Andrey Ignatov
be00aafb24
BACKPORT: bpf: Hooks for sys_connect ...
== The problem ==
See description of the problem in the initial patch of this patch set.
== The solution ==
The patch provides much more reliable in-kernel solution for the 2nd
part of the problem: making outgoing connecttion from desired IP.
It adds new attach types `BPF_CGROUP_INET4_CONNECT` and
`BPF_CGROUP_INET6_CONNECT` for program type
`BPF_PROG_TYPE_CGROUP_SOCK_ADDR` that can be used to override both
source and destination of a connection at connect(2) time.
Local end of connection can be bound to desired IP using newly
introduced BPF-helper `bpf_bind()`. It allows to bind to only IP though,
and doesn't support binding to port, i.e. leverages
`IP_BIND_ADDRESS_NO_PORT` socket option. There are two reasons for this:
* looking for a free port is expensive and can affect performance
significantly;
* there is no use-case for port.
As for remote end (`struct sockaddr *` passed by user), both parts of it
can be overridden, remote IP and remote port. It's useful if an
application inside cgroup wants to connect to another application inside
same cgroup or to itself, but knows nothing about IP assigned to the
cgroup.
Support is added for IPv4 and IPv6, for TCP and UDP.
IPv4 and IPv6 have separate attach types for same reason as sys_bind
hooks, i.e. to prevent reading from / writing to e.g. user_ip6 fields
when user passes sockaddr_in since it'd be out-of-bound.
== Implementation notes ==
The patch introduces new field in `struct proto`: `pre_connect` that is
a pointer to a function with same signature as `connect` but is called
before it. The reason is in some cases BPF hooks should be called way
before control is passed to `sk->sk_prot->connect`. Specifically
`inet_dgram_connect` autobinds socket before calling
`sk->sk_prot->connect` and there is no way to call `bpf_bind()` from
hooks from e.g. `ip4_datagram_connect` or `ip6_datagram_connect` since
it'd cause double-bind. On the other hand `proto.pre_connect` provides a
flexible way to add BPF hooks for connect only for necessary `proto` and
call them at desired time before `connect`. Since `bpf_bind()` is
allowed to bind only to IP and autobind in `inet_dgram_connect` binds
only port there is no chance of double-bind.
bpf_bind() sets `force_bind_address_no_port` to bind to only IP despite
of value of `bind_address_no_port` socket field.
bpf_bind() sets `with_lock` to `false` when calling to __inet_bind()
and __inet6_bind() since all call-sites, where bpf_bind() is called,
already hold socket lock.
Change-Id: Ief71932407d9e96d6264ebf2089be8ea38a67ea4
Signed-off-by: Andrey Ignatov <rdna@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
2026-05-15 17:56:15 +07:00
UPSTREAM: binder: add flag to clear buffer on txn complete
2022-11-30 02:27:36 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
install several missing uapi headers
2020-08-21 11:01:49 +02:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
ASoC: wcd: add audio codec drivers for MSM targets
2017-01-27 11:28:43 -08:00
Merge "Merge android-4.9.227(892702560) into msm-4.9"
2020-07-08 02:20:36 -07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
NFC: Add snapshot of NQxxx NFC driver
2017-05-26 15:05:08 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
UPSTREAM: bpf: expose prog id for cls_bpf and act_bpf
2026-05-15 17:54:51 +07:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Revert "include/uapi/linux/atm_zatm.h: include linux/time.h"
2016-11-13 12:35:13 -05:00
audit: fix undefined behavior in bit shift for AUDIT_BIT
2022-12-08 11:15:39 +01:00
autofs4: move linux/auto_dev-ioctl.h to uapi/linux
2016-10-11 15:06:31 -07:00
autofs: move inclusion of linux/limits.h to uapi
2016-10-11 15:06:31 -07:00
batman-adv: add backbone table netlink support
2016-08-09 07:54:43 +02:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
soc: qcom: bgdaemon: add uevent support for TWM BG
2020-03-16 20:57:55 -07:00
BACKPORT: bpf: Hooks for sys_connect
2026-05-15 17:56:15 +07:00
UPSTREAM: bpf: add comments to BPF ld/ldx sizes
2026-05-15 17:56:05 +07:00
bpf: introduce BPF_PROG_TYPE_PERF_EVENT program type
2016-09-02 10:46:44 -07:00
net: bpqether.h: remove if_ether.h guard
2016-11-13 00:57:53 -05:00
ipmi: add an Aspeed BT IPMI BMC driver
2016-09-29 19:05:06 -05:00
