diff options
| author | Mauricio Vásquez <mauricio@kinvolk.io> | 2021-01-21 10:45:38 -0500 |
|---|---|---|
| committer | Mauricio Vásquez <mauricio@kinvolk.io> | 2021-08-18 15:55:53 -0500 |
| commit | dc83b840d33e30fcd4363e26b933fa5cce410c4a (patch) | |
| tree | b015f890daa1e81473e14991982c4b079799408e /src/core/cgroup.h | |
| parent | 0d341eccef06cb27bb79064b92264a45e859192d (diff) | |
| download | systemd-dc83b840d33e30fcd4363e26b933fa5cce410c4a.tar.gz | |
core: add RestrictNetworkInterfaces= BPF program source code
The code is composed by two BPF_PROG_TYPE_CGROUP_SKB programs that
are loaded in the cgroup inet ingress and egress hooks
(BPF_CGROUP_INET_{INGRESS|EGRESS}).
The decision to let a packet pass or not is based on a map that contains
the indexes of the interfaces.
Signed-off-by: Mauricio Vásquez <mauricio@kinvolk.io>
Diffstat (limited to 'src/core/cgroup.h')
0 files changed, 0 insertions, 0 deletions