Re: [RFC PATCH 4/5] net: filter: run cgroup eBPF programs

[Tejun Heo]

On Wed, Aug 17, 2016 at 04:00:47PM +0200, Daniel Mack wrote:
> @@ -78,6 +116,12 @@ int sk_filter_trim_cap(struct sock *sk, struct sk_buff 
> *skb, unsigned int cap)
>       if (skb_pfmemalloc(skb) && !sock_flag(sk, SOCK_MEMALLOC))
>               return -ENOMEM;
>  
> +#ifdef CONFIG_CGROUP_BPF
> +     err = sk_filter_cgroup_bpf(sk, skb, BPF_ATTACH_TYPE_CGROUP_INGRESS);
> +     if (err)
> +             return err;
> +#endif

Hmm... where does egress hook into?

Thanks.

-- 
tejun