Re: [libvirt] [PATCH v3 10/15] vircgroup: introduce virCgroupV2AllowDevice

2019-06-18 Thread Ján Tomko
On Thu, Apr 25, 2019 at 09:44:27AM +0200, Pavel Hrdina wrote: In order to allow device we need to create key and value which will be used to update BPF map. virBPFUpdateElem() can override existing entries in BPF map so we need to check if that entry exists in order to track number of entries

[libvirt] [PATCH v3 10/15] vircgroup: introduce virCgroupV2AllowDevice

2019-04-25 Thread Pavel Hrdina
In order to allow device we need to create key and value which will be used to update BPF map. virBPFUpdateElem() can override existing entries in BPF map so we need to check if that entry exists in order to track number of entries in our map. This can add rule for specific device but major and