Roman Gushchin
ebc614f687
bpf, cgroup: implement eBPF-based device controller for cgroup v2
...
Cgroup v2 lacks the device controller, provided by cgroup v1.
This patch adds a new eBPF program type, which in combination
of previously added ability to attach multiple eBPF programs
to a cgroup, will provide a similar functionality, but with some
additional flexibility.
This patch introduces a BPF_PROG_TYPE_CGROUP_DEVICE program type.
A program takes major and minor device numbers, device type
(block/character) and access type (mknod/read/write) as parameters
and returns an integer which defines if the operation should be
allowed or terminated with -EPERM.
Signed-off-by: Roman Gushchin <guro@fb.com >
Acked-by: Alexei Starovoitov <ast@kernel.org >
Acked-by: Tejun Heo <tj@kernel.org >
Cc: Daniel Borkmann <daniel@iogearbox.net >
Signed-off-by: David S. Miller <davem@davemloft.net >
2017-11-05 23:26:51 +09:00
..
2017-11-05 23:26:51 +09:00
2017-11-04 09:26:51 +09:00
2017-08-22 18:43:23 -07:00
2017-03-02 08:42:34 +01:00
2017-11-04 09:26:51 +09:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-04 09:26:51 +09:00
2015-10-21 15:18:35 +01:00
2017-11-02 11:10:55 +01:00
2017-05-23 10:01:37 +02:00
2017-05-03 11:05:15 -07:00
2017-11-02 11:10:55 +01:00
2017-08-16 16:48:34 -07:00
2017-09-05 09:46:59 -04:00
2017-09-03 20:21:24 -04:00
2017-05-02 10:16:05 -04:00
2017-09-14 17:37:26 -07:00
2014-06-04 16:54:14 -07:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-07-15 20:46:47 -04:00
2016-12-24 11:46:01 -08:00
2015-11-24 09:56:43 +01:00
2017-07-31 13:09:49 +02:00
2017-10-21 16:11:30 +02:00
2017-07-12 16:26:00 -07:00
2014-08-25 15:42:19 -07:00
2017-05-18 10:30:19 -06:00
2017-03-02 08:42:39 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-10-20 15:32:54 -04:00
2017-09-23 16:50:20 -04:00
2017-10-13 16:18:33 -07:00
2016-07-28 16:07:41 -07:00
2017-11-02 11:10:55 +01:00
2017-11-02 07:41:50 -07:00
2017-11-02 11:10:55 +01:00
2017-05-08 17:15:10 -07:00
2015-11-23 09:44:58 +01:00
2017-08-10 12:28:59 +02:00
2017-07-10 16:32:34 -07:00
2017-11-02 11:10:55 +01:00
2008-10-20 08:52:34 -07:00
2016-10-25 11:31:51 +02:00
2017-11-02 11:10:55 +01:00
2017-07-18 11:38:04 +02:00
2017-07-12 16:26:02 -07:00
2017-11-02 11:10:55 +01:00
2017-07-12 16:26:00 -07:00
2017-09-08 18:26:51 -07:00
2017-07-08 11:05:35 +02:00
2017-07-12 16:25:59 -07:00
2017-08-31 16:33:15 -07:00
2017-03-02 08:42:39 +01:00
2017-11-02 11:10:55 +01:00
2017-10-03 17:54:25 -07:00
2016-04-11 22:43:43 +01:00
2013-09-25 17:17:01 +01:00
2017-07-25 15:08:32 +02:00
2017-02-24 17:46:56 -08:00
2017-03-13 15:57:41 -03:00
2017-05-26 10:10:37 +02:00
2017-08-17 10:40:26 +02:00
2017-10-03 17:54:26 -07:00
2017-07-20 07:43:58 -05:00
2017-08-21 12:47:31 -07:00
2017-03-02 08:42:39 +01:00
2017-07-24 14:30:28 -05:00
2017-11-02 11:10:55 +01:00
2015-09-10 13:29:01 -07:00
2017-05-02 11:38:06 -07:00
2016-04-14 12:56:09 -07:00
2017-11-02 11:10:55 +01:00
2017-11-01 17:04:57 -05:00
2017-09-08 18:26:48 -07:00
2017-10-04 10:53:54 +02:00
2017-11-02 11:10:55 +01:00
2017-04-11 09:06:32 +02:00
2017-03-08 09:18:02 +01:00
2017-05-26 10:10:36 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-10-06 08:36:41 -07:00
2017-11-02 11:10:55 +01:00
2017-05-08 17:15:12 -07:00
2017-07-25 13:04:45 -07:00
2017-03-02 08:42:35 +01:00
2017-03-02 08:42:39 +01:00
2017-03-06 15:26:37 -06:00
2017-11-02 11:10:55 +01:00
2017-09-08 18:26:50 -07:00
2017-08-29 15:14:38 +02:00
2017-07-20 07:43:58 -05:00
2017-03-02 08:42:29 +01:00
2017-03-03 01:45:36 +01:00
2017-03-02 08:42:38 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-10-10 07:13:57 -07:00