test_skb_cgroup_id_user.c 3.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187
  1. // SPDX-License-Identifier: GPL-2.0
  2. // Copyright (c) 2018 Facebook
  3. #include <stdlib.h>
  4. #include <string.h>
  5. #include <unistd.h>
  6. #include <arpa/inet.h>
  7. #include <net/if.h>
  8. #include <netinet/in.h>
  9. #include <sys/socket.h>
  10. #include <sys/types.h>
  11. #include <bpf/bpf.h>
  12. #include <bpf/libbpf.h>
  13. #include "bpf_rlimit.h"
  14. #include "cgroup_helpers.h"
  15. #define CGROUP_PATH "/skb_cgroup_test"
  16. #define NUM_CGROUP_LEVELS 4
  17. /* RFC 4291, Section 2.7.1 */
  18. #define LINKLOCAL_MULTICAST "ff02::1"
  19. static int mk_dst_addr(const char *ip, const char *iface,
  20. struct sockaddr_in6 *dst)
  21. {
  22. memset(dst, 0, sizeof(*dst));
  23. dst->sin6_family = AF_INET6;
  24. dst->sin6_port = htons(1025);
  25. if (inet_pton(AF_INET6, ip, &dst->sin6_addr) != 1) {
  26. log_err("Invalid IPv6: %s", ip);
  27. return -1;
  28. }
  29. dst->sin6_scope_id = if_nametoindex(iface);
  30. if (!dst->sin6_scope_id) {
  31. log_err("Failed to get index of iface: %s", iface);
  32. return -1;
  33. }
  34. return 0;
  35. }
  36. static int send_packet(const char *iface)
  37. {
  38. struct sockaddr_in6 dst;
  39. char msg[] = "msg";
  40. int err = 0;
  41. int fd = -1;
  42. if (mk_dst_addr(LINKLOCAL_MULTICAST, iface, &dst))
  43. goto err;
  44. fd = socket(AF_INET6, SOCK_DGRAM, 0);
  45. if (fd == -1) {
  46. log_err("Failed to create UDP socket");
  47. goto err;
  48. }
  49. if (sendto(fd, &msg, sizeof(msg), 0, (const struct sockaddr *)&dst,
  50. sizeof(dst)) == -1) {
  51. log_err("Failed to send datagram");
  52. goto err;
  53. }
  54. goto out;
  55. err:
  56. err = -1;
  57. out:
  58. if (fd >= 0)
  59. close(fd);
  60. return err;
  61. }
  62. int get_map_fd_by_prog_id(int prog_id)
  63. {
  64. struct bpf_prog_info info = {};
  65. __u32 info_len = sizeof(info);
  66. __u32 map_ids[1];
  67. int prog_fd = -1;
  68. int map_fd = -1;
  69. prog_fd = bpf_prog_get_fd_by_id(prog_id);
  70. if (prog_fd < 0) {
  71. log_err("Failed to get fd by prog id %d", prog_id);
  72. goto err;
  73. }
  74. info.nr_map_ids = 1;
  75. info.map_ids = (__u64) (unsigned long) map_ids;
  76. if (bpf_obj_get_info_by_fd(prog_fd, &info, &info_len)) {
  77. log_err("Failed to get info by prog fd %d", prog_fd);
  78. goto err;
  79. }
  80. if (!info.nr_map_ids) {
  81. log_err("No maps found for prog fd %d", prog_fd);
  82. goto err;
  83. }
  84. map_fd = bpf_map_get_fd_by_id(map_ids[0]);
  85. if (map_fd < 0)
  86. log_err("Failed to get fd by map id %d", map_ids[0]);
  87. err:
  88. if (prog_fd >= 0)
  89. close(prog_fd);
  90. return map_fd;
  91. }
  92. int check_ancestor_cgroup_ids(int prog_id)
  93. {
  94. __u64 actual_ids[NUM_CGROUP_LEVELS], expected_ids[NUM_CGROUP_LEVELS];
  95. __u32 level;
  96. int err = 0;
  97. int map_fd;
  98. expected_ids[0] = 0x100000001; /* root cgroup */
  99. expected_ids[1] = get_cgroup_id("");
  100. expected_ids[2] = get_cgroup_id(CGROUP_PATH);
  101. expected_ids[3] = 0; /* non-existent cgroup */
  102. map_fd = get_map_fd_by_prog_id(prog_id);
  103. if (map_fd < 0)
  104. goto err;
  105. for (level = 0; level < NUM_CGROUP_LEVELS; ++level) {
  106. if (bpf_map_lookup_elem(map_fd, &level, &actual_ids[level])) {
  107. log_err("Failed to lookup key %d", level);
  108. goto err;
  109. }
  110. if (actual_ids[level] != expected_ids[level]) {
  111. log_err("%llx (actual) != %llx (expected), level: %u\n",
  112. actual_ids[level], expected_ids[level], level);
  113. goto err;
  114. }
  115. }
  116. goto out;
  117. err:
  118. err = -1;
  119. out:
  120. if (map_fd >= 0)
  121. close(map_fd);
  122. return err;
  123. }
  124. int main(int argc, char **argv)
  125. {
  126. int cgfd = -1;
  127. int err = 0;
  128. if (argc < 3) {
  129. fprintf(stderr, "Usage: %s iface prog_id\n", argv[0]);
  130. exit(EXIT_FAILURE);
  131. }
  132. if (setup_cgroup_environment())
  133. goto err;
  134. cgfd = create_and_get_cgroup(CGROUP_PATH);
  135. if (!cgfd)
  136. goto err;
  137. if (join_cgroup(CGROUP_PATH))
  138. goto err;
  139. if (send_packet(argv[1]))
  140. goto err;
  141. if (check_ancestor_cgroup_ids(atoi(argv[2])))
  142. goto err;
  143. goto out;
  144. err:
  145. err = -1;
  146. out:
  147. close(cgfd);
  148. cleanup_cgroup_environment();
  149. printf("[%s]\n", err ? "FAIL" : "PASS");
  150. return err;
  151. }