Re: [PATCH net] net/sched: cls_bpf: reject dev-bound programs bound to a different device
Jakub Kicinski <[email protected]>
| Newsgroups | org.kernel.vger.bpf,org.kernel.vger.netdev,org.kernel.vger.stable |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 11 Aug 2026 07:35:41 -0400 Jamal Hadi Salim wrote: > It seems a v2 may be worth it: > fix netdevsim's cls_bpf path (Fixes: 2b3486bc2d23), keep the core > check as defense-in-depth without the bogus Fixes:, and walk > block->ports for shared blocks (block->q is NULL there). Or drop the > core change and fix only netdevsim. What says you? Pls post the right Fixes tag in this thread (without wrapping etc) my scripts will pick that up when applying. re: blocks - don't care, those are a switch ACL feature to me. for BPF offload - the offload mechanism itself already works at the device level, so the program can be loaded once and then bound to multiple ports. Or at least that's what I _think_ I did cause NFP wouldn't have enough program storage for all the ports it had :)