Thomas Gleixner | 2874c5f | 2019-05-27 08:55:01 +0200 | [diff] [blame] | 1 | // SPDX-License-Identifier: GPL-2.0-or-later |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 2 | /* |
| 3 | * net/sched/cls_cgroup.c Control Group Classifier |
| 4 | * |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 5 | * Authors: Thomas Graf <tgraf@suug.ch> |
| 6 | */ |
| 7 | |
| 8 | #include <linux/module.h> |
Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 9 | #include <linux/slab.h> |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 10 | #include <linux/skbuff.h> |
Herbert Xu | f845172 | 2010-05-24 00:12:34 -0700 | [diff] [blame] | 11 | #include <linux/rcupdate.h> |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 12 | #include <net/rtnetlink.h> |
| 13 | #include <net/pkt_cls.h> |
Herbert Xu | f845172 | 2010-05-24 00:12:34 -0700 | [diff] [blame] | 14 | #include <net/sock.h> |
| 15 | #include <net/cls_cgroup.h> |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 16 | |
Eric Dumazet | cc7ec45 | 2011-01-19 19:26:56 +0000 | [diff] [blame] | 17 | struct cls_cgroup_head { |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 18 | u32 handle; |
| 19 | struct tcf_exts exts; |
| 20 | struct tcf_ematch_tree ematches; |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 21 | struct tcf_proto *tp; |
Cong Wang | aaa908f | 2018-05-23 15:26:53 -0700 | [diff] [blame] | 22 | struct rcu_work rwork; |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 23 | }; |
| 24 | |
Eric Dumazet | dc7f9f6 | 2011-07-05 23:25:42 +0000 | [diff] [blame] | 25 | static int cls_cgroup_classify(struct sk_buff *skb, const struct tcf_proto *tp, |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 26 | struct tcf_result *res) |
| 27 | { |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 28 | struct cls_cgroup_head *head = rcu_dereference_bh(tp->root); |
Daniel Borkmann | b87a173 | 2015-07-15 14:21:41 +0200 | [diff] [blame] | 29 | u32 classid = task_get_classid(skb); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 30 | |
Matteo Croce | 594725d | 2019-05-02 17:13:18 +0200 | [diff] [blame] | 31 | if (unlikely(!head)) |
| 32 | return -1; |
Paul Menage | e65fcfd | 2009-05-26 20:47:02 -0700 | [diff] [blame] | 33 | if (!classid) |
| 34 | return -1; |
Paul Menage | e65fcfd | 2009-05-26 20:47:02 -0700 | [diff] [blame] | 35 | if (!tcf_em_tree_match(skb, &head->ematches, NULL)) |
| 36 | return -1; |
| 37 | |
| 38 | res->classid = classid; |
| 39 | res->class = 0; |
Daniel Borkmann | b87a173 | 2015-07-15 14:21:41 +0200 | [diff] [blame] | 40 | |
Paul Menage | e65fcfd | 2009-05-26 20:47:02 -0700 | [diff] [blame] | 41 | return tcf_exts_exec(skb, &head->exts, res); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 42 | } |
| 43 | |
WANG Cong | 8113c09 | 2017-08-04 21:31:43 -0700 | [diff] [blame] | 44 | static void *cls_cgroup_get(struct tcf_proto *tp, u32 handle) |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 45 | { |
WANG Cong | 8113c09 | 2017-08-04 21:31:43 -0700 | [diff] [blame] | 46 | return NULL; |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 47 | } |
| 48 | |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 49 | static int cls_cgroup_init(struct tcf_proto *tp) |
| 50 | { |
| 51 | return 0; |
| 52 | } |
| 53 | |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 54 | static const struct nla_policy cgroup_policy[TCA_CGROUP_MAX + 1] = { |
| 55 | [TCA_CGROUP_EMATCHES] = { .type = NLA_NESTED }, |
| 56 | }; |
| 57 | |
