Systemd

picnoir/Systemd

Fork 0

Commit graph

Author	SHA1	Message	Date
Lennart Poettering	9f2e6892a2	bpf: set BPF_F_ALLOW_OVERRIDE when attaching a cgroup program if Delegate=yes is set Let's permit installing BPF programs in cgroup subtrees if Delegeate=yes. Let's not document this precise behaviour for now though, as most likely the logic here should become recursive, but that's only going to happen if the kernel starts supporting that. Until then, support this in a non-recursive fashion.	2017-09-22 15:28:05 +02:00
Daniel Mack	1988a9d120	Add firewall eBPF compiler	2017-09-22 15:24:55 +02:00

Author

SHA1

Message

Date

Lennart Poettering

9f2e6892a2

bpf: set BPF_F_ALLOW_OVERRIDE when attaching a cgroup program if Delegate=yes is set

Let's permit installing BPF programs in cgroup subtrees if
Delegeate=yes. Let's not document this precise behaviour for now though,
as most likely the logic here should become recursive, but that's only
going to happen if the kernel starts supporting that. Until then,
support this in a non-recursive fashion.

2017-09-22 15:28:05 +02:00

Daniel Mack

1988a9d120

Add firewall eBPF compiler

2017-09-22 15:24:55 +02:00

2 commits