Files
linux/net
Florian Westphal 1c86b7ea63 netfilter: nft_socket: make cgroup match work in input too
[ Upstream commit 05ae2fba82 ]

cgroupv2 helper function ignores the already-looked up sk
and uses skb->sk instead.

Just pass sk from the calling function instead; this will
make cgroup matching work for udp and tcp in input even when
edemux did not set skb->sk already.

Fixes: e0bb96db96 ("netfilter: nft_socket: add support for cgroupsv2")
Signed-off-by: Florian Westphal <fw@strlen.de>
Tested-by: Topi Miettinen <toiwoton@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-20 09:34:10 +02:00
..
2022-03-11 12:22:36 +01:00
2021-06-29 11:28:21 -07:00
2022-04-08 14:24:14 +02:00
2022-04-08 14:23:36 +02:00
2021-06-03 15:13:56 -07:00
2021-07-29 15:06:49 +01:00
2021-07-29 15:06:49 +01:00