Cong Wang | ed14816 | 2017-11-06 13:47:22 -0800 | [diff] [blame] | 58 | static void __cls_cgroup_destroy(struct cls_cgroup_head *head) |
| 59 | { |
| 60 | tcf_exts_destroy(&head->exts); |
| 61 | tcf_em_tree_destroy(&head->ematches); |
| 62 | tcf_exts_put_net(&head->exts); |
| 63 | kfree(head); |
| 64 | } |
| 65 | |
Cong Wang | b1b5b04 | 2017-10-26 18:24:31 -0700 | [diff] [blame] | 66 | static void cls_cgroup_destroy_work(struct work_struct *work) |
| 67 | { |
Cong Wang | aaa908f | 2018-05-23 15:26:53 -0700 | [diff] [blame] | 68 | struct cls_cgroup_head *head = container_of(to_rcu_work(work), |
Cong Wang | b1b5b04 | 2017-10-26 18:24:31 -0700 | [diff] [blame] | 69 | struct cls_cgroup_head, |
Cong Wang | aaa908f | 2018-05-23 15:26:53 -0700 | [diff] [blame] | 70 | rwork); |
Cong Wang | b1b5b04 | 2017-10-26 18:24:31 -0700 | [diff] [blame] | 71 | rtnl_lock(); |
Cong Wang | ed14816 | 2017-11-06 13:47:22 -0800 | [diff] [blame] | 72 | __cls_cgroup_destroy(head); |
Cong Wang | b1b5b04 | 2017-10-26 18:24:31 -0700 | [diff] [blame] | 73 | rtnl_unlock(); |
| 74 | } |
| 75 | |
Benjamin LaHaise | c1b5273 | 2013-01-14 05:15:39 +0000 | [diff] [blame] | 76 | static int cls_cgroup_change(struct net *net, struct sk_buff *in_skb, |
Eric W. Biederman | af4c664 | 2012-05-25 13:42:45 -0600 | [diff] [blame] | 77 | struct tcf_proto *tp, unsigned long base, |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 78 | u32 handle, struct nlattr **tca, |
Vlad Buslov | 12db03b | 2019-02-11 10:55:45 +0200 | [diff] [blame] | 79 | void **arg, bool ovr, bool rtnl_held, |
Alexander Aring | 7306db3 | 2018-01-18 11:20:51 -0500 | [diff] [blame] | 80 | struct netlink_ext_ack *extack) |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 81 | { |
Eric Dumazet | cc7ec45 | 2011-01-19 19:26:56 +0000 | [diff] [blame] | 82 | struct nlattr *tb[TCA_CGROUP_MAX + 1]; |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 83 | struct cls_cgroup_head *head = rtnl_dereference(tp->root); |
| 84 | struct cls_cgroup_head *new; |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 85 | int err; |
| 86 | |
Minoru Usui | 52ea3a5 | 2009-06-09 04:03:09 -0700 | [diff] [blame] | 87 | if (!tca[TCA_OPTIONS]) |
| 88 | return -EINVAL; |
| 89 | |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 90 | if (!head && !handle) |
| 91 | return -EINVAL; |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 92 | |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 93 | if (head && handle != head->handle) |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 94 | return -ENOENT; |
| 95 | |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 96 | new = kzalloc(sizeof(*head), GFP_KERNEL); |
| 97 | if (!new) |
| 98 | return -ENOBUFS; |
| 99 | |
Cong Wang | 1421510 | 2019-02-20 21:37:42 -0800 | [diff] [blame] | 100 | err = tcf_exts_init(&new->exts, net, TCA_CGROUP_ACT, TCA_CGROUP_POLICE); |
WANG Cong | b9a24bb | 2016-08-19 12:36:54 -0700 | [diff] [blame] | 101 | if (err < 0) |
| 102 | goto errout; |
Jiri Pirko | 18b5427 | 2014-12-02 18:00:36 +0100 | [diff] [blame] | 103 | new->handle = handle; |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 104 | new->tp = tp; |
Johannes Berg | 8cb0817 | 2019-04-26 14:07:28 +0200 | [diff] [blame] | 105 | err = nla_parse_nested_deprecated(tb, TCA_CGROUP_MAX, |
| 106 | tca[TCA_OPTIONS], cgroup_policy, |
| 107 | NULL); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 108 | if (err < 0) |
