commit 896ef4e01b9bb459519593887a4359d9ed533492
author Maciej Żenczykowski <maze@google.com> Fri Mar 03 08:04:49 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Mar 03 08:04:49 2023 +0000
tree 8d5eed42056ce1c29e68d37949f2125a94d56783
parent bfb28d7014d11e9432f3663ad176b910d2f5b52e
parent e4c0473bd93e76a0291e2505006d3875fe363c78

Merge "bpf netd - minor perf improvement - move uid check first"

bpf_progs/netd.c

diff --git a/bpf_progs/netd.c b/bpf_progs/netd.c
index cb0da19..e068d8a 100644
--- a/bpf_progs/netd.c
+++ b/bpf_progs/netd.c
@@ -350,10 +350,10 @@
 
 static __always_inline inline int bpf_owner_match(struct __sk_buff* skb, uint32_t uid,
                                                   bool egress, const unsigned kver) {
-    if (skip_owner_match(skb, kver)) return PASS;
-
     if (is_system_uid(uid)) return PASS;
 
+    if (skip_owner_match(skb, kver)) return PASS;
+
     BpfConfig enabledRules = getConfig(UID_RULES_CONFIGURATION_KEY);
 
     UidOwnerValue* uidEntry = bpf_uid_owner_map_lookup_elem(&uid);