linux.git/net/bpfilter/Makefile, branch v4.20

kbuild: Rename HOSTLDFLAGS to KBUILD_HOSTLDFLAGS

2018-07-17T16:18:05+00:00

In preparation for enabling command line LDFLAGS, re-name HOSTLDFLAGS
to KBUILD_HOSTLDFLAGS as the internal use only flags. This should not
have any visible effects.

Signed-off-by: Laura Abbott 
Signed-off-by: Masahiro Yamada

kbuild: Rename HOSTCFLAGS to KBUILD_HOSTCFLAGS

2018-07-17T16:18:05+00:00

In preparation for enabling command line CFLAGS, re-name HOSTCFLAGS to
KBUILD_HOSTCFLAGS as the internal use only flags. This should not have
any visible effects.

Signed-off-by: Laura Abbott 
Signed-off-by: Masahiro Yamada

bpfilter: include bpfilter_umh in assembly instead of using objcopy

2018-06-28T12:39:16+00:00

What we want here is to embed a user-space program into the kernel.
Instead of the complex ELF magic, let's simply wrap it in the assembly
with the '.incbin' directive.

Signed-off-by: Masahiro Yamada 
Signed-off-by: Alexei Starovoitov 
Signed-off-by: David S. Miller

bpfilter: fix user mode helper cross compilation

2018-06-21T00:19:19+00:00

Use $(OBJDUMP) instead of literal 'objdump' to avoid
using host toolchain when cross compiling.

Fixes: 421780fd4983 ("bpfilter: fix build error")
Signed-off-by: Matteo Croce 
Reported-by: Stefano Brivio 
Signed-off-by: David S. Miller

bpfilter: fix build error

2018-06-20T00:07:46+00:00

bpfilter Makefile assumes that the system locale is en_US, and the
parsing of objdump output fails.
Set LC_ALL=C and, while at it, rewrite the objdump parsing so it spawns
only 2 processes instead of 7.

Fixes: d2ba09c17a064 ("net: add skeleton of bpfilter kernel module")
Signed-off-by: Matteo Croce 
Signed-off-by: David S. Miller

bpfilter: fix OUTPUT_FORMAT

2018-06-07T20:56:48+00:00

CONFIG_OUTPUT_FORMAT is x86 only macro.
Used objdump to extract elf file format.

Fixes: d2ba09c17a06 ("net: add skeleton of bpfilter kernel module")
Reported-by: David S. Miller 
Signed-off-by: Alexei Starovoitov 
Signed-off-by: David S. Miller

bpfilter: switch to CC from HOSTCC

2018-06-05T14:21:18+00:00

check that CC can build executables and use that compiler instead of HOSTCC

Suggested-by: Arnd Bergmann 
Signed-off-by: Alexei Starovoitov 
Signed-off-by: David S. Miller

bpfilter: fix a build err

2018-05-29T19:20:21+00:00

gcc-7.3.0 report following err:

  HOSTCC  net/bpfilter/main.o
In file included from net/bpfilter/main.c:9:0:
./include/uapi/linux/bpf.h:12:10: fatal error: linux/bpf_common.h: No such file or directory
 #include 

remove it by adding a include path.
Fixes: d2ba09c17a06 ("net: add skeleton of bpfilter kernel module")

Signed-off-by: YueHaibing 
Signed-off-by: David S. Miller

net: add skeleton of bpfilter kernel module

2018-05-23T17:23:40+00:00

bpfilter.ko consists of bpfilter_kern.c (normal kernel module code)
and user mode helper code that is embedded into bpfilter.ko

The steps to build bpfilter.ko are the following:
- main.c is compiled by HOSTCC into the bpfilter_umh elf executable file
- with quite a bit of objcopy and Makefile magic the bpfilter_umh elf file
  is converted into bpfilter_umh.o object file
  with _binary_net_bpfilter_bpfilter_umh_start and _end symbols
  Example:
  $ nm ./bld_x64/net/bpfilter/bpfilter_umh.o
  0000000000004cf8 T _binary_net_bpfilter_bpfilter_umh_end
  0000000000004cf8 A _binary_net_bpfilter_bpfilter_umh_size
  0000000000000000 T _binary_net_bpfilter_bpfilter_umh_start
- bpfilter_umh.o and bpfilter_kern.o are linked together into bpfilter.ko

bpfilter_kern.c is a normal kernel module code that calls
the fork_usermode_blob() helper to execute part of its own data
as a user mode process.

Notice that _binary_net_bpfilter_bpfilter_umh_start - end
is placed into .init.rodata section, so it's freed as soon as __init
function of bpfilter.ko is finished.
As part of __init the bpfilter.ko does first request/reply action
via two unix pipe provided by fork_usermode_blob() helper to
make sure that umh is healthy. If not it will kill it via pid.

Later bpfilter_process_sockopt() will be called from bpfilter hooks
in get/setsockopt() to pass iptable commands into umh via bpfilter.ko

If admin does 'rmmod bpfilter' the __exit code bpfilter.ko will
kill umh as well.

Signed-off-by: Alexei Starovoitov 
Signed-off-by: David S. Miller