On 08/17/2016 04:23 PM, Tejun Heo wrote: > On Wed, Aug 17, 2016 at 04:00:47PM +0200, Daniel Mack wrote: >> @@ -78,6 +116,12 @@ int sk_filter_trim_cap(struct sock *sk, struct sk_buff >> *skb, unsigned int cap) >> if (skb_pfmemalloc(skb) && !sock_flag(sk, SOCK_MEMALLOC)) >> return -ENOMEM; >> >> +#ifdef CONFIG_CGROUP_BPF >> + err = sk_filter_cgroup_bpf(sk, skb, BPF_ATTACH_TYPE_CGROUP_INGRESS); >> + if (err) >> + return err; >> +#endif > > Hmm... where does egress hook into?
As stated in the cover letter, that's an open question on my list. Thanks, Daniel
