bpf/progs/lsm_cgroup.c

1 // SPDX-License-Identifier: GPL-2.0
8 char _license[] SEC("license") = "GPL";
30 } cgroup_storage SEC(".maps");
57 	/* Reject non-tx-only AF_PACKET. */  in real_create()
61 	sk = sock->sk;  in real_create()
84 SEC("lsm_cgroup/socket_post_create")
93 SEC("lsm_cgroup/socket_post_create")
106 	struct sock *sk = sock->sk;  in real_bind()
111 	if (sk->__sk_common.skc_family != AF_PACKET)  in real_bind()
114 	if (sk->sk_kern_sock)  in real_bind()
129 SEC("lsm_cgroup/socket_bind")
138 SEC("lsm_cgroup/socket_bind")
147 SEC("lsm_cgroup/sk_alloc_security")
151 	/* if already have non-bpf lsms installed, EPERM will cause memory leak of non-bpf lsms */  in BPF_PROG()
166 SEC("lsm_cgroup/inet_csk_clone")