Re: Potential issues (security and otherwise) with the current cgroup-bpf API

From: Alexei Starovoitov
Date: Fri Feb 03 2017 - 18:22:07 EST


On Fri, Feb 03, 2017 at 01:07:39PM -0800, Andy Lutomirski wrote:
>
> Is there any plan to address this? If not, I'll try to write that
> patch this weekend.

yes. I'm working on 'disallow program override' flag.
It got stalled, because netns discussion got stalled.
Later today will send a patch for dev_id+inode and
will continue on the flag patch.