Btrfs: catch invalid free space trees
2016-10-03 18:52:14 +02:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
can: raw: raw_setsockopt: limit number of can_filter that can be set
2016-12-07 10:45:57 +01:00
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
2022-11-25 17:35:35 +01:00
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers
2019-08-06 18:29:38 +02:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
Merge android-4.9.219(6ee8be4) into msm-4.9
2020-04-28 15:06:13 +08:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
powerpc updates for 4.8 #2
2016-08-05 09:00:54 -04:00
BACKPORT: sock: add MSG_ZEROCOPY
2026-05-15 17:55:01 +07:00
esoc: Add provision to handle shutdown request in userspace
2017-10-27 16:39:16 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
eventpoll.h: fix epoll event masks
2018-03-22 09:17:38 +01:00
vfs: add a FALLOC_FL_UNSHARE mode to fallocate to unshare a range of blocks
2016-10-03 09:11:14 -07:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include: fib: Remove the deprecated UID fields
2017-09-06 15:09:16 -07:00
crypto: msm: Add QTI crypto drivers
2017-04-11 16:49:21 -07:00
Merge android-4.9.149 ( ed0b11d) into msm-4.9
2019-02-12 11:18:51 +08:00
Merge android-4.9.181 ( 6ccab84) into msm-4.9
2019-08-07 15:58:44 +08:00
input: misc: hbtp_input: support active blob flag
2018-02-28 14:42:44 -08:00
UPSTREAM: hw_breakpoint: Allow watchpoint of length 3,5,6 and 7
2017-03-13 15:31:05 -07:00
uapi glibc compat: fix outer guard of net device flags enum
2016-12-06 10:43:32 -05:00
msm_rmnet: merge support for RAWIP msm_rmnet device
2016-11-01 13:52:41 -06:00
net: bridge: export vlan flags with the stats
2016-08-18 23:18:42 -07:00
Merge android-4.9.160 ( fd5657a) into msm-4.9
2019-03-21 14:06:06 +08:00
BACKPORT: xdp: add reporting of offload mode
2026-05-15 17:54:51 +07:00
net: l2tp: deprecate PPPOL2TP_MSG_* in favour of L2TP_MSG_*
2020-05-27 16:41:53 +02:00
ANDROID: net: move PPPoLAC and PPPoPNS headers to uapi
2017-01-19 13:32:06 -08:00
ANDROID: net: move PPPoLAC and PPPoPNS headers to uapi
2017-01-19 13:32:06 -08:00
ANDROID: net: add PPP on PPTP Network Server (PPPoPNS) driver.
2017-01-19 13:32:03 -08:00
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2016-09-25 23:34:19 +02:00
UPSTREAM: tcp_diag: report TCP MD5 signing keys and addresses
2026-05-15 17:55:21 +07:00
Revert "ANDROID: ALSA: jack: Update supported jack switch types"
2026-01-06 16:27:45 +02:00
UPSTREAM: HID: sony: Report DS4 motion sensors through a separate device
2018-10-24 17:03:59 -07:00
ion: add snapshot of ion support for MSM
2016-11-03 12:43:03 -07:00
netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
2018-01-10 19:42:37 -07:00
msm: ipa: add support for HW stats to QMI
2018-05-04 16:09:13 +05:30
BACKPORT: ipv6: implement dataplane support for rthdr type 4 (Segment Routing Header)
2026-05-15 17:54:16 +07:00
net: ipv6: RTF_PCPU should not be settable from userspace
2017-05-03 08:36:36 -07:00
include/uapi/linux/ipx.h: fix conflicting defitions with glibc netipx/ipx.h
2016-08-22 16:25:15 -07:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
UPSTREAM: kcov: support comparison operands collection
2017-12-18 15:21:35 -08:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
2020-06-20 10:24:14 +02:00
uapi: fix linux/if_pppol2tp.h userspace compilation errors
2020-06-03 08:16:33 +02:00
uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
2019-02-20 10:18:35 +01:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
BACKPORT: loop: Add LOOP_CONFIGURE ioctl
2020-08-11 09:26:34 +02:00
BACKPORT: bpf: BPF for lightweight tunnel infrastructure
2026-05-15 17:54:17 +07:00
ANDROID: sdcardfs: Change magic value
2017-01-31 10:47:24 -08:00
uapi: Add display-related uapi headers for Android compilation
2017-03-23 13:55:19 -07:00
[media] media: Add 1X16 16-bit raw bayer media bus code definitions
2016-09-09 11:16:36 -03:00
[media] v4l2-core: Add support for touch devices
2016-08-23 16:28:04 -03:00
msm: mhi_dev: Add cv2x HW channel support in MHI driver
2019-07-30 05:53:20 -07:00
net: Add mask for Control register 10Mbps speed
2016-08-12 16:57:20 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2020-09-12 11:47:36 +02:00
drivers: soc: qcom: Snapshot of idle/sleep driver as of msm-4.4
2017-02-23 08:41:47 -07:00
uapi: Add missing header file msm_dsps.h.
