 89aa075832
			
		
	
	
	89aa075832
	
	
	
		
			
			introduce new setsockopt() command: setsockopt(sock, SOL_SOCKET, SO_ATTACH_BPF, &prog_fd, sizeof(prog_fd)) where prog_fd was received from syscall bpf(BPF_PROG_LOAD, attr, ...) and attr->prog_type == BPF_PROG_TYPE_SOCKET_FILTER setsockopt() calls bpf_prog_get() which increments refcnt of the program, so it doesn't get unloaded while socket is using the program. The same eBPF program can be attached to multiple sockets. User task exit automatically closes socket which calls sk_filter_uncharge() which decrements refcnt of eBPF program Signed-off-by: Alexei Starovoitov <ast@plumgrid.com> Signed-off-by: David S. Miller <davem@davemloft.net>
		
			
				
	
	
		
			106 lines
		
	
	
	
		
			3 KiB
			
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			106 lines
		
	
	
	
		
			3 KiB
			
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * This file is subject to the terms and conditions of the GNU General Public
 | |
|  * License.  See the file "COPYING" in the main directory of this archive
 | |
|  * for more details.
 | |
|  *
 | |
|  * Copyright (C) 1997, 1999, 2000, 2001 Ralf Baechle
 | |
|  * Copyright (C) 2000, 2001 Silicon Graphics, Inc.
 | |
|  */
 | |
| #ifndef _UAPI_ASM_SOCKET_H
 | |
| #define _UAPI_ASM_SOCKET_H
 | |
| 
 | |
| #include <asm/sockios.h>
 | |
| 
 | |
| /*
 | |
|  * For setsockopt(2)
 | |
|  *
 | |
|  * This defines are ABI conformant as far as Linux supports these ...
 | |
|  */
 | |
| #define SOL_SOCKET	0xffff
 | |
| 
 | |
| #define SO_DEBUG	0x0001	/* Record debugging information.  */
 | |
| #define SO_REUSEADDR	0x0004	/* Allow reuse of local addresses.  */
 | |
| #define SO_KEEPALIVE	0x0008	/* Keep connections alive and send
 | |
| 				   SIGPIPE when they die.  */
 | |
| #define SO_DONTROUTE	0x0010	/* Don't do local routing.  */
 | |
| #define SO_BROADCAST	0x0020	/* Allow transmission of
 | |
| 				   broadcast messages.	*/
 | |
| #define SO_LINGER	0x0080	/* Block on close of a reliable
 | |
| 				   socket to transmit pending data.  */
 | |
| #define SO_OOBINLINE 0x0100	/* Receive out-of-band data in-band.  */
 | |
| #define SO_REUSEPORT 0x0200	/* Allow local address and port reuse.  */
 | |
| 
 | |
| #define SO_TYPE		0x1008	/* Compatible name for SO_STYLE.  */
 | |
| #define SO_STYLE	SO_TYPE /* Synonym */
 | |
| #define SO_ERROR	0x1007	/* get error status and clear */
 | |
| #define SO_SNDBUF	0x1001	/* Send buffer size. */
 | |
| #define SO_RCVBUF	0x1002	/* Receive buffer. */
 | |
| #define SO_SNDLOWAT	0x1003	/* send low-water mark */
 | |
| #define SO_RCVLOWAT	0x1004	/* receive low-water mark */
 | |
| #define SO_SNDTIMEO	0x1005	/* send timeout */
 | |
| #define SO_RCVTIMEO	0x1006	/* receive timeout */
 | |
| #define SO_ACCEPTCONN	0x1009
 | |
| #define SO_PROTOCOL	0x1028	/* protocol type */
 | |
| #define SO_DOMAIN	0x1029	/* domain/socket family */
 | |
| 
 | |
| /* linux-specific, might as well be the same as on i386 */
 | |
| #define SO_NO_CHECK	11
 | |
| #define SO_PRIORITY	12
 | |
| #define SO_BSDCOMPAT	14
 | |
| 
 | |
| #define SO_PASSCRED	17
 | |
| #define SO_PEERCRED	18
 | |
| 
 | |
| /* Security levels - as per NRL IPv6 - don't actually do anything */
 | |
| #define SO_SECURITY_AUTHENTICATION		22
 | |
| #define SO_SECURITY_ENCRYPTION_TRANSPORT	23
 | |
| #define SO_SECURITY_ENCRYPTION_NETWORK		24
 | |
| 
 | |
| #define SO_BINDTODEVICE		25
 | |
| 
 | |
| /* Socket filtering */
 | |
| #define SO_ATTACH_FILTER	26
 | |
| #define SO_DETACH_FILTER	27
 | |
| #define SO_GET_FILTER		SO_ATTACH_FILTER
 | |
| 
 | |
| #define SO_PEERNAME		28
 | |
| #define SO_TIMESTAMP		29
 | |
| #define SCM_TIMESTAMP		SO_TIMESTAMP
 | |
| 
 | |
| #define SO_PEERSEC		30
 | |
| #define SO_SNDBUFFORCE		31
 | |
| #define SO_RCVBUFFORCE		33
 | |
| #define SO_PASSSEC		34
 | |
| #define SO_TIMESTAMPNS		35
 | |
| #define SCM_TIMESTAMPNS		SO_TIMESTAMPNS
 | |
| 
 | |
| #define SO_MARK			36
 | |
| 
 | |
| #define SO_TIMESTAMPING		37
 | |
| #define SCM_TIMESTAMPING	SO_TIMESTAMPING
 | |
| 
 | |
| #define SO_RXQ_OVFL		40
 | |
| 
 | |
| #define SO_WIFI_STATUS		41
 | |
| #define SCM_WIFI_STATUS		SO_WIFI_STATUS
 | |
| #define SO_PEEK_OFF		42
 | |
| 
 | |
| /* Instruct lower device to use last 4-bytes of skb data as FCS */
 | |
| #define SO_NOFCS		43
 | |
| 
 | |
| #define SO_LOCK_FILTER		44
 | |
| 
 | |
| #define SO_SELECT_ERR_QUEUE	45
 | |
| 
 | |
| #define SO_BUSY_POLL		46
 | |
| 
 | |
| #define SO_MAX_PACING_RATE	47
 | |
| 
 | |
| #define SO_BPF_EXTENSIONS	48
 | |
| 
 | |
| #define SO_INCOMING_CPU		49
 | |
| 
 | |
| #define SO_ATTACH_BPF		50
 | |
| #define SO_DETACH_BPF		SO_DETACH_FILTER
 | |
| 
 | |
| #endif /* _UAPI_ASM_SOCKET_H */
 |