| commit | 0e33661de493db325435d565a4a722120ae4cbf3 | [log] [tgz] |
|---|---|---|
| author | Daniel Mack <daniel@zonque.org> | Wed Nov 23 16:52:25 2016 +0100 |
| committer | David S. Miller <davem@davemloft.net> | Fri Nov 25 16:25:52 2016 -0500 |
| tree | d8f41dacce4f7c1d5305ad962a6407941ef1d9d5 | |
| parent | 619228d86b0e32e00758dcf07ca5d06903d9a9d7 [diff] |
bpf: add new prog type for cgroup socket filtering This program type is similar to BPF_PROG_TYPE_SOCKET_FILTER, except that it does not allow BPF_LD_[ABS|IND] instructions and hooks up the bpf_skb_load_bytes() helper. Programs of this type will be attached to cgroups for network filtering and accounting. Signed-off-by: Daniel Mack <daniel@zonque.org> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net>