Re: [PATCH bpf-next v4 0/2] Fix missing synack in BPF cgroup_skb filters

Hello:

This series was applied to bpf/bpf-next.git (master) by Daniel Borkmann daniel@iogearbox.net:

On Fri, 23 Jun 2023 18:45:58 -0700 you wrote:

TCP SYN/ACK packets of connections from processes/sockets outside a cgroup on the same host are not received by the cgroup's installed cgroup_skb filters.

There were two BPF cgroup_skb programs attached to a cgroup named "my_cgroup".

[...]

Here is the summary with links: - [bpf-next,v4,1/2] net: bpf: Check SKB ownership against full socket. https://git.kernel.org/bpf/bpf-next/c/223f5f79f2ce - [bpf-next,v4,2/2] selftests/bpf: Verify that the cgroup_skb filters receive expected packets. https://git.kernel.org/bpf/bpf-next/c/539c7e67aa4a

You are awesome, thank you!