OSDN Git Service

netfilter: xt_cgroup: shrink size of v2 path
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 4 Sep 2018 10:07:55 +0000 (12:07 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 20 Apr 2019 07:16:00 +0000 (09:16 +0200)
commit1f2b1c6ab3532e47718ca51b6201912634ed5786
treecb2f137ef7bb5a584935b92cf200309b8083477c
parent14b183214c08ba2dcd4fee8017879a1ad6f8f0e6
netfilter: xt_cgroup: shrink size of v2 path

[ Upstream commit 0d704967f4a49cc2212350b3e4a8231f8b4283ed ]

cgroup v2 path field is PATH_MAX which is too large, this is placing too
much pressure on memory allocation for people with many rules doing
cgroup v1 classid matching, side effects of this are bug reports like:

https://bugzilla.kernel.org/show_bug.cgi?id=200639

This patch registers a new revision that shrinks the cgroup path to 512
bytes, which is the same approach we follow in similar extensions that
have a path field.

Cc: Tejun Heo <tj@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Tejun Heo <tj@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
include/uapi/linux/netfilter/xt_cgroup.h
net/netfilter/xt_cgroup.c