Subject: Re: [PATCH net-next 2/2] ebpf: add helper to retrieve net_cls's classid cookie

From: Alexei Starovoitov <[email-masked]>
Date: Wed, 15 Jul 2015 14:06:22 -0700

On 7/15/15 5:21 AM, Daniel Borkmann wrote:
> It would be very useful to retrieve the net_cls's classid from an eBPF
> program to allow for a more fine-grained classification, it could be
> directly used or in conjunction with additional policies. I.e. docker,
> but also tooling such as cgexec, can easily run applications via net_cls
> cgroups:
>
>    cgcreate -g net_cls:/foo
>    echo 42 > foo/net_cls.classid
>    cgexec -g net_cls:foo <prog>
>
> Thus, their respecitve classid cookie of foo can then be looked up on
> the egress path to apply further policies. The helper is desigend such
> that a non-zero value returns the cgroup id.
>
> Signed-off-by: Daniel Borkmann<[email-masked]>
> Cc: Thomas Graf<[email-masked]>

looks good to me.
Acked-by: Alexei Starovoitov <[email-masked]>