Subject: Re: [PATCH net-next v5 2/3] bpf: Add bpf_current_task_under_cgroup helper

From: Daniel Borkmann <[email-masked]>
Date: Fri, 12 Aug 2016 18:01:56 +0200

On 08/12/2016 05:56 PM, Sargun Dhillon wrote:
> This adds a bpf helper that's similar to the skb_in_cgroup helper to check
> whether the probe is currently executing in the context of a specific
> subset of the cgroupsv2 hierarchy. It does this based on membership test
> for a cgroup arraymap. It is invalid to call this in an interrupt, and
> it'll return an error. The helper is primarily to be used in debugging
> activities for containers, where you may have multiple programs running in
> a given top-level "container".
>
> Signed-off-by: Sargun Dhillon <[email-masked]>
> Cc: Alexei Starovoitov <[email-masked]>
> Cc: Daniel Borkmann <[email-masked]>
> Cc: Tejun Heo <[email-masked]>
> Acked-by: Tejun Heo <[email-masked]>
> Acked-by: Alexei Starovoitov <[email-masked]>

Looks good, thanks, Sargun!

Acked-by: Daniel Borkmann <[email-masked]>