diff options
| author | Pablo Neira Ayuso | 2018-09-04 12:07:55 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2018-09-17 16:11:03 +0200 |
| commit | 0d704967f4a49cc2212350b3e4a8231f8b4283ed (patch) | |
| tree | 2c0f3f080856e140599b8bee959019f3e6a113b9 /net/netfilter/nf_tables_api.c | |
| parent | netfilter: ctnetlink: Support L3 protocol-filter on flush (diff) | |
| download | kernel-qcow2-linux-0d704967f4a49cc2212350b3e4a8231f8b4283ed.tar.gz kernel-qcow2-linux-0d704967f4a49cc2212350b3e4a8231f8b4283ed.tar.xz kernel-qcow2-linux-0d704967f4a49cc2212350b3e4a8231f8b4283ed.zip | |
netfilter: xt_cgroup: shrink size of v2 path
cgroup v2 path field is PATH_MAX which is too large, this is placing too
much pressure on memory allocation for people with many rules doing
cgroup v1 classid matching, side effects of this are bug reports like:
https://bugzilla.kernel.org/show_bug.cgi?id=200639
This patch registers a new revision that shrinks the cgroup path to 512
bytes, which is the same approach we follow in similar extensions that
have a path field.
Cc: Tejun Heo <tj@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Tejun Heo <tj@kernel.org>
Diffstat (limited to 'net/netfilter/nf_tables_api.c')
0 files changed, 0 insertions, 0 deletions