On 11/14, Alexis Lothoré (eBPF Foundation) wrote:
Commit a11c397c43d5 ("bpf/flow_dissector: add mode to enforce global BPF flow dissector") is currently tested in test_flow_dissector.sh, which is not part of test_progs. Add the corresponding test to flow_dissector.c, which is part of test_progs. The new test reproduces the behavior implemented in its shell script counterpart:
- attach a flow dissector program to the root net namespace, ensure that we can not attach another flow dissector in any non-root net namespace
- attach a flow dissector program to a non-root net namespace, ensure that we can not attach another flow dissector in root namespace
Since the new test is performing operations in the root net namespace, make sure to set it as a "serial" test to make sure not to conflict with any other test.
Signed-off-by: Alexis Lothoré (eBPF Foundation) alexis.lothore@bootlin.com
Acked-by: Stanislav Fomichev sdf@fomichev.me