Re: [PATCH] net: remove check before __cgroup_bpf_run_filter_skb

From: Stanislav Fomichev
Date: Thu Feb 08 2024 - 19:43:22 EST


On 02/08, Oliver Crumrine wrote:
> Checking if __sk is a full socket in macro
> BPF_CGROUP_RUN_PROG_INET_EGRESS is redundant, as the same check is
> done in function __cgroup_bpf_run_filter_skb, called as part of the
> macro.

The check is here to make sure we only run this hook on non-req sockets.
Dropping it would mean we'd be running the hook on the listeners
instead. I don't think we want that.