diff options
author | Daniel Xu <dxu@dxuuu.xyz> | 2022-09-07 19:40:40 +0300 |
---|---|---|
committer | Alexei Starovoitov <ast@kernel.org> | 2022-09-11 03:27:32 +0300 |
commit | 864b656f82ccd433d3e38149c3673d295ad64bf6 (patch) | |
tree | 1c4c3a628e740c3657756f4b8bc7c440bd948c84 /security/lockdown | |
parent | 84c6ac417ceacd086efc330afece8922969610b7 (diff) | |
download | linux-864b656f82ccd433d3e38149c3673d295ad64bf6.tar.xz |
bpf: Add support for writing to nf_conn:mark
Support direct writes to nf_conn:mark from TC and XDP prog types. This
is useful when applications want to store per-connection metadata. This
is also particularly useful for applications that run both bpf and
iptables/nftables because the latter can trivially access this metadata.
One example use case would be if a bpf prog is responsible for advanced
packet classification and iptables/nftables is later used for routing
due to pre-existing/legacy code.
Signed-off-by: Daniel Xu <dxu@dxuuu.xyz>
Link: https://lore.kernel.org/r/ebca06dea366e3e7e861c12f375a548cc4c61108.1662568410.git.dxu@dxuuu.xyz
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Diffstat (limited to 'security/lockdown')
0 files changed, 0 insertions, 0 deletions