2017-03-23 13:52:08 -07:00
ion: add snapshot of ion support for MSM
2016-11-03 12:43:03 -07:00
msm: ipa3: Send pipe info based on tethering protocol
2020-04-02 23:57:00 +05:30
net: ipc_router: Add snapshot of IPC Router
2016-11-11 17:02:27 -08:00
msm: kgsl: Log context type in case of GPU faults
2018-10-15 16:06:11 +05:30
msm: mdss: Allow resource update during secure UI
2020-03-05 05:50:00 +05:30
msm: mdss: Add support to update backlight when display commit
2018-06-20 17:51:10 +05:30
net: rmnet_data: Add snapshot of rmnet_data driver
2016-11-01 20:02:26 -06:00
uapi: Add display-related uapi headers for Android compilation
2017-03-23 13:55:19 -07:00
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
libnvdimm: fix SMART Health DSM payload definition
2016-08-15 11:07:21 -07:00
net: rmnet_data: Add snapshot of rmnet_data driver
2016-11-01 20:02:26 -06:00
UPSTREAM: net: add new control message for incoming HW-timestamped packets
2026-05-15 17:55:02 +07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
uapi: fix linux/nfc.h userspace compilation errors
2022-01-05 12:31:25 +01:00
nfs: add a new NFS4_OPEN_RESULT_MAY_NOTIFY_LOCK constant
2016-09-26 15:20:37 -04:00
nilfs2: move ioctl interface and disk layout to uapi separately
2016-08-02 19:35:21 -04:00
nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
2019-07-21 09:06:04 +02:00
nl80211: add WPA3 definition for SAE authentication
2024-12-13 22:46:35 +01:00
nsfs: add ioctl to get a parent namespace
2016-09-22 19:59:41 -05:00
drivers misc: add okl4-link-shbuf driver
2018-12-09 18:41:17 -08:00
openvswitch: 802.1ad uapi changes.
2016-09-08 17:10:27 -07:00
uapi: fix linux/packet_diag.h userspace compilation error
2017-03-22 12:43:34 +01:00
Merge remote-tracking branch 'common/android-4.9-q' into lineage-18.1-caf-sdm845
2021-12-27 02:07:39 +02:00
UPSTREAM: bpf/tracing: allow user space to query prog array on the same tp
2026-05-15 17:55:59 +07:00
UPSTREAM: bpf: expose prog id for cls_bpf and act_bpf
2026-05-15 17:54:51 +07:00
net_sched: Add flow control support to prio qdisc
2017-03-22 17:37:14 -06:00
posix_acl: uapi header split
2016-09-27 21:52:00 -04:00
posix_acl: uapi header split
2016-09-27 21:52:00 -04:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
Merge android-4.9.176 ( e0625b3) into msm-4.9
2019-06-13 14:31:04 +08:00
arm/arm64: KVM: Add PSCI_VERSION helper
2018-04-20 08:21:04 +02:00
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
qbt1000: Add support for fingerprint gestures
2018-02-14 20:40:01 +05:30
msm: crypto: Add support for map and unmap ioctls
2018-04-20 10:56:50 -07:00
uapi: Add missing Secure System uapi header files for sdm845
2017-03-13 18:08:32 -07:00
power: qpnp-qg: Add support for PMI632 v2.0
2018-06-18 11:37:25 +05:30
power: qpnp-qg: Add support for voltage-only mode of QG
2019-01-17 17:27:28 +05:30
uapi: Add missing Secure System uapi header files for sdm845
2017-03-13 18:08:32 -07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
ice: msm: Encrypt only userdata
2018-06-01 14:39:35 +05:30
random: ignore GRND_RANDOM in getentropy(2)
2022-06-25 11:45:02 +02:00
uapi: fix linux/rds.h userspace compilation errors
2017-11-21 09:23:28 +01:00
