From mboxrd@z Thu Jan  1 00:00:00 1970
From: chris hyser <chris.hyser-QHcLZuEGTsvQT0dZR+AlfA@public.gmane.org>
Subject: Re: [net-next v3 0/2] eBPF seccomp filters
Date: Tue, 27 Feb 2018 17:20:14 -0500
Message-ID: <7fc0fab8-c1bc-bc76-a892-b3faab7d16ad@oracle.com>
References: <20180226072651.GA27045@ircssh-2.c.rugged-nimbus-611.internal>
	<20180226230418.46nczgkh5csakyu7@ast-mbp>
	<CAGXu5jLdOcrn16q9pQ7JwTf88AVsL0o5LMJ=4P6vRN36u-_k_g@mail.gmail.com>
	<CALCETrXNODxWkcwF-LbXBn+Ju7QJEyi3JR+spsRX4ecg8d1iMQ@mail.gmail.com>
	<CAGXu5j+64WzxjBnpQxYCU50ak+VqVw1y0W+MWygFodxsDqEZRw@mail.gmail.com>
	<db759dd2-31dc-d094-251d-d4c1e8af8704@oracle.com>
	<CAGXu5j+idW9AjZHVdeedqLOFXriObUJLvcw8-9k5WxyQF8EWrg@mail.gmail.com>
	<ddbefdda-f3b8-3956-fa0f-dcba8cf8e7d9@oracle.com>
	<f712a383-8e84-da64-a454-51fdebf28741@iogearbox.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Content-Transfer-Encoding: base64
Cc: Will Drewry <wad-F7+t8E8rja9g9hUCZPvPmw@public.gmane.org>, Netdev <netdev-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
	Linux Containers <containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org>,
	Alexei Starovoitov <ast-DgEjT+Ai2ygdnm+yROfE0A@public.gmane.org>, Andy Lutomirski <luto-kltTT9wpgjJwATOyAt5JVQ@public.gmane.org>,
	Sargun Dhillon <sargun-GaZTRHToo+CzQB+pC5nmwQ@public.gmane.org>,
	Alexei Starovoitov <alexei.starovoitov-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
To: Daniel Borkmann <daniel-FeC+5ew28dpmcu3hnIyYJQ@public.gmane.org>, Kees Cook <keescook-F7+t8E8rja9g9hUCZPvPmw@public.gmane.org>
Return-path: <containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org>
In-Reply-To: <f712a383-8e84-da64-a454-51fdebf28741-FeC+5ew28dpmcu3hnIyYJQ@public.gmane.org>
Content-Language: en-US
List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/containers>,
	<mailto:containers-request-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org?subject=unsubscribe>
List-Archive: <http://lists.linuxfoundation.org/pipermail/containers/>
List-Post: <mailto:containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org>
List-Help: <mailto:containers-request-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org?subject=help>
List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/containers>,
	<mailto:containers-request-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org?subject=subscribe>
Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org
Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org
List-Id: netdev.vger.kernel.org
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