netfilter: xt_cgroup: shrink size of v2 path
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 4 Sep 2018 10:07:55 +0000 (12:07 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 17 Sep 2018 14:11:03 +0000 (16:11 +0200)
commit0d704967f4a49cc2212350b3e4a8231f8b4283ed
tree2c0f3f080856e140599b8bee959019f3e6a113b9
parent59c08c69c2788612f1afd199c5c87d9df8b8a356
netfilter: xt_cgroup: shrink size of v2 path

cgroup v2 path field is PATH_MAX which is too large, this is placing too
much pressure on memory allocation for people with many rules doing
cgroup v1 classid matching, side effects of this are bug reports like:

https://bugzilla.kernel.org/show_bug.cgi?id=200639

This patch registers a new revision that shrinks the cgroup path to 512
bytes, which is the same approach we follow in similar extensions that
have a path field.

Cc: Tejun Heo <tj@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Tejun Heo <tj@kernel.org>
include/uapi/linux/netfilter/xt_cgroup.h
net/netfilter/xt_cgroup.c