rapidio: add RapidIO channelized messaging driver
2016-08-02 19:35:31 -04:00
net: rmnet_data: Add support to configure custom device name
2017-03-22 12:26:21 -06:00
msm: ipa: Add support for per client lan statistics
2017-10-30 23:23:51 +05:30
UPSTREAM: net: ipv4: add new RTM_F_FIB_MATCH flag for use with RTM_GETROUTE
2026-05-15 17:54:44 +07:00
BACKPORT: clone: add CLONE_PIDFD
2019-09-03 13:44:48 -07:00
sctp: Export struct sctp_info to userspace
2016-08-08 12:51:58 -07:00
seccomp: Add filter flag to opt-out of SSB mitigation
2018-05-22 16:58:01 +02:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
UPSTREAM: ipv6: sr: remove cleanup flag and fix HMAC computation
2026-05-15 17:54:25 +07:00
UPSTREAM: ipv6: sr: add code base for control plane support of SR-IPv6
2026-05-15 17:54:16 +07:00
BACKPORT: ipv6: sr: add core files for SR HMAC support
2026-05-15 17:54:16 +07:00
UPSTREAM: ipv6: sr: add support for SRH encapsulation and injection with lwtunnels
2026-05-15 17:54:16 +07:00
serial: Add UART port for EUD
2016-09-01 16:17:11 -07:00
serial: 8250: Define RX trigger levels for OxSemi 950 devices
2021-09-22 11:43:06 +02:00
uapi: Add UAPI headers for slatecom_interface driver
2021-09-09 15:16:49 +05:30
uapi: Add missing Secure System uapi header files for sdm845
2017-03-13 18:08:32 -07:00
net/tcp_fastopen: Add snmp counter for blackhole detection
2026-05-15 17:55:39 +07:00
net: Add snapshot of sockev module
2017-03-29 16:54:34 -07:00
spcom: move SPCOM_MAX_CHANNELS define to uapi/linux/spcom.h
2017-08-13 08:35:44 -07:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include/uapi/linux/swab: Fix potentially missing __always_inline
2023-01-07 12:07:28 +01:00
dma-buf/sync_file: fix documentation error
2016-09-20 18:12:38 +05:30
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
BACKPORT: delayacct: track delays from thrashing cache pages
2019-03-22 14:08:39 -07:00
UPSTREAM: tcp_diag: report TCP MD5 signing keys and addresses
2026-05-15 17:55:21 +07:00
BACKPORT: tee: add register user memory
2018-02-21 15:40:42 +00:00
Revert "rtc: alarm: Add power-on alarm feature"
2017-11-01 01:19:42 -07:00
tipc: Avoid copying bytes beyond the supplied data
2019-06-11 12:22:34 +02:00
tipc: add the ability to get UDP options via netlink
2016-08-26 21:38:41 -07:00
BACKPORT: tls: kernel TLS support
2026-05-15 17:54:50 +07:00
tty: actually undefine superseded ASYNC flags
2021-05-22 10:40:24 +02:00
msm: vidc: Add support for setting dynamic QP range
2019-05-19 14:09:11 +05:30
[media] SDI: add flag for SDI formats and SMPTE 125M definition
2016-09-19 14:34:41 -03:00
vhost: new device IOTLB API
2016-08-02 16:53:54 +03:00
Merge remote-tracking branch 'common/android-4.9-q' into android13-4.9-sdm845
2022-11-09 19:25:28 +02:00
virtio: new feature to detect IOMMU device quirk
2016-08-01 21:44:52 +03:00
VSOCK: Introduce virtio_vsock_common.ko
2016-08-02 02:57:29 +03:00
virtio-vsock: fix include guard typo
2016-08-09 13:42:38 +03:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
UPSTREAM: wireguard: global: fix spelling mistakes in comments
2021-03-23 02:09:21 +02:00
BACKPORT: xfrm: Add a new lookup key to match xfrm interfaces.
2018-10-26 21:39:51 -07:00
be00aafb24