This patch series adds usage of two proposed kernel features: cgroup bytecode filter (INET_DIAG_BC_CGROUP_COND) and cgroup v2 ID attribute (INET_DIAG_CGROUP_ID) for discovering and filtering sockets by cgroups. Dmitry Yakunin (2): ss: introduce cgroup2 cache and helper functions ss: add support for cgroup v2 information and filtering include/cg_map.h | 7 +++ include/uapi/linux/inet_diag.h | 2 + include/utils.h | 4 +- ip/ipvrf.c | 4 +- lib/Makefile | 2 +- lib/cg_map.c | 133 ++++++++++++++++++++++++++++++++++++++++ lib/fs.c | 135 ++++++++++++++++++++++++++++++++++++++++- man/man8/ss.8 | 9 +++ misc/ss.c | 61 +++++++++++++++++++ misc/ssfilter.h | 2 + misc/ssfilter.y | 22 ++++++- 11 files changed, 374 insertions(+), 7 deletions(-) create mode 100644 include/cg_map.h create mode 100644 lib/cg_map.c -- 2.7.4
