Changes in tc_bpf.h

73dfe93e - headers: Remove some left-over license text

Thu, 22 Sep 2022 18:41:40 +0000

headers: Remove some left-over license textRemove some left-over from commit e2be04c7f995 ("License cleanup: add SPDXlicense identifier to uapi header files with a license")When the SPDX-License-Identifier tag has been added, the correspondinglicense text has not been removed.Signed-off-by: Christophe JAILLET Acked-by: Alexander Duyck Reviewed-by: Jiri Pirko Acked-by: Jamal Hadi Salim Link: https://lore.kernel.org/r/88410cddd31197ea26840d7dd71612bece8c6acf.1663871981.git.christophe.jaillet@wanadoo.frSigned-off-by: Jakub Kicinski List of files: /linux-6.15/include/uapi/linux/tc_act/tc_bpf.h

257eeded - net: Move all TC actions identifiers to one place

Sun, 10 Feb 2019 12:24:59 +0000

net: Move all TC actions identifiers to one placeMove all the TC identifiers to one place, to the same enum that definesthe identifier of police action. This makes it easier choose numbers fornew actions since they are now defined in one place. We preserve theoriginal values for binary compatibility. New IDs should be added insidethe enum.Signed-off-by: Eli Cohen Acked-by: Jiri Pirko Signed-off-by: David S. Miller List of files: /linux-6.15/include/uapi/linux/tc_act/tc_bpf.h

e2be04c7 - License cleanup: add SPDX license identifier to uapi header files with a license

Wed, 01 Nov 2017 14:09:13 +0000

License cleanup: add SPDX license identifier to uapi header files with a licenseMany user space API headers have licensing information, which is eitherincomplete, badly formatted or just a shorthand for referring to thelicense under which the file is supposed to be. This makes it hard forcompliance tools to determine the correct license.Update these files with an SPDX license identifier. The identifier waschosen based on the license information in the file.GPL/LGPL licensed headers get the matching GPL/LGPL SPDX licenseidentifier with the added 'WITH Linux-syscall-note' exception, which isthe officially assigned exception identifier for the kernel syscallexception: NOTE! This copyright does *not* cover user programs that use kernel services by normal system calls - this is merely considered normal use of the kernel, and does *not* fall under the heading of "derived work".This exception makes it possible to include GPL headers into non GPLcode, without confusing license compliance tools.Headers which have either explicit dual licensing or are just licensedunder a non GPL license are updated with the corresponding SPDXidentifier and the GPLv2 with syscall exception identifier. The formatis: ((GPL-2.0 WITH Linux-syscall-note) OR SPDX-ID-OF-OTHER-LICENSE)SPDX license identifiers are a legally binding shorthand, which can beused instead of the full boiler plate text. The update does not removeexisting license information as this has to be done on a case by casebasis and the copyright holders might have to be consulted. This willhappen in a separate step.This patch is based on work done by Thomas Gleixner and Kate Stewart andPhilippe Ombredanne. See the previous patch in this series for themethodology of how this patch was researched.Reviewed-by: Kate Stewart Reviewed-by: Philippe Ombredanne Reviewed-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/include/uapi/linux/tc_act/tc_bpf.h

e8628307 - bpf: expose prog id for cls_bpf and act_bpf

Wed, 21 Jun 2017 18:16:11 +0000

bpf: expose prog id for cls_bpf and act_bpfIn order to be able to retrieve the attached programs from cls_bpfand act_bpf, we need to expose the prog ids via netlink so thatan application can later on get an fd based on the id through theBPF_PROG_GET_FD_BY_ID command, and dump related prog info viaBPF_OBJ_GET_INFO_BY_FD command for bpf(2).Signed-off-by: Daniel Borkmann Signed-off-by: David S. Miller List of files: /linux-6.15/include/uapi/linux/tc_act/tc_bpf.h

