On Wed, Aug 17, 2016 at 04:36:02PM +0200, Daniel Mack wrote: > On 08/17/2016 04:23 PM, Tejun Heo wrote: > > On Wed, Aug 17, 2016 at 04:00:47PM +0200, Daniel Mack wrote: > >> @@ -78,6 +116,12 @@ int sk_filter_trim_cap(struct sock *sk, struct sk_buff > >> *skb, unsigned int cap) > >> if (skb_pfmemalloc(skb) && !sock_flag(sk, SOCK_MEMALLOC)) > >> return -ENOMEM; > >> > >> +#ifdef CONFIG_CGROUP_BPF > >> + err = sk_filter_cgroup_bpf(sk, skb, BPF_ATTACH_TYPE_CGROUP_INGRESS); > >> + if (err) > >> + return err; > >> +#endif > > > > Hmm... where does egress hook into? > > As stated in the cover letter, that's an open question on my list.
lol sorry about that. :) -- tejun
