OSDN Git Service

bpf: Enable bpf_{g,s}etsockopt in BPF_CGROUP_INET{4,6}_GET{PEER,SOCK}NAME
authorStanislav Fomichev <sdf@google.com>
Wed, 27 Jan 2021 23:28:51 +0000 (15:28 -0800)
committerDaniel Borkmann <daniel@iogearbox.net>
Fri, 29 Jan 2021 01:09:05 +0000 (02:09 +0100)
commit073f4ec124bb2c431d9e4136e7f583abfea7f290
tree5392d91fff59bfcd2375a442c3729ee6e0952956
parent62476cc1bf24b34d9442c7ba76e5eb6bf242f911
bpf: Enable bpf_{g,s}etsockopt in BPF_CGROUP_INET{4,6}_GET{PEER,SOCK}NAME

Those hooks run as BPF_CGROUP_RUN_SA_PROG_LOCK and operate on
a locked socket.

Signed-off-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/bpf/20210127232853.3753823-3-sdf@google.com
net/core/filter.c
tools/testing/selftests/bpf/progs/connect_force_port4.c
tools/testing/selftests/bpf/progs/connect_force_port6.c