Martin KaFai Lau 4a482f34af cgroup: bpf: Add bpf_skb_in_cgroup_proto ... Adds a bpf helper, bpf_skb_in_cgroup, to decide if a skb->sk belongs to a descendant of a cgroup2. It is similar to the feature added in netfilter: commit c38c4597e4 ("netfilter: implement xt_cgroup cgroup2 path match") The user is expected to populate a BPF_MAP_TYPE_CGROUP_ARRAY which will be used by the bpf_skb_in_cgroup. Modifications to the bpf verifier is to ensure BPF_MAP_TYPE_CGROUP_ARRAY and bpf_skb_in_cgroup() are always used together. Signed-off-by: Martin KaFai Lau <kafai@fb.com> Cc: Alexei Starovoitov <ast@fb.com> Cc: Daniel Borkmann <daniel@iogearbox.net> Cc: Tejun Heo <tj@kernel.org> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2016-07-01 16:32:13 -04:00
..
arraymap.c	cgroup: bpf: Add BPF_MAP_TYPE_CGROUP_ARRAY	2016-07-01 16:30:38 -04:00
core.c	bpf: minor cleanups on fd maps and helpers	2016-06-30 05:54:40 -04:00
hashtab.c	bpf: pre-allocate hash map elements	2016-03-08 15:28:31 -05:00
helpers.c	bpf: don't use raw processor id in generic helper	2016-06-30 05:54:40 -04:00
inode.c	bpf, inode: disallow userns mounts	2016-05-23 15:08:26 -07:00
Makefile	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
percpu_freelist.c	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
percpu_freelist.h	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
stackmap.c	Merge branch 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2016-05-25 17:05:40 -07:00
syscall.c	cgroup: bpf: Add BPF_MAP_TYPE_CGROUP_ARRAY	2016-07-01 16:30:38 -04:00
verifier.c	cgroup: bpf: Add bpf_skb_in_cgroup_proto	2016-07-01 16:32:13 -04:00