netdev - Re: [PATCH v2 bpf-next 0/4] bpf_skb_ancestor_cgroup

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Mon, 13 Aug 2018 01:23:43 +0200
From:   Daniel Borkmann <daniel@...earbox.net>
To:     Andrey Ignatov <rdna@...com>, netdev@...r.kernel.org
Cc:     ast@...nel.org, tj@...nel.org, guro@...com, yhs@...com,
        kernel-team@...com
Subject: Re: [PATCH v2 bpf-next 0/4] bpf_skb_ancestor_cgroup_id helper

On 08/12/2018 07:49 PM, Andrey Ignatov wrote:
> v1->v2:
> - more reliable check for testing IPv6 to become ready in selftest.
> 
> This patch set adds new BPF helper bpf_skb_ancestor_cgroup_id that returns
> id of cgroup v2 that is ancestor of cgroup associated with the skb at the
> ancestor_level.
> 
> The helper is useful to implement policies in TC based on cgroups that are
> upper in hierarchy than immediate cgroup associated with skb.
> 
> Patch 0001 provides more details and describes use-cases.
> Patch 0002 syncs UAPI changes to tools/.
> Patch 0003 adds skb*cgroup_id helpers to bpf_helper.h header.
> Patch 0004 adds selftest for the new helper and is an example of usage.
> 
> 
> Andrey Ignatov (4):
>   bpf: Introduce bpf_skb_ancestor_cgroup_id helper
>   bpf: Sync bpf.h to tools/
>   selftests/bpf: Add cgroup id helpers to bpf_helpers.h
>   selftests/bpf: Selftest for bpf_skb_ancestor_cgroup_id

Applied to bpf-next, thanks Andrey!