diff options
author | Daniel Borkmann | 2015-07-15 14:21:42 +0200 |
---|---|---|
committer | David S. Miller | 2015-07-20 21:41:30 +0200 |
commit | 8d20aabe1c76cccac544d9fcc3ad7823d9e98a2d (patch) | |
tree | be182dc2e3829040518d72c41363ffec458f1245 /kernel/backtracetest.c | |
parent | cls_cgroup: factor out classid retrieval (diff) | |
download | kernel-qcow2-linux-8d20aabe1c76cccac544d9fcc3ad7823d9e98a2d.tar.gz kernel-qcow2-linux-8d20aabe1c76cccac544d9fcc3ad7823d9e98a2d.tar.xz kernel-qcow2-linux-8d20aabe1c76cccac544d9fcc3ad7823d9e98a2d.zip |
ebpf: add helper to retrieve net_cls's classid cookie
It would be very useful to retrieve the net_cls's classid from an eBPF
program to allow for a more fine-grained classification, it could be
directly used or in conjunction with additional policies. I.e. docker,
but also tooling such as cgexec, can easily run applications via net_cls
cgroups:
cgcreate -g net_cls:/foo
echo 42 > foo/net_cls.classid
cgexec -g net_cls:foo <prog>
Thus, their respecitve classid cookie of foo can then be looked up on
the egress path to apply further policies. The helper is desigend such
that a non-zero value returns the cgroup id.
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Cc: Thomas Graf <tgraf@suug.ch>
Acked-by: Alexei Starovoitov <ast@plumgrid.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'kernel/backtracetest.c')
0 files changed, 0 insertions, 0 deletions