netdev - Re: [PATCH v2 net-next 2/2] bpf: allow programs to write to certain skb fields

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20150607.020158.1703718660634574340.davem@davemloft.net>
Date:	Sun, 07 Jun 2015 02:01:58 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	ast@...mgrid.com
Cc:	edumazet@...gle.com, jhs@...atatu.com, daniel@...earbox.net,
	netdev@...r.kernel.org
Subject: Re: [PATCH v2 net-next 2/2] bpf: allow programs to write to
 certain skb fields

From: Alexei Starovoitov <ast@...mgrid.com>
Date: Thu,  4 Jun 2015 10:11:54 -0700

> allow programs read/write skb->mark, tc_index fields and
> ((struct qdisc_skb_cb *)cb)->data.
> 
> mark and tc_index are generically useful in TC.
> cb[0]-cb[4] are primarily used to pass arguments from one
> program to another called via bpf_tail_call() which can
> be seen in sockex3_kern.c example.
> 
> All fields of 'struct __sk_buff' are readable to socket and tc_cls_act progs.
> mark, tc_index are writeable from tc_cls_act only.
> cb[0]-cb[4] are writeable by both sockets and tc_cls_act.
> 
> Add verifier tests and improve sample code.
> 
> Signed-off-by: Alexei Starovoitov <ast@...mgrid.com>

Applied.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html