lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Mon, 14 Sep 2020 13:52:24 -0700
From:   Song Liu <>
To:     Nicolas Rybowski <>
Cc:     Mat Martineau <>,
        Matthieu Baerts <>,
        "David S. Miller" <>,
        Jakub Kicinski <>,
        Alexei Starovoitov <>,
        Daniel Borkmann <>,
        Martin KaFai Lau <>,
        Song Liu <>, Yonghong Song <>,
        Andrii Nakryiko <>,
        John Fastabend <>,
        KP Singh <>,
        Paolo Abeni <>,
        Networking <>,,
        open list <>,
        bpf <>
Subject: Re: [PATCH bpf-next v2 2/5] mptcp: attach subflow socket to parent cgroup

On Fri, Sep 11, 2020 at 9:43 AM Nicolas Rybowski
<> wrote:
> It has been observed that the kernel sockets created for the subflows
> (except the first one) are not in the same cgroup as their parents.
> That's because the additional subflows are created by kernel workers.
> This is a problem with eBPF programs attached to the parent's
> cgroup won't be executed for the children. But also with any other features
> of CGroup linked to a sk.
> This patch fixes this behaviour.
> As the subflow sockets are created by the kernel, we can't use
> 'mem_cgroup_sk_alloc' because of the current context being the one of the
> kworker. This is why we have to do low level memcg manipulation, if
> required.
> Suggested-by: Matthieu Baerts <>
> Suggested-by: Paolo Abeni <>
> Acked-by: Matthieu Baerts <>
> Reviewed-by: Mat Martineau <>
> Signed-off-by: Nicolas Rybowski <>

Acked-by: Song Liu <>


Powered by blists - more mailing lists