f1f7714e - bpf: rework prog_digest into prog_tag

Fri, 13 Jan 2017 22:38:15 +0000

bpf: rework prog_digest into prog_tagCommit 7bd509e311f4 ("bpf: add prog_digest and expose it viafdinfo/netlink") was recently discussed, partially due toadmittedly suboptimal name of "prog_digest" in combinationwith sha1 hash usage, thus inevitably and rightfully concernsabout its security in terms of collision resistance wereraised with regards to use-cases.The intended use cases are for debugging resp. introspectiononly for providing a stable "tag" over the instruction sequencethat both kernel and user space can calculate independently.It's not usable at all for making a security relevant decision.So collisions where two different instruction sequences generatethe same tag can happen, but ideally at a rather low rate. The"tag" will be dumped in hex and is short enough to introspectin tracepoints or kallsyms output along with other data suchas stack trace, etc. Thus, this patch performs a rename intoprog_tag and truncates the tag to a short output (64 bits) tomake it obvious it's not collision-free.Should in future a hash or facility be needed with a securityrelevant focus, then we can think about requirements, constraints,etc that would fit to that situation. For now, rework the exposedparts for the current use cases as long as nothing has beenreleased yet. Tested on x86_64 and s390x.Fixes: 7bd509e311f4 ("bpf: add prog_digest and expose it via fdinfo/netlink")Signed-off-by: Daniel Borkmann Acked-by: Alexei Starovoitov Cc: Andy Lutomirski Signed-off-by: David S. Miller List of files: /linux-6.15/include/uapi/linux/tc_act/tc_bpf.h

7bd509e3 - bpf: add prog_digest and expose it via fdinfo/netlink

Sun, 04 Dec 2016 22:19:41 +0000

bpf: add prog_digest and expose it via fdinfo/netlinkWhen loading a BPF program via bpf(2), calculate the digest overthe program's instruction stream and store it in struct bpf_prog'sdigest member. This is done at a point in time before any instructionsare rewritten by the verifier. Any unstable map file descriptornumber part of the imm field will be zeroed for the hash.fdinfo example output for progs: # cat /proc/1590/fdinfo/5 pos: 0 flags: 02000002 mnt_id: 11 prog_type: 1 prog_jited: 1 prog_digest: b27e8b06da22707513aa97363dfb11c7c3675d28 memlock: 4096When programs are pinned and retrieved by an ELF loader, the loadercan check the program's digest through fdinfo and compare it againstone that was generated over the ELF file's program section to seeif the program needs to be reloaded. Furthermore, this can also beexposed through other means such as netlink in case of a tc cls/actdump (or xdp in future), but also through tracepoints or otherfacilities to identify the program. Other than that, the digest canalso serve as a base name for the work in progress kallsyms supportof programs. The digest doesn't depend/select the crypto layer, sincewe need to keep dependencies to a minimum. iproute2 will get supportfor this facility.Signed-off-by: Daniel Borkmann Acked-by: Alexei Starovoitov Signed-off-by: David S. Miller List of files: /linux-6.15/include/uapi/linux/tc_act/tc_bpf.h

9854518e - sched: align nlattr properly when needed

Tue, 26 Apr 2016 08:06:18 +0000

sched: align nlattr properly when neededSigned-off-by: Nicolas Dichtel Signed-off-by: David S. Miller List of files: /linux-6.15/include/uapi/linux/tc_act/tc_bpf.h

a8cb5f55 - act_bpf: add initial eBPF support for actions

Fri, 20 Mar 2015 14:11:12 +0000

act_bpf: add initial eBPF support for actionsThis work extends the "classic" BPF programmable tc action by extendingits scope also to native eBPF code!Together with commit e2e9b6541dd4 ("cls_bpf: add initial eBPF supportfor programmable classifiers") this adds the facility to implement fullyflexible classifier and actions for tc that can be implemented in a Csubset in user space, "safely" loaded into the kernel, and being run innative speed when JITed.Also, since eBPF maps can be shared between eBPF programs, it offers thepossibility that cls_bpf and act_bpf can share data 1) between themselvesand 2) between user space applications. That means that, f.e. customizedruntime statistics can be collected in user space, but also more importantlyclassifier and action behaviour could be altered based on map input fromthe user space application.For the remaining details on the workflow and integration, see the cls_bpfcommit e2e9b6541dd4. Preliminary iproute2 part can be found under [1]. [1] http://git.breakpoint.cc/cgit/dborkman/iproute2.git/log/?h=ebpf-actSigned-off-by: Daniel Borkmann Cc: Jamal Hadi Salim Cc: Jiri Pirko Acked-by: Jiri Pirko Acked-by: Alexei Starovoitov Signed-off-by: David S. Miller List of files: /linux-6.15/include/uapi/linux/tc_act/tc_bpf.h

d23b8ad8 - tc: add BPF based action

Thu, 15 Jan 2015 08:52:39 +0000

tc: add BPF based actionThis action provides a possibility to exec custom BPF code.Signed-off-by: Jiri Pirko Signed-off-by: David S. Miller List of files: /linux-6.15/include/uapi/linux/tc_act/tc_bpf.h