summaryrefslogtreecommitdiff
path: root/security/lockdown
diff options
context:
space:
mode:
authorDaniel Xu <dxu@dxuuu.xyz>2022-09-07 19:40:40 +0300
committerAlexei Starovoitov <ast@kernel.org>2022-09-11 03:27:32 +0300
commit864b656f82ccd433d3e38149c3673d295ad64bf6 (patch)
tree1c4c3a628e740c3657756f4b8bc7c440bd948c84 /security/lockdown
parent84c6ac417ceacd086efc330afece8922969610b7 (diff)
downloadlinux-864b656f82ccd433d3e38149c3673d295ad64bf6.tar.xz
bpf: Add support for writing to nf_conn:mark
Support direct writes to nf_conn:mark from TC and XDP prog types. This is useful when applications want to store per-connection metadata. This is also particularly useful for applications that run both bpf and iptables/nftables because the latter can trivially access this metadata. One example use case would be if a bpf prog is responsible for advanced packet classification and iptables/nftables is later used for routing due to pre-existing/legacy code. Signed-off-by: Daniel Xu <dxu@dxuuu.xyz> Link: https://lore.kernel.org/r/ebca06dea366e3e7e861c12f375a548cc4c61108.1662568410.git.dxu@dxuuu.xyz Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Diffstat (limited to 'security/lockdown')
0 files changed, 0 insertions, 0 deletions