On Thu, 2012-08-09 at 11:07 -0400, Paul Moore wrote:> Is is possible to do the call to security_sk_alloc() in the ip_init() function > or does the per-cpu nature of the socket make this a pain?> Its a pain, if we want NUMA affinity.Here, each cpu should get memory from its closest node.