github/portmaster
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Fix PID detection via eBPF

Browse Source
This commit is contained in:
Daniel
2023-07-28 16:47:52 +02:00
parent 8e9f96d3fd
commit b882b910ca
5 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
firewall/interception/ebpf/connection_listener/bpf_bpfeb.go
View File

@@ -1,6 +1,5 @@
// Code generated by bpf2go; DO NOT EDIT. // Code generated by bpf2go; DO NOT EDIT.
//go:build arm64be || armbe || mips || mips64 || mips64p32 || ppc64 || s390 || s390x || sparc || sparc64 //go:build arm64be || armbe || mips || mips64 || mips64p32 || ppc64 || s390 || s390x || sparc || sparc64
// +build arm64be armbe mips mips64 mips64p32 ppc64 s390 s390x sparc sparc64
package ebpf package ebpf

BIN
firewall/interception/ebpf/connection_listener/bpf_bpfeb.o
View File

Binary file not shown.

3
firewall/interception/ebpf/connection_listener/bpf_bpfel.go
View File

@@ -1,6 +1,5 @@
// Code generated by bpf2go; DO NOT EDIT. // Code generated by bpf2go; DO NOT EDIT.
//go:build 386 || amd64 || amd64p32 || arm || arm64 || mips64le || mips64p32le || mipsle || ppc64le || riscv64 //go:build 386 || amd64 || amd64p32 || arm || arm64 || loong64 || mips64le || mips64p32le || mipsle || ppc64le || riscv64
// +build 386 amd64 amd64p32 arm arm64 mips64le mips64p32le mipsle ppc64le riscv64
package ebpf package ebpf

BIN
firewall/interception/ebpf/connection_listener/bpf_bpfel.o
View File

Binary file not shown.

4
firewall/interception/ebpf/programs/monitor.c
View File

@@ -46,8 +46,8 @@ int BPF_PROG(tcp_connect, struct sock *sk) {
return 0; return 0;
} }
// Read PID // Read PID (Careful: This is the Thread Group ID in kernel speak!)
tcp_info->pid = __builtin_bswap32((u32)bpf_get_current_pid_tgid()); tcp_info->pid = __builtin_bswap32((u32)(bpf_get_current_pid_tgid() >> 32));
// Set protocol // Set protocol
tcp_info->protocol = TCP; tcp_info->protocol = TCP;