Re: [PATCH net] net/sched: cls_bpf: reject dev-bound programs bound to a different device

Jakub Kicinski <[email protected]>
Newsgroups org.kernel.vger.bpf,org.kernel.vger.netdev,org.kernel.vger.stable
Message-ID <[email protected]>
On Tue, 11 Aug 2026 07:35:41 -0400 Jamal Hadi Salim wrote:
> It seems a v2 may be worth it:
> fix netdevsim's cls_bpf path (Fixes: 2b3486bc2d23), keep the core
> check as defense-in-depth without the bogus Fixes:, and walk
> block->ports for shared blocks (block->q is NULL there). Or drop the
> core change and fix only netdevsim. What says you?

Pls post the right Fixes tag in this thread (without wrapping etc)
my scripts will pick that up when applying.

re: blocks - don't care, those are a switch ACL feature to me.
for BPF offload - the offload mechanism itself already works
at the device level, so the program can be loaded once and then
bound to multiple ports. Or at least that's what I _think_ I did 
cause NFP wouldn't have enough program storage for all the ports 
it had :)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.