summaryrefslogtreecommitdiffstats
path: root/net/netfilter/nf_tables_api.c
diff options
context:
space:
mode:
authorPablo Neira Ayuso2018-09-04 12:07:55 +0200
committerPablo Neira Ayuso2018-09-17 16:11:03 +0200
commit0d704967f4a49cc2212350b3e4a8231f8b4283ed (patch)
tree2c0f3f080856e140599b8bee959019f3e6a113b9 /net/netfilter/nf_tables_api.c
parentnetfilter: ctnetlink: Support L3 protocol-filter on flush (diff)
downloadkernel-qcow2-linux-0d704967f4a49cc2212350b3e4a8231f8b4283ed.tar.gz
kernel-qcow2-linux-0d704967f4a49cc2212350b3e4a8231f8b4283ed.tar.xz
kernel-qcow2-linux-0d704967f4a49cc2212350b3e4a8231f8b4283ed.zip
netfilter: xt_cgroup: shrink size of v2 path
cgroup v2 path field is PATH_MAX which is too large, this is placing too much pressure on memory allocation for people with many rules doing cgroup v1 classid matching, side effects of this are bug reports like: https://bugzilla.kernel.org/show_bug.cgi?id=200639 This patch registers a new revision that shrinks the cgroup path to 512 bytes, which is the same approach we follow in similar extensions that have a path field. Cc: Tejun Heo <tj@kernel.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Acked-by: Tejun Heo <tj@kernel.org>
Diffstat (limited to 'net/netfilter/nf_tables_api.c')
0 files changed, 0 insertions, 0 deletions