper, bpf_skb_in_cgroup, to decide if a skb->sk belongs to a descendant of a cgroup2. It is similar to the feature added in netfilter: commit c38c4597e4 ("netfilter: implement xt_cgroup cgroup2 path match") The user is expected to populate a BPF_MAP_TYPE_CGROUP_ARRAY which will be used by the bpf_skb_in_cgroup. Modifications to the bpf verifier is to ensure BPF_MAP_TYPE_CGROUP_ARRAY and bpf_skb_in_cgroup() are always used together. Signed-off-by: Martin KaFai Lau <kafai@fb.com> Cc: Alexei Starovoitov <ast@fb.com> Cc: Daniel Borkmann <daniel@iogearbox.net> Cc: Tejun Heo <tj@kernel.org> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2016-07-01 16:32:13 -04:00
..
Makefile	…
arraymap.c	cgroup: bpf: Add BPF_MAP_TYPE_CGROUP_ARRAY	2016-07-01 16:30:38 -04:00
core.c	bpf: minor cleanups on fd maps and helpers	2016-06-30 05:54:40 -04:00
hashtab.c	…
helpers.c	bpf: don't use raw processor id in generic helper	2016-06-30 05:54:40 -04:00
inode.c	…
percpu_freelist.c	…
percpu_freelist.h	…
stackmap.c	…
syscall.c	cgroup: bpf: Add BPF_MAP_TYPE_CGROUP_ARRAY	2016-07-01 16:30:38 -04:00
verifier.c	cgroup: bpf: Add bpf_skb_in_cgroup_proto	2016-07-01 16:32:13 -04:00