From: Alexei Starovoitov Date: Thu, 27 Jun 2019 22:25:17 +0000 (-0700) Subject: Merge branch 'bpf-sockopt-hooks' X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=2ec1899e99b4959bd2a46fd3993220e4f1a5397f;p=openwrt%2Fstaging%2Fblogic.git Merge branch 'bpf-sockopt-hooks' Stanislav Fomichev says: ==================== This series implements two new per-cgroup hooks: getsockopt and setsockopt along with a new sockopt program type. The idea is pretty similar to recently introduced cgroup sysctl hooks, but implementation is simpler (no need to convert to/from strings). What this can be applied to: * move business logic of what tos/priority/etc can be set by containers (either pass or reject) * handle existing options (or introduce new ones) differently by propagating some information in cgroup/socket local storage Compared to a simple syscall/{g,s}etsockopt tracepoint, those hooks are context aware. Meaning, they can access underlying socket and use cgroup and socket local storage. v9: * allow overwriting setsocktop arguments (Alexei Starovoitov) (see individual changes for more changelog details) ==================== Signed-off-by: Alexei Starovoitov --- 2ec1899e99b4959bd2a46fd3993220e4f1a5397f