| // SPDX-License-Identifier: GPL-2.0 |
| /* Copyright (C) 2023 Chuyi Zhou <zhouchuyi@bytedance.com> */ |
| |
| #include "vmlinux.h" |
| #include <errno.h> |
| #include <bpf/bpf_helpers.h> |
| #include <bpf/bpf_tracing.h> |
| #include "bpf_misc.h" |
| #include "bpf_experimental.h" |
| |
| char _license[] SEC("license") = "GPL"; |
| |
| struct cgroup *bpf_cgroup_acquire(struct cgroup *p) __ksym; |
| struct cgroup *bpf_cgroup_from_id(u64 cgid) __ksym; |
| void bpf_cgroup_release(struct cgroup *p) __ksym; |
| |
| pid_t target_pid; |
| int css_task_cnt; |
| u64 cg_id; |
| |
| SEC("lsm/file_mprotect") |
| int BPF_PROG(iter_css_task_for_each, struct vm_area_struct *vma, |
| unsigned long reqprot, unsigned long prot, int ret) |
| { |
| struct task_struct *cur_task = bpf_get_current_task_btf(); |
| struct cgroup_subsys_state *css; |
| struct task_struct *task; |
| struct cgroup *cgrp; |
| |
| if (cur_task->pid != target_pid) |
| return ret; |
| |
| cgrp = bpf_cgroup_from_id(cg_id); |
| |
| if (!cgrp) |
| return -EPERM; |
| |
| css = &cgrp->self; |
| css_task_cnt = 0; |
| |
| bpf_for_each(css_task, task, css, CSS_TASK_ITER_PROCS) |
| if (task->pid == target_pid) |
| css_task_cnt++; |
| |
| bpf_cgroup_release(cgrp); |
| |
| return -EPERM; |
| } |
| |
| static inline u64 cgroup_id(struct cgroup *cgrp) |
| { |
| return cgrp->kn->id; |
| } |
| |
| SEC("?iter/cgroup") |
| int cgroup_id_printer(struct bpf_iter__cgroup *ctx) |
| { |
| struct seq_file *seq = ctx->meta->seq; |
| struct cgroup *cgrp = ctx->cgroup; |
| struct cgroup_subsys_state *css; |
| struct task_struct *task; |
| |
| /* epilogue */ |
| if (cgrp == NULL) { |
| BPF_SEQ_PRINTF(seq, "epilogue\n"); |
| return 0; |
| } |
| |
| /* prologue */ |
| if (ctx->meta->seq_num == 0) |
| BPF_SEQ_PRINTF(seq, "prologue\n"); |
| |
| BPF_SEQ_PRINTF(seq, "%8llu\n", cgroup_id(cgrp)); |
| |
| css = &cgrp->self; |
| css_task_cnt = 0; |
| bpf_for_each(css_task, task, css, CSS_TASK_ITER_PROCS) { |
| if (task->pid == target_pid) |
| css_task_cnt++; |
| } |
| |
| return 0; |
| } |
| |
| SEC("?fentry.s/" SYS_PREFIX "sys_getpgid") |
| int BPF_PROG(iter_css_task_for_each_sleep) |
| { |
| u64 cgrp_id = bpf_get_current_cgroup_id(); |
| struct cgroup *cgrp = bpf_cgroup_from_id(cgrp_id); |
| struct cgroup_subsys_state *css; |
| struct task_struct *task; |
| |
| if (cgrp == NULL) |
| return 0; |
| css = &cgrp->self; |
| |
| bpf_for_each(css_task, task, css, CSS_TASK_ITER_PROCS) { |
| |
| } |
| bpf_cgroup_release(cgrp); |
| return 0; |
| } |