Thomas Graf 3a0af8fd61 bpf: BPF for lightweight tunnel infrastructure ... Registers new BPF program types which correspond to the LWT hooks: - BPF_PROG_TYPE_LWT_IN => dst_input() - BPF_PROG_TYPE_LWT_OUT => dst_output() - BPF_PROG_TYPE_LWT_XMIT => lwtunnel_xmit() The separate program types are required to differentiate between the capabilities each LWT hook allows: * Programs attached to dst_input() or dst_output() are restricted and may only read the data of an skb. This prevent modification and possible invalidation of already validated packet headers on receive and the construction of illegal headers while the IP headers are still being assembled. * Programs attached to lwtunnel_xmit() are allowed to modify packet content as well as prepending an L2 header via a newly introduced helper bpf_skb_change_head(). This is safe as lwtunnel_xmit() is invoked after the IP header has been assembled completely. All BPF programs receive an skb with L3 headers attached and may return one of the following error codes: BPF_OK - Continue routing as per nexthop BPF_DROP - Drop skb and return EPERM BPF_REDIRECT - Redirect skb to device as per redirect() helper. (Only valid in lwtunnel_xmit() context) The return codes are binary compatible with their TC_ACT_ relatives to ease compatibility. Signed-off-by: Thomas Graf <tgraf@suug.ch> Acked-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2016-12-02 10:51:49 -05:00
..
bpf	bpf: BPF for lightweight tunnel infrastructure	2016-12-02 10:51:49 -05:00
configs	config: android: enable CONFIG_SECCOMP	2016-10-11 15:06:32 -07:00
debug	mm/init: Add 'rodata=off' boot cmdline parameter to disable read-only kernel mappings	2016-02-22 08:51:37 +01:00
events	bpf: drop unnecessary context cast from BPF_PROG_RUN	2016-11-27 20:38:47 -05:00
gcov	gcov: add support for gcc version >= 6	2016-07-15 14:54:27 +09:00
irq	genirq: Use irq type from irqdata instead of irqdesc	2016-11-08 15:15:19 +01:00
livepatch	livepatch/module: make TAINT_LIVEPATCH module-specific	2016-08-26 14:42:08 +02:00
locking	lockdep: Limit static allocations if PROVE_LOCKING_SMALL is defined	2016-11-18 11:33:19 -08:00
power	PM / sleep: fix device reference leak in test_suspend	2016-11-02 05:10:04 +01:00
printk	Revert "printk: make reading the kernel log flush pending lines"	2016-11-14 09:31:52 -08:00
rcu	This adds a new gcc plugin named "latent_entropy". It is designed to	2016-10-15 10:03:15 -07:00
sched	sched/autogroup: Do not use autogroup->tg in zombie threads	2016-11-22 12:33:43 +01:00
time	timers: Prevent base clock corruption when forwarding	2016-10-25 16:32:50 +02:00
trace	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-11-22 13:27:16 -05:00
.gitignore
acct.c
async.c
audit_fsnotify.c	wrappers for ->i_mutex access	2016-01-22 18:04:28 -05:00
audit_tree.c	audit: cleanup prune_tree_thread	2016-04-04 09:46:47 -04:00
audit_watch.c	Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/audit	2016-09-01 15:55:56 -07:00
audit.c	audit: remove useless synchronize_net()	2016-12-01 11:29:02 -05:00
audit.h	Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/audit	2016-07-29 17:54:17 -07:00
auditfilter.c	audit: add fields to exclude filter by reusing user filter	2016-06-27 11:01:00 -04:00
auditsc.c	Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/audit	2016-10-04 14:21:41 -07:00
backtracetest.c
bounds.c
capability.c	kernel: Add noaudit variant of ns_capable()	2016-06-06 20:16:18 +10:00
cgroup_freezer.c
cgroup_pids.c	cgroup: Use lld instead of ld when printing pids controller events_limit	2016-06-21 15:03:36 -04:00
cgroup.c	cgroup: add support for eBPF programs	2016-11-25 16:25:52 -05:00
compat.c
configs.c
context_tracking.c
cpu_pm.c
cpu.c	cpu/hotplug: Use distinct name for cpu_hotplug.dep_map	2016-10-16 11:09:32 +02:00
cpuset.c	Merge branch 'for-4.9' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup	2016-10-14 12:18:50 -07:00
crash_dump.c
cred.c	cred: Reject inodes with invalid ids in set_create_file_as()	2016-06-30 18:05:09 -05:00
delayacct.c	kmemcg: account certain kmem allocations to memcg	2016-01-14 16:00:49 -08:00
dma.c
elfcore.c
exec_domain.c
exit.c	sched/autogroup: Do not use autogroup->tg in zombie threads	2016-11-22 12:33:43 +01:00
extable.c
fork.c	fork: Add task stack refcounting sanity check and prevent premature task stack freeing	2016-11-01 07:39:17 +01:00
freezer.c	freezer, oom: check TIF_MEMDIE on the correct task	2016-07-28 16:07:41 -07:00
futex_compat.c	ptrace: use fsuid, fsgid, effective creds for fs access checks	2016-01-20 17:09:18 -08:00
futex.c	futex: Add some more function commentry	2016-09-05 17:20:18 +02:00
groups.c	cred: simpler, 1D supplementary groups	2016-10-07 18:46:30 -07:00
