On Wed, Sep 18, 2019 at 8:13 AM Jinshan Xiong <jinshan.xi...@uber.com> wrote: > > The problem with the current approach is that it would be difficult to filter > cgroup, especially the cgroup in question has descendents, and also it would > spawn new descendents after BPF program is installed. it's hard to filter it > inside a BPF program.
Why is that? bpf_current_task_under_cgroup() fits exactly that purpose.
