Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S933384AbcLTBed (ORCPT ); Mon, 19 Dec 2016 20:34:33 -0500 Received: from shards.monkeyblade.net ([184.105.139.130]:54554 "EHLO shards.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752796AbcLTBea (ORCPT ); Mon, 19 Dec 2016 20:34:30 -0500 Date: Mon, 19 Dec 2016 20:34:22 -0500 (EST) Message-Id: <20161219.203422.500916400463091702.davem@davemloft.net> To: alexei.starovoitov@gmail.com Cc: luto@kernel.org, daniel@zonque.org, mic@digikod.net, keescook@chromium.org, jann@thejh.net, tj@kernel.org, dsahern@gmail.com, tgraf@suug.ch, mtk.manpages@gmail.com, peterz@infradead.org, linux-api@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org Subject: Re: Potential issues (security and otherwise) with the current cgroup-bpf API From: David Miller In-Reply-To: <20161220000254.GA58895@ast-mbp.thefacebook.com> References: <20161219205631.GA31242@ast-mbp.thefacebook.com> <20161220000254.GA58895@ast-mbp.thefacebook.com> X-Mailer: Mew version 6.7 on Emacs 25.1 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (shards.monkeyblade.net [149.20.54.216]); Mon, 19 Dec 2016 16:35:09 -0800 (PST) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 259 Lines: 7 From: Alexei Starovoitov Date: Mon, 19 Dec 2016 16:02:56 -0800 > huh? 'not right api' because it's using bpf syscall instead > of cgroup control-file? I think the opposite is the truth. I completely agree with Alexei on this.