John Fastabend | d14cbfc8 | 2014-09-15 23:31:17 -0700 | [diff] [blame] | 109 | goto errout; |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 110 | |
Alexander Aring | 50a5619 | 2018-01-18 11:20:52 -0500 | [diff] [blame] | 111 | err = tcf_exts_validate(net, tp, tb, tca[TCA_RATE], &new->exts, ovr, |
Vlad Buslov | ec6743a | 2019-02-11 10:55:43 +0200 | [diff] [blame] | 112 | true, extack); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 113 | if (err < 0) |
John Fastabend | d14cbfc8 | 2014-09-15 23:31:17 -0700 | [diff] [blame] | 114 | goto errout; |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 115 | |
Jiri Pirko | 4ebc1e3 | 2017-08-04 14:28:57 +0200 | [diff] [blame] | 116 | err = tcf_em_tree_validate(tp, tb[TCA_CGROUP_EMATCHES], &new->ematches); |
Jiri Pirko | 8cc6251 | 2017-08-04 14:29:11 +0200 | [diff] [blame] | 117 | if (err < 0) |
John Fastabend | d14cbfc8 | 2014-09-15 23:31:17 -0700 | [diff] [blame] | 118 | goto errout; |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 119 | |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 120 | rcu_assign_pointer(tp->root, new); |
Cong Wang | ed14816 | 2017-11-06 13:47:22 -0800 | [diff] [blame] | 121 | if (head) { |
| 122 | tcf_exts_get_net(&head->exts); |
Cong Wang | aaa908f | 2018-05-23 15:26:53 -0700 | [diff] [blame] | 123 | tcf_queue_work(&head->rwork, cls_cgroup_destroy_work); |
Cong Wang | ed14816 | 2017-11-06 13:47:22 -0800 | [diff] [blame] | 124 | } |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 125 | return 0; |
John Fastabend | d14cbfc8 | 2014-09-15 23:31:17 -0700 | [diff] [blame] | 126 | errout: |
WANG Cong | b9a24bb | 2016-08-19 12:36:54 -0700 | [diff] [blame] | 127 | tcf_exts_destroy(&new->exts); |
John Fastabend | d14cbfc8 | 2014-09-15 23:31:17 -0700 | [diff] [blame] | 128 | kfree(new); |
| 129 | return err; |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 130 | } |
| 131 | |
Vlad Buslov | 12db03b | 2019-02-11 10:55:45 +0200 | [diff] [blame] | 132 | static void cls_cgroup_destroy(struct tcf_proto *tp, bool rtnl_held, |
Jakub Kicinski | 715df5e | 2018-01-24 12:54:13 -0800 | [diff] [blame] | 133 | struct netlink_ext_ack *extack) |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 134 | { |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 135 | struct cls_cgroup_head *head = rtnl_dereference(tp->root); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 136 | |
Daniel Borkmann | d936377 | 2016-11-27 01:18:01 +0100 | [diff] [blame] | 137 | /* Head can still be NULL due to cls_cgroup_init(). */ |
Cong Wang | ed14816 | 2017-11-06 13:47:22 -0800 | [diff] [blame] | 138 | if (head) { |
| 139 | if (tcf_exts_get_net(&head->exts)) |
Cong Wang | aaa908f | 2018-05-23 15:26:53 -0700 | [diff] [blame] | 140 | tcf_queue_work(&head->rwork, cls_cgroup_destroy_work); |
Cong Wang | ed14816 | 2017-11-06 13:47:22 -0800 | [diff] [blame] | 141 | else |
| 142 | __cls_cgroup_destroy(head); |
| 143 | } |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 144 | } |
| 145 | |
Alexander Aring | 571acf2 | 2018-01-18 11:20:53 -0500 | [diff] [blame] | 146 | static int cls_cgroup_delete(struct tcf_proto *tp, void *arg, bool *last, |
Vlad Buslov | 12db03b | 2019-02-11 10:55:45 +0200 | [diff] [blame] | 147 | bool rtnl_held, struct netlink_ext_ack *extack) |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 148 | { |
| 149 | return -EOPNOTSUPP; |
| 150 | } |
| 151 | |
Vlad Buslov | 12db03b | 2019-02-11 10:55:45 +0200 | [diff] [blame] | 152 | static void cls_cgroup_walk(struct tcf_proto *tp, struct tcf_walker *arg, |
