Merge branch 'eBPF-based-device-cgroup-controller'

Browse source

Roman Gushchin says:

====================
eBPF-based device cgroup controller

This patchset introduces an eBPF-based device controller for cgroup v2.

Patches (1) and (2) are a preparational work required to share some code
  with the existing device controller implementation.
Patch (3) is the main patch, which introduces a new bpf prog type
  and all necessary infrastructure.
Patch (4) moves cgroup_helpers.c/h to use them by patch (4).
Patch (5) implements an example of eBPF program which controls access
  to device files and corresponding userspace test.

v3:
  Renamed constants introduced by patch (3) to BPF_DEVCG_*

v2:
  Added patch (1).

v1:
  https://lkml.org/lkml/2017/11/1/363
====================

Signed-off-by: David S. Miller <davem@davemloft.net>

...

This commit is contained in:

David S. Miller 2017-11-05 23:26:51 +09:00

parent 488e5b30d3 37f1ba0909

commit 2798b80b38

17 changed files with 564 additions and 271 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

15

include/linux/bpf-cgroup.h

View file

3

include/linux/bpf_types.h

View file

67

include/linux/device_cgroup.h

View file

15

include/uapi/linux/bpf.h

View file

67

kernel/bpf/cgroup.c

View file

7

kernel/bpf/syscall.c

View file

1

kernel/bpf/verifier.c

View file

5

samples/bpf/Makefile

View file

91

security/device_cgroup.c

View file

15

tools/include/uapi/linux/bpf.h

View file

6

tools/testing/selftests/bpf/Makefile

View file

0

samples/bpf/cgroup_helpers.c → tools/testing/selftests/bpf/cgroup_helpers.c

View file

0

samples/bpf/cgroup_helpers.h → tools/testing/selftests/bpf/cgroup_helpers.h

View file

60

tools/testing/selftests/bpf/dev_cgroup.c

View file

93

tools/testing/selftests/bpf/test_dev_cgroup.c

View file