On 8/25/17 8:00 PM, Daniel Borkmann wrote: > Can you elaborate on the semantical changes for the programs > setting the new flag which are not using below cgroup_bpf_run_filter_sk() > helper to walk back to root?
You mean other cgroup based programs -- BPF_CGROUP_* ? If so, any reason not to allow the recursion model on those too?
