Stanislav Fomichev 772412176f bpf: Allow rewriting to ports under ip_unprivileged_port_start ... At the moment, BPF_CGROUP_INET{4,6}_BIND hooks can rewrite user_port to the privileged ones (< ip_unprivileged_port_start), but it will be rejected later on in the __inet_bind or __inet6_bind. Let's add another return value to indicate that CAP_NET_BIND_SERVICE check should be ignored. Use the same idea as we currently use in cgroup/egress where bit #1 indicates CN. Instead, for cgroup/bind{4,6}, bit #1 indicates that CAP_NET_BIND_SERVICE should be bypassed. v5: - rename flags to be less confusing (Andrey Ignatov) - rework BPF_PROG_CGROUP_INET_EGRESS_RUN_ARRAY to work on flags and accept BPF_RET_SET_CN (no behavioral changes) v4: - Add missing IPv6 support (Martin KaFai Lau) v3: - Update description (Martin KaFai Lau) - Fix capability restore in selftest (Martin KaFai Lau) v2: - Switch to explicit return code (Martin KaFai Lau) Signed-off-by: Stanislav Fomichev <sdf@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Reviewed-by: Martin KaFai Lau <kafai@fb.com> Acked-by: Andrey Ignatov <rdna@fb.com> Link: https://lore.kernel.org/bpf/20210127193140.3170382-1-sdf@google.com		2021-01-27 18:18:15 -08:00
..
preload	bpf: Remove unnecessary <argp.h> include from preload/iterators	2021-01-08 13:39:24 -08:00
arraymap.c	bpf: Eliminate rlimit-based memory accounting for arraymap maps	2020-12-02 18:32:46 -08:00
bpf_inode_storage.c	bpf: Fix typo in bpf_inode_storage.c	2021-01-12 16:07:57 +01:00
bpf_iter.c
bpf_local_storage.c	bpf: Eliminate rlimit-based memory accounting for bpf local storage maps	2020-12-02 18:32:47 -08:00
bpf_lru_list.c
bpf_lru_list.h
bpf_lsm.c	bpf: Add a BPF helper for getting the IMA hash of an inode	2020-11-26 00:04:04 +01:00
bpf_struct_ops.c	bpf: Eliminate rlimit-based memory accounting for bpf_struct_ops maps	2020-12-02 18:32:46 -08:00
bpf_struct_ops_types.h
bpf_task_storage.c	bpf: Local storage helpers should check nullness of owner ptr passed	2021-01-12 16:07:56 +01:00
btf.c	bpf: Permit size-0 datasec	2021-01-20 14:14:09 -08:00
cgroup.c	bpf: Allow rewriting to ports under ip_unprivileged_port_start	2021-01-27 18:18:15 -08:00
core.c	bpf: Add bitwise atomic instructions	2021-01-14 18:34:29 -08:00
cpumap.c	net, xdp: Introduce __xdp_build_skb_from_frame utility routine	2021-01-20 14:10:35 -08:00
devmap.c	bpf: Eliminate rlimit-based memory accounting for devmap maps	2020-12-02 18:32:46 -08:00
disasm.c	bpf: Change 'BPF_ADD' to 'BPF_AND' in print_bpf_insn()	2021-01-27 22:23:46 +01:00
disasm.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295	2019-06-05 17:36:38 +02:00
dispatcher.c
hashtab.c	bpf: Add schedule point in htab_init_buckets()	2020-12-22 00:14:31 +01:00
helpers.c	bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback	2021-01-19 22:04:08 +01:00
inode.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-09-22 16:45:34 -07:00
local_storage.c	bpf: Eliminate rlimit-based memory accounting for cgroup storage maps	2020-12-02 18:32:46 -08:00
lpm_trie.c	bpf: Eliminate rlimit-based memory accounting for lpm_trie maps	2020-12-02 18:32:46 -08:00
Makefile	Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next	2020-11-14 09:13:41 -08:00
map_in_map.c
map_in_map.h
map_iter.c
net_namespace.c
offload.c
percpu_freelist.c	bpf: Use raw_spin_trylock() for pcpu_freelist_push/pop in NMI	2020-10-06 00:04:11 +02:00
percpu_freelist.h
prog_iter.c
queue_stack_maps.c	bpf: Eliminate rlimit-based memory accounting for queue_stack_maps maps	2020-12-02 18:32:46 -08:00
reuseport_array.c	bpf: Eliminate rlimit-based memory accounting for reuseport_array maps	2020-12-02 18:32:47 -08:00
ringbuf.c	bpf: Eliminate rlimit-based memory accounting for bpf ringbuffer	2020-12-02 18:32:47 -08:00
stackmap.c	bpf: Add size arg to build_id_parse function	2021-01-14 19:29:58 -08:00
syscall.c	bpf: Prevent double bpf_prog_put call from bpf_tracing_prog_attach	2021-01-12 00:17:34 +01:00
sysfs_btf.c
task_iter.c	bpf: Fix a task_iter bug caused by a merge conflict resolution	2021-01-03 01:41:32 +01:00
tnum.c	bpf: Verifier, do explicit ALU32 bounds tracking	2020-03-30 14:59:53 -07:00
trampoline.c	bpf: Move prog->aux->linked_prog and trampoline into bpf_link on attach	2020-09-29 13:09:23 -07:00
verifier.c	bpf: Allow rewriting to ports under ip_unprivileged_port_start	2021-01-27 18:18:15 -08:00