| /* SPDX-License-Identifier: GPL-2.0 */ |
| /* Copyright (c) 2021 Hengqi Chen */ |
| |
| #include "vmlinux.h" |
| #include <bpf/bpf_helpers.h> |
| #include <bpf/bpf_tracing.h> |
| #include "bpf_tracing_net.h" |
| |
| const volatile pid_t my_pid = 0; |
| char path[256] = {}; |
| |
| SEC("fentry/unix_listen") |
| int BPF_PROG(unix_listen, struct socket *sock, int backlog) |
| { |
| pid_t pid = bpf_get_current_pid_tgid() >> 32; |
| struct unix_sock *unix_sk; |
| int i, len; |
| |
| if (pid != my_pid) |
| return 0; |
| |
| unix_sk = (struct unix_sock *)bpf_skc_to_unix_sock(sock->sk); |
| if (!unix_sk) |
| return 0; |
| |
| if (unix_sk->addr->name->sun_path[0]) |
| return 0; |
| |
| len = unix_sk->addr->len - sizeof(short); |
| path[0] = '@'; |
| for (i = 1; i < len; i++) { |
| if (i >= sizeof(struct sockaddr_un)) |
| break; |
| |
| path[i] = unix_sk->addr->name->sun_path[i]; |
| } |
| return 0; |
| } |
| |
| char _license[] SEC("license") = "GPL"; |