netdev - Re: [PATCH net-next 2/2] samples, bpf: Add automated test for cgroup filter attachments

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20161202181848.GB54949@ast-mbp.thefacebook.com>
Date:   Fri, 2 Dec 2016 10:18:50 -0800
From:   Alexei Starovoitov <alexei.starovoitov@...il.com>
To:     Sargun Dhillon <sargun@...gun.me>
Cc:     netdev@...r.kernel.org, daniel@...que.org, ast@...com
Subject: Re: [PATCH net-next 2/2] samples, bpf: Add automated test for cgroup
 filter attachments

On Fri, Dec 02, 2016 at 02:42:32AM -0800, Sargun Dhillon wrote:
> This patch adds the sample program test_cgrp2_attach2. This program is
> similar to test_cgrp2_attach, but it performs automated testing of the
> cgroupv2 BPF attached filters. It runs the following checks:
> * Simple filter attachment
> * Application of filters to child cgroups
> * Overriding filters on child cgroups
> 	* Checking that this still works when the parent filter is removed
> 
> The filters that are used here are simply allow all / deny all filters, so
> it isn't checking the actual functionality of the filters, but rather
> the behaviour  around detachment / attachment. If net_cls is enabled,
> this test will fail.
> 
> Signed-off-by: Sargun Dhillon <sargun@...gun.me>

Nice. Thanks for the test!
Acked-by: Alexei Starovoitov <ast@...nel.org>