| 153 | bool rtnl_held) |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 154 | { |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 155 | struct cls_cgroup_head *head = rtnl_dereference(tp->root); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 156 | |
| 157 | if (arg->count < arg->skip) |
| 158 | goto skip; |
| 159 | |
Vlad Buslov | 8b58d12 | 2019-02-15 17:18:44 +0200 | [diff] [blame] | 160 | if (!head) |
| 161 | return; |
WANG Cong | 8113c09 | 2017-08-04 21:31:43 -0700 | [diff] [blame] | 162 | if (arg->fn(tp, head, arg) < 0) { |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 163 | arg->stop = 1; |
| 164 | return; |
| 165 | } |
| 166 | skip: |
| 167 | arg->count++; |
| 168 | } |
| 169 | |
WANG Cong | 8113c09 | 2017-08-04 21:31:43 -0700 | [diff] [blame] | 170 | static int cls_cgroup_dump(struct net *net, struct tcf_proto *tp, void *fh, |
Vlad Buslov | 12db03b | 2019-02-11 10:55:45 +0200 | [diff] [blame] | 171 | struct sk_buff *skb, struct tcmsg *t, bool rtnl_held) |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 172 | { |
John Fastabend | 952313b | 2014-09-12 20:06:26 -0700 | [diff] [blame] | 173 | struct cls_cgroup_head *head = rtnl_dereference(tp->root); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 174 | struct nlattr *nest; |
| 175 | |
| 176 | t->tcm_handle = head->handle; |
| 177 | |
Michal Kubecek | ae0be8d | 2019-04-26 11:13:06 +0200 | [diff] [blame] | 178 | nest = nla_nest_start_noflag(skb, TCA_OPTIONS); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 179 | if (nest == NULL) |
| 180 | goto nla_put_failure; |
| 181 | |
WANG Cong | 5da57f4 | 2013-12-15 20:15:07 -0800 | [diff] [blame] | 182 | if (tcf_exts_dump(skb, &head->exts) < 0 || |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 183 | tcf_em_tree_dump(skb, &head->ematches, TCA_CGROUP_EMATCHES) < 0) |
| 184 | goto nla_put_failure; |
| 185 | |
| 186 | nla_nest_end(skb, nest); |
| 187 | |
WANG Cong | 5da57f4 | 2013-12-15 20:15:07 -0800 | [diff] [blame] | 188 | if (tcf_exts_dump_stats(skb, &head->exts) < 0) |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 189 | goto nla_put_failure; |
| 190 | |
| 191 | return skb->len; |
| 192 | |
| 193 | nla_put_failure: |
Jiri Pirko | 6ea3b44 | 2014-12-09 22:23:29 +0100 | [diff] [blame] | 194 | nla_nest_cancel(skb, nest); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 195 | return -1; |
| 196 | } |
| 197 | |
| 198 | static struct tcf_proto_ops cls_cgroup_ops __read_mostly = { |
| 199 | .kind = "cgroup", |
| 200 | .init = cls_cgroup_init, |
| 201 | .change = cls_cgroup_change, |
| 202 | .classify = cls_cgroup_classify, |
| 203 | .destroy = cls_cgroup_destroy, |
| 204 | .get = cls_cgroup_get, |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 205 | .delete = cls_cgroup_delete, |
| 206 | .walk = cls_cgroup_walk, |
| 207 | .dump = cls_cgroup_dump, |
| 208 | .owner = THIS_MODULE, |
| 209 | }; |
| 210 | |
| 211 | static int __init init_cgroup_cls(void) |
| 212 | { |
Daniel Borkmann | fe1217c | 2013-12-29 18:27:10 +0100 | [diff] [blame] | 213 | return register_tcf_proto_ops(&cls_cgroup_ops); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 214 | } |
| 215 | |
| 216 | static void __exit exit_cgroup_cls(void) |
| 217 | { |
| 218 | unregister_tcf_proto_ops(&cls_cgroup_ops); |
Thomas Graf | f400923 | 2008-11-07 22:56:00 -0800 | [diff] [blame] | 219 | } |
| 220 | |
| 221 | module_init(init_cgroup_cls); |
| 222 | module_exit(exit_cgroup_cls); |
| 223 | MODULE_LICENSE("GPL"); |