On Fri, Oct 4, 2019 at 8:58 AM Stanislav Fomichev <s...@google.com> wrote: > > Always use init_net flow dissector BPF program if it's attached and fall > back to the per-net namespace one. Also, deny installing new programs if > there is already one attached to the root namespace. > Users can still detach their BPF programs, but can't attach any > new ones (-EEXIST). > > Cc: Petar Penkov <ppen...@google.com> > Signed-off-by: Stanislav Fomichev <s...@google.com>
Acked-by: Song Liu <songliubrav...@fb.com>
