Files
linux/include/linux
Roman Gushchin ebc614f687 bpf, cgroup: implement eBPF-based device controller for cgroup v2
Cgroup v2 lacks the device controller, provided by cgroup v1.
This patch adds a new eBPF program type, which in combination
of previously added ability to attach multiple eBPF programs
to a cgroup, will provide a similar functionality, but with some
additional flexibility.

This patch introduces a BPF_PROG_TYPE_CGROUP_DEVICE program type.
A program takes major and minor device numbers, device type
(block/character) and access type (mknod/read/write) as parameters
and returns an integer which defines if the operation should be
allowed or terminated with -EPERM.

Signed-off-by: Roman Gushchin <guro@fb.com>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Tejun Heo <tj@kernel.org>
Cc: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-11-05 23:26:51 +09:00
..
2017-06-08 18:52:36 -07:00
2017-07-03 16:56:28 -06:00
2017-08-30 14:40:40 +02:00
2017-09-04 00:05:22 +02:00
2017-09-04 00:06:02 +02:00
2017-08-24 13:23:03 -07:00
2017-07-17 13:42:48 +02:00
2017-08-03 19:09:26 -07:00
2017-08-07 17:22:14 +02:00
2017-03-21 10:15:47 +02:00
2017-09-08 18:26:46 -07:00
2017-05-18 10:07:40 -04:00
2017-06-21 14:37:12 -04:00
2017-08-15 18:23:52 +02:00
2017-01-05 15:01:55 -06:00
2017-08-14 13:33:39 -07:00
2017-02-24 17:46:57 -08:00
2017-08-28 20:51:22 +02:00
2017-09-07 11:53:11 +02:00
2017-08-18 15:32:01 -07:00
2017-07-06 11:30:07 -04:00
2017-07-25 18:05:25 +02:00
2017-09-25 08:56:05 -06:00
2017-05-26 10:10:37 +02:00
2017-08-06 20:55:29 -07:00
2017-08-06 20:55:29 -07:00
2017-08-16 16:28:47 -07:00
2017-07-06 16:24:30 -07:00
2017-08-16 16:28:47 -07:00
2017-07-24 17:50:37 +02:00
2017-08-31 18:50:14 +02:00
2017-08-15 09:02:07 -07:00
2017-08-15 09:02:08 -07:00