netdev - Re: [PATCH net-next v5 3/3] A Sample of using socket cookie and uid for traffic monitoring

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <58D060C8.7010507@iogearbox.net>
Date:   Tue, 21 Mar 2017 00:07:52 +0100
From:   Daniel Borkmann <daniel@...earbox.net>
To:     Chenbo Feng <chenbofeng.kernel@...il.com>, netdev@...r.kernel.org,
        Alexei Starovoitov <ast@...com>
CC:     Lorenzo Colitti <lorenzo@...gle.com>,
        Willem de Bruijn <willemb@...gle.com>,
        Chenbo Feng <fengc@...gle.com>
Subject: Re: [PATCH net-next v5 3/3] A Sample of using socket cookie and uid
 for traffic monitoring

On 03/20/2017 07:41 PM, Chenbo Feng wrote:
> From: Chenbo Feng <fengc@...gle.com>
>
> Add a sample program to demostrate the possible usage of
> get_socket_cookie and get_socket_uid helper function. The program will
> store bytes and packets counting of in/out traffic monitored by iptables
> and store the stats in a bpf map in per socket base. The owner uid of
> the socket will be stored as part of the data entry. A shell script for
> running the program is also included.
>
> Signed-off-by: Chenbo Feng <fengc@...gle.com>
[...]
> +int main(int argc, char *argv[])
> +{
> +	if (argc > 2) {
> +		printf("Too many argument provided\n");
> +		return 1;
[...]
> +
> +	return 0;
> +}
> +
> +
> +
> +
> +
> +

Did these bits slip in accidentally?

> diff --git a/samples/bpf/libbpf.h b/samples/bpf/libbpf.h
> index 3705fba..8ab36a0 100644
> --- a/samples/bpf/libbpf.h
> +++ b/samples/bpf/libbpf.h
> @@ -135,6 +135,16 @@ struct bpf_insn;
>   		.off   = OFF,					\
>   		.imm   = 0 })
>
[...]