hung_task.c	hung_task: allow hung_task_panic when hung_task_warnings is 0	2016-10-11 15:06:33 -07:00
irq_work.c
jump_label.c	powerpc updates for 4.8 #2	2016-08-05 09:00:54 -04:00
kallsyms.c	kallsyms: add support for relative offsets in kallsyms address table	2016-03-15 16:55:16 -07:00
kcmp.c	ptrace: use fsuid, fsgid, effective creds for fs access checks	2016-01-20 17:09:18 -08:00
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kcov.c	kcov: properly check if we are in an interrupt	2016-10-27 18:43:42 -07:00
kexec_core.c	kexec: add restriction on kexec_load() segment sizes	2016-08-02 19:35:31 -04:00
kexec_file.c	kexec: fix double-free when failing to relocate the purgatory	2016-09-01 17:52:01 -07:00
kexec_internal.h	kexec: move some memembers and definitions within the scope of CONFIG_KEXEC_FILE	2016-01-20 17:09:18 -08:00
kexec.c	kexec: allow architectures to override boot mapping	2016-08-02 19:35:27 -04:00
kmod.c
kprobes.c	kprobes: include <asm/sections.h> instead of <asm-generic/sections.h>	2016-10-11 15:06:31 -07:00
ksysfs.c	kexec: add a kexec_crash_loaded() function	2016-08-02 19:35:30 -04:00
kthread.c	kthread: better support freezable kthread workers	2016-10-11 15:06:33 -07:00
latencytop.c	sched/debug: Make schedstats a runtime tunable that is disabled by default	2016-02-09 11:54:23 +01:00
Makefile	userns: Add per user namespace sysctls.	2016-08-08 13:18:58 -05:00
membarrier.c
memremap.c	mm: fix cache mode of dax pmd mappings	2016-09-09 17:34:46 -07:00
module_signing.c	KEYS: Move the point of trust determination to __key_link()	2016-04-11 22:43:43 +01:00
module-internal.h
module.c	livepatch/module: make TAINT_LIVEPATCH module-specific	2016-08-26 14:42:08 +02:00
notifier.c
nsproxy.c	cgroup: introduce cgroup namespaces	2016-02-16 13:04:58 -05:00
padata.c	padata: Convert to hotplug state machine	2016-09-19 21:44:30 +02:00
panic.c	x86/panic: replace smp_send_stop() with kdump friendly version in panic path	2016-10-11 15:06:32 -07:00
params.c
pid_namespace.c	Merge branch 'nsfs-ioctls' into HEAD	2016-09-22 20:00:36 -05:00
pid.c	remove lots of IS_ERR_VALUE abuses	2016-05-27 15:26:11 -07:00
profile.c	profile: Convert to hotplug state machine	2016-07-15 10:41:42 +02:00
ptrace.c	mm: replace access_process_vm() write parameter with gup_flags	2016-10-19 08:31:25 -07:00
range.c
reboot.c
relay.c	relay: Use irq_work instead of plain timer for deferred wakeup	2016-10-11 15:06:32 -07:00
resource.c	/proc/iomem: only expose physical resource addresses to privileged users	2016-04-14 12:56:09 -07:00
seccomp.c	bpf: drop unnecessary context cast from BPF_PROG_RUN	2016-11-27 20:38:47 -05:00
signal.c	x86/signal: Add SA_{X32,IA32}_ABI sa_flags	2016-09-14 21:28:11 +02:00
smp.c	smp: Allocate smp_call_on_cpu() workqueue on stack too	2016-09-22 14:49:10 +02:00
smpboot.c	kthread/smpboot: do not park in kthread_create_on_cpu()	2016-10-11 15:06:33 -07:00
smpboot.h	cpu/hotplug: Create hotplug threads	2016-03-01 20:36:56 +01:00
softirq.c	softirq: Display IRQ_POLL for irq-poll statistics	2016-10-21 15:45:47 -06:00
stacktrace.c
stop_machine.c	Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2016-10-03 13:39:00 -07:00
sys_ni.c	x86/pkeys: Fix pkeys build breakage for some non-x86 arches	2016-09-13 14:41:36 +02:00
sys.c	prctl: make PR_SET_THP_DISABLE wait for mmap_sem killable	2016-05-23 17:04:14 -07:00
sysctl_binary.c	kernel/sysctl_binary.c: use generic UUID library	2016-05-20 17:58:30 -07:00
sysctl.c	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 13:04:49 -07:00
task_work.c	task_work: use READ_ONCE/lockless_dereference, avoid pi_lock if !task_works	2016-08-02 19:35:02 -04:00
taskstats.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-11-15 10:54:36 -05:00
test_kprobes.c
torture.c	torture: Convert torture_shutdown() to hrtimer	2016-08-22 10:01:49 -07:00
tracepoint.c	kernel/...: convert pr_warning to pr_warn	2016-03-22 15:36:02 -07:00
tsacct.c	time, acct: Drop irq save & restore from __acct_update_integrals()	2016-02-29 09:53:09 +01:00
ucount.c	mntns: Add a limit on the number of mount namespaces.	2016-08-31 07:28:35 -05:00
uid16.c	cred: simpler, 1D supplementary groups	2016-10-07 18:46:30 -07:00
up.c	smp: Add function to execute a function synchronously on a CPU	2016-09-05 13:52:39 +02:00
user_namespace.c	Merge branch 'nsfs-ioctls' into HEAD	2016-09-22 20:00:36 -05:00
user-return-notifier.c
user.c
utsname_sysctl.c
utsname.c	Merge branch 'nsfs-ioctls' into HEAD	2016-09-22 20:00:36 -05:00
watchdog.c	Revert "perf/x86/intel, watchdog: Switch NMI watchdog to ref cycles on x86"	2016-07-10 20:58:36 +02:00
workqueue_internal.h	sched/core: Get rid of 'cpu' argument in wq_worker_sleeping()	2016-03-02 10:28:47 -05:00
workqueue.c	kthread: rename probe_kthread_data() to kthread_probe_data()	2016-10-11 15:06:33 -07:00