On 02/08, Oliver Crumrine wrote: > Checking if __sk is a full socket in macro > BPF_CGROUP_RUN_PROG_INET_EGRESS is redundant, as the same check is > done in function __cgroup_bpf_run_filter_skb, called as part of the > macro. The check is here to make sure we only run this hook on non-req sockets. Dropping it would mean we'd be running the hook on the listeners instead. I don't think we want that.
