From ed7187684685430ee6de49e551775badbee39761 Mon Sep 17 00:00:00 2001 From: Matthew Hagan Date: Sun, 16 Jan 2022 00:21:17 +0000 Subject: iprule: add support for uidrange Allow for per-user routing policies via the uidrange iprule option. Option allows for a single UID or range of UIDs. Signed-off-by: Matthew Hagan Signed-off-by: Hans Dedecker --- iprule.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'iprule.c') diff --git a/iprule.c b/iprule.c index b9e16a5..0956073 100644 --- a/iprule.c +++ b/iprule.c @@ -44,6 +44,7 @@ enum { RULE_ACTION, RULE_GOTO, RULE_SUP_PREFIXLEN, + RULE_UIDRANGE, RULE_DISABLED, __RULE_MAX }; @@ -59,6 +60,7 @@ static const struct blobmsg_policy rule_attr[__RULE_MAX] = { [RULE_FWMARK] = { .name = "mark", .type = BLOBMSG_TYPE_STRING }, [RULE_LOOKUP] = { .name = "lookup", .type = BLOBMSG_TYPE_STRING }, [RULE_SUP_PREFIXLEN] = { .name = "suppress_prefixlength", .type = BLOBMSG_TYPE_INT32 }, + [RULE_UIDRANGE] = { .name = "uidrange", .type = BLOBMSG_TYPE_STRING }, [RULE_ACTION] = { .name = "action", .type = BLOBMSG_TYPE_STRING }, [RULE_GOTO] = { .name = "goto", .type = BLOBMSG_TYPE_INT32 }, [RULE_DISABLED] = { .name = "disabled", .type = BLOBMSG_TYPE_BOOL }, @@ -282,6 +284,18 @@ iprule_add(struct blob_attr *attr, bool v6) rule->flags |= IPRULE_SUP_PREFIXLEN; } + if ((cur = tb[RULE_UIDRANGE]) != NULL) { + int ret = sscanf(blobmsg_get_string(cur), "%u-%u", &rule->uidrange_start, &rule->uidrange_end); + + if (ret == 1) + rule->uidrange_end = rule->uidrange_start; + else if (ret != 2) { + DPRINTF("Failed to parse UID range: %s\n", (char *) blobmsg_data(cur)); + goto error; + } + rule->flags |= IPRULE_UIDRANGE; + } + if ((cur = tb[RULE_ACTION]) != NULL) { if (!system_resolve_iprule_action(blobmsg_data(cur), &rule->action)) { DPRINTF("Failed to parse rule action: %s\n", (char *) blobmsg_data(cur)); -- cgit v1.2.1