bybrooklyn/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-04-18 06:44:00 -04:00
Code Issues Packages Projects Releases Wiki Activity

io_uring/bpf_filter: allow filtering on contents of struct open_how

Browse Source 
This adds custom filtering for IORING_OP_OPENAT and IORING_OP_OPENAT2,
where the open_how flags, mode, and resolve can be checked by filters.

Signed-off-by: Jens Axboe <axboe@kernel.dk>
This commit is contained in:
Jens Axboe
2026-01-19 15:59:54 -07:00
parent cff1c26b42
commit 8768770cf5
4 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
include/uapi/linux/io_uring/bpf_filter.h
View File

@@ -22,6 +22,11 @@ struct io_uring_bpf_ctx {
__u32 type; __u32 type;
__u32 protocol; __u32 protocol;
} socket; } socket;
struct {
__u64 flags;
__u64 mode;
__u64 resolve;
} open;
}; };
}; };

6
io_uring/bpf_filter.c
View File

@@ -12,6 +12,7 @@
#include "io_uring.h" #include "io_uring.h"
#include "bpf_filter.h" #include "bpf_filter.h"
#include "net.h" #include "net.h"
#include "openclose.h"
struct io_bpf_filter { struct io_bpf_filter {
struct bpf_prog *prog; struct bpf_prog *prog;
@@ -40,6 +41,11 @@ static void io_uring_populate_bpf_ctx(struct io_uring_bpf_ctx *bctx,
bctx->pdu_size = sizeof(bctx->socket); bctx->pdu_size = sizeof(bctx->socket);
io_socket_bpf_populate(bctx, req); io_socket_bpf_populate(bctx, req);
break; break;
case IORING_OP_OPENAT:
case IORING_OP_OPENAT2:
bctx->pdu_size = sizeof(bctx->open);
io_openat_bpf_populate(bctx, req);
break;
} }
} }

9
io_uring/openclose.c
View File

@@ -85,6 +85,15 @@ static int __io_openat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe
return 0; return 0;
} }
void io_openat_bpf_populate(struct io_uring_bpf_ctx *bctx, struct io_kiocb *req)
{
struct io_open *open = io_kiocb_to_cmd(req, struct io_open);
bctx->open.flags = open->how.flags;
bctx->open.mode = open->how.mode;
bctx->open.resolve = open->how.resolve;
}
int io_openat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe) int io_openat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe)
{ {
struct io_open *open = io_kiocb_to_cmd(req, struct io_open); struct io_open *open = io_kiocb_to_cmd(req, struct io_open);

3
io_uring/openclose.h
View File

@@ -1,11 +1,14 @@
// SPDX-License-Identifier: GPL-2.0 // SPDX-License-Identifier: GPL-2.0
#include "bpf_filter.h"
int __io_close_fixed(struct io_ring_ctx *ctx, unsigned int issue_flags, int __io_close_fixed(struct io_ring_ctx *ctx, unsigned int issue_flags,
unsigned int offset); unsigned int offset);
int io_openat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe); int io_openat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe);
int io_openat(struct io_kiocb *req, unsigned int issue_flags); int io_openat(struct io_kiocb *req, unsigned int issue_flags);
void io_open_cleanup(struct io_kiocb *req); void io_open_cleanup(struct io_kiocb *req);
void io_openat_bpf_populate(struct io_uring_bpf_ctx *bctx, struct io_kiocb *req);
int io_openat2_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe); int io_openat2_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe);
int io_openat2(struct io_kiocb *req, unsigned int issue_flags); int io_openat2(struct io_kiocb *req, unsigned int issue_flags);