diff options
author | YiFei Zhu <zhuyifei@google.com> | 2022-09-09 00:49:39 +0000 |
---|---|---|
committer | Martin KaFai Lau <martin.lau@kernel.org> | 2022-09-09 10:40:45 -0700 |
commit | 0ffe2412531e95a309d7f0bfe985fc4ca4d39de8 (patch) | |
tree | 2c391b0f14d8bdbc1af1726182486400a8151e5a /tools/testing/selftests/bpf/prog_tests | |
parent | libbpf: Remove gcc support for bpf_tail_call_static for now (diff) | |
download | linux-dev-0ffe2412531e95a309d7f0bfe985fc4ca4d39de8.tar.xz linux-dev-0ffe2412531e95a309d7f0bfe985fc4ca4d39de8.zip |
bpf: Invoke cgroup/connect{4,6} programs for unprivileged ICMP ping
Usually when a TCP/UDP connection is initiated, we can bind the socket
to a specific IP attached to an interface in a cgroup/connect hook.
But for pings, this is impossible, as the hook is not being called.
This adds the hook invocation to unprivileged ICMP ping (i.e. ping
sockets created with SOCK_DGRAM IPPROTO_ICMP(V6) as opposed to
SOCK_RAW. Logic is mirrored from UDP sockets where the hook is invoked
during pre_connect, after a check for suficiently sized addr_len.
Signed-off-by: YiFei Zhu <zhuyifei@google.com>
Link: https://lore.kernel.org/r/5764914c252fad4cd134fb6664c6ede95f409412.1662682323.git.zhuyifei@google.com
Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org>
Diffstat (limited to 'tools/testing/selftests/bpf/prog_tests')
0 files changed, 0 insertions, 0 deletions