Re: [PATCH] staging: tracing/kprobe: filter kprobe based perf event

From: Alexei Starovoitov
Date: Wed Sep 18 2019 - 16:22:34 EST


On Wed, Sep 18, 2019 at 8:13 AM Jinshan Xiong <jinshan.xiong@xxxxxxxx> wrote:
>
> The problem with the current approach is that it would be difficult to filter cgroup, especially the cgroup in question has descendents, and also it would spawn new descendents after BPF program is installed. it's hard to filter it inside a BPF program.

Why is that?
bpf_current_task_under_cgroup() fits exactly that purpose.