diff options
| author | Daniel Mack <daniel@zonque.org> | 2016-11-23 16:52:25 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-11-25 16:25:52 -0500 |
| commit | 0e33661de493db325435d565a4a722120ae4cbf3 (patch) | |
| tree | d8f41dacce4f7c1d5305ad962a6407941ef1d9d5 /net/netfilter/nft_counter.c | |
| parent | 619228d86b0e32e00758dcf07ca5d06903d9a9d7 (diff) | |
bpf: add new prog type for cgroup socket filtering
This program type is similar to BPF_PROG_TYPE_SOCKET_FILTER, except that
it does not allow BPF_LD_[ABS|IND] instructions and hooks up the
bpf_skb_load_bytes() helper.
Programs of this type will be attached to cgroups for network filtering
and accounting.
Signed-off-by: Daniel Mack <daniel@zonque.org>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/netfilter/nft_counter.c')
0 files changed, 0 insertions, 0 deletions