Stanislav Fomichev a11c397c43 bpf/flow_dissector: add mode to enforce global BPF flow dissector ... Always use init_net flow dissector BPF program if it's attached and fall back to the per-net namespace one. Also, deny installing new programs if there is already one attached to the root namespace. Users can still detach their BPF programs, but can't attach any new ones (-EEXIST). Cc: Petar Penkov <ppenkov@google.com> Acked-by: Andrii Nakryiko <andriin@fb.com> Acked-by: Song Liu <songliubraving@fb.com> Signed-off-by: Stanislav Fomichev <sdf@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org>		2019-10-07 20:16:33 -07:00
..
bpf_design_QA.rst
bpf_devel_QA.rst
btf.rst
index.rst	bpf: add sockopt documentation	2019-06-27 15:25:17 -07:00
prog_cgroup_sockopt.rst	bpf: add sockopt documentation	2019-06-27 15:25:17 -07:00
prog_cgroup_sysctl.rst
prog_flow_dissector.rst	bpf/flow_dissector: add mode to enforce global BPF flow dissector	2019-10-07 20:16:33 -07:00