linux/Documentation/bpf
Stanislav Fomichev a11c397c43 bpf/flow_dissector: add mode to enforce global BPF flow dissector
Always use init_net flow dissector BPF program if it's attached and fall
back to the per-net namespace one. Also, deny installing new programs if
there is already one attached to the root namespace.
Users can still detach their BPF programs, but can't attach any
new ones (-EEXIST).

Cc: Petar Penkov <ppenkov@google.com>
Acked-by: Andrii Nakryiko <andriin@fb.com>
Acked-by: Song Liu <songliubraving@fb.com>
Signed-off-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2019-10-07 20:16:33 -07:00
..
bpf_design_QA.rst bpf: doc: update answer for 32-bit subregister question 2019-05-31 17:07:13 -07:00
bpf_devel_QA.rst docs: Update references to netdev-FAQ 2018-07-26 21:27:54 -07:00
btf.rst Linux 5.2-rc4 2019-06-14 14:18:53 -06:00
index.rst bpf: add sockopt documentation 2019-06-27 15:25:17 -07:00
prog_cgroup_sockopt.rst bpf: add sockopt documentation 2019-06-27 15:25:17 -07:00
prog_cgroup_sysctl.rst bpf: Document BPF_PROG_TYPE_CGROUP_SYSCTL 2019-04-18 16:05:36 -07:00
prog_flow_dissector.rst bpf/flow_dissector: add mode to enforce global BPF flow dissector 2019-10-07 20:16:33 -07:00