summaryrefslogtreecommitdiff
path: root/src/core/bpf-firewall.c
Commit message (Expand)AuthorAgeFilesLines
* core: add UNIT_GET_SLICE() helperLennart Poettering2021-05-251-2/+2
* bpf-firewall: attach with BPF_F_ALLOW_MULTI if kernel supportsJulia Kartseva2021-04-091-6/+3
* bpf: do not use structured initialization for bpf_attrLuca Boccassi2021-01-101-11/+13
* core: detect_container() may return negative errnoYu Watanabe2020-12-141-1/+1
* core: use SYNTHETIC_ERRNO() macroYu Watanabe2020-11-271-8/+4
* license: LGPL-2.1+ -> LGPL-2.1-or-laterYu Watanabe2020-11-091-1/+1
* core: make log_unit_error() or friends return voidYu Watanabe2020-09-091-5/+5
* tree-wide: define iterator inside of the macroZbigniew Jędrzejewski-Szmek2020-09-081-2/+1
* tree: wide "the the" and other trivial grammar fixesZbigniew Jędrzejewski-Szmek2020-07-021-1/+1
* core/bpf-firewall: use the correct cleanup functionZbigniew Jędrzejewski-Szmek2020-06-241-3/+2
* tree-wide: use set_ensure_put()Zbigniew Jędrzejewski-Szmek2020-06-221-10/+3
* core: constify bpf program arraysZbigniew Jędrzejewski-Szmek2019-11-101-5/+5
* tree-wide: drop string.h when string-util.h or friends are includedYu Watanabe2019-11-041-1/+0
* Create src/shared/unit-file.[ch] for unit-file related opsZbigniew Jędrzejewski-Szmek2019-07-191-0/+1
* bpf-firewall: custom BPF programs through IP(Ingress|Egress)FilterPath=Kai Lüke2019-06-251-2/+104
* bpf-firewall: optimization for IPAddressXYZ="any" (and unprivileged users)Anita Zhang2019-06-221-36/+61
* bpf: use more TAKE_FD()Lennart Poettering2019-06-211-4/+2
* Silence warning about BPF firewall in containersZbigniew Jędrzejewski-Szmek2019-06-041-11/+26
* Move warning about unsupported BPF firewall right before the firewall would b...Zbigniew Jędrzejewski-Szmek2019-06-041-8/+18
* tree-wide: drop several missing_*.h and import relevant headers from kernel-5.0Yu Watanabe2019-04-111-1/+1
* util: split out memcmp()/memset() related calls into memory-util.[ch]Lennart Poettering2019-03-131-0/+1
* tree-wide: drop missing.h from headers and use relevant missing_*.hYu Watanabe2018-12-061-0/+1
* bpf-firewall: always use log_unit_xyz() insteadof log_xyz()Lennart Poettering2018-10-091-12/+12
* core: fix the check if CONFIG_CGROUP_BPF is onAlexander Filippov2018-09-181-8/+8
* tree-wide: drop empty lines in commentsYu Watanabe2018-07-231-1/+0
* tree-wide: drop copyright headers from frequent contributorsZbigniew Jędrzejewski-Szmek2018-06-201-3/+0
* tree-wide: beautify remaining copyright statementsLennart Poettering2018-06-141-1/+1
* tree-wide: drop 'This file is part of systemd' blurbLennart Poettering2018-06-141-2/+0
* Fix three uses of bogus errno value in logs (and returned value in one case)Zbigniew Jędrzejewski-Szmek2018-04-241-2/+3
* tree-wide: avoid assignment of r just to use in a comparisonZbigniew Jędrzejewski-Szmek2018-04-241-4/+2
* tree-wide: drop license boilerplateZbigniew Jędrzejewski-Szmek2018-04-061-13/+0
* tree-wide: use TAKE_PTR() and TAKE_FD() macrosYu Watanabe2018-04-051-2/+1
* bpf: reset "extra" IP accounting counters when turning off IP accounting for ...Lennart Poettering2018-02-211-2/+10
* bpf: rework how we keep track and attach cgroup bpf programsLennart Poettering2018-02-211-27/+15
* bpf: use BPF_F_ALLOW_MULTI flag if it is availableLennart Poettering2018-02-211-18/+43
* bpf-program: optionally take fd of program to detachLennart Poettering2018-02-211-2/+2
* bpf: beef up bpf detection, check if BPF_F_ALLOW_MULTI is supportedLennart Poettering2018-02-211-14/+46
* bpf-firewall: fix warning textLennart Poettering2018-02-121-2/+2
* cgroup: add a new "can_delegate" flag to the unit vtable, and set it for scop...Lennart Poettering2018-02-121-2/+2
* bpf-firewall: actually invoke BPF_PROG_ATTACH to check whether cgroup/bpf is ...Lennart Poettering2017-11-291-3/+31
* Add SPDX license identifiers to source files under the LGPLZbigniew Jędrzejewski-Szmek2017-11-191-0/+1
* bpf-firewall: properly handle kernels where BPF cgroup is disabled but TRIE m...Lennart Poettering2017-11-131-1/+26
* bpf: set BPF_F_ALLOW_OVERRIDE when attaching a cgroup program if Delegate=yes...Lennart Poettering2017-09-221-2/+10
* Add firewall eBPF compilerDaniel Mack2017-09-221-0/+672