Daniel Borkmann 0f09abd105 bpf: Enable bpf cgroup hooks to retrieve cgroup v2 and ancestor id ... Enable the bpf_get_current_cgroup_id() helper for connect(), sendmsg(), recvmsg() and bind-related hooks in order to retrieve the cgroup v2 context which can then be used as part of the key for BPF map lookups, for example. Given these hooks operate in process context 'current' is always valid and pointing to the app that is performing mentioned syscalls if it's subject to a v2 cgroup. Also with same motivation of commit 7723628101 ("bpf: Introduce bpf_skb_ancestor_cgroup_id helper") enable retrieval of ancestor from current so the cgroup id can be used for policy lookups which can then forbid connect() / bind(), for example. Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/d2a7ef42530ad299e3cbb245e6c12374b72145ef.1585323121.git.daniel@iogearbox.net		2020-03-27 19:40:39 -07:00
..
asm	riscv, bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs	2019-12-19 16:03:31 +01:00
asm-generic	tools headers UAPI: Sync asm-generic/mman-common.h with the kernel	2020-02-12 10:53:06 -03:00
drm	tools headers UAPI: Sync drm/i915_drm.h with the kernel sources	2020-02-12 10:25:27 -03:00
linux	bpf: Enable bpf cgroup hooks to retrieve cgroup v2 and ancestor id	2020-03-27 19:40:39 -07:00
sound	tools include UAPI: Sync sound/asound.h copy	2020-02-12 11:04:23 -03:00