From 58505eca4f5a861e4779e57878f7974a935da8d2 Mon Sep 17 00:00:00 2001 From: Daniel Mack Date: Fri, 11 Nov 2016 19:59:19 +0100 Subject: [PATCH] cgroup: add fields to accommodate eBPF related details Add pointers for compiled eBPF programs as well as list heads for allowed and denied hosts for both directions. --- src/core/cgroup.c | 3 +++ src/core/cgroup.h | 4 ++++ 2 files changed, 7 insertions(+) diff --git a/src/core/cgroup.c b/src/core/cgroup.c index 1289ddf73..17d3eb2e5 100644 --- a/src/core/cgroup.c +++ b/src/core/cgroup.c @@ -142,6 +142,9 @@ void cgroup_context_done(CGroupContext *c) { while (c->device_allow) cgroup_context_free_device_allow(c, c->device_allow); + + c->ip_address_allow = ip_address_access_free_all(c->ip_address_allow); + c->ip_address_deny = ip_address_access_free_all(c->ip_address_deny); } void cgroup_context_dump(CGroupContext *c, FILE* f, const char *prefix) { diff --git a/src/core/cgroup.h b/src/core/cgroup.h index dd8e436b9..11705be00 100644 --- a/src/core/cgroup.h +++ b/src/core/cgroup.h @@ -88,6 +88,7 @@ struct CGroupContext { bool blockio_accounting; bool memory_accounting; bool tasks_accounting; + bool ip_accounting; /* For unified hierarchy */ uint64_t cpu_weight; @@ -104,6 +105,9 @@ struct CGroupContext { uint64_t memory_max; uint64_t memory_swap_max; + LIST_HEAD(IPAddressAccessItem, ip_address_allow); + LIST_HEAD(IPAddressAccessItem, ip_address_deny); + /* For legacy hierarchies */ uint64_t cpu_shares; uint64_t startup_cpu_shares; -- 2.30.2