summaryrefslogtreecommitdiffstats
path: root/src/core/bpf-firewall.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* core/cgroup: call bpf_firewall_close in cgroup_runtime_freeMike Yuan2024-06-281-6/+2
* core/bpf-firewall: constify and reduce scope of variablesZbigniew Jędrzejewski-Szmek2024-05-291-7/+6
* tree-wide: make sure net/if.h is included before any linux/ headerFrantisek Sumsal2024-04-091-1/+2
* core: split out cgroup specific state fields from Unit → CGroupRuntimeLennart Poettering2024-02-161-67/+90
* tree-wide: "<n>bit" → "<n>-bit"Zbigniew Jędrzejewski-Szmek2023-07-021-1/+1
* bpf-firewall: give a name to maps usedDominique Martinet2023-04-181-3/+8
* tree-wide: use -EBADF for fd initializationZbigniew Jędrzejewski-Szmek2022-12-191-5/+5
* core/bpf: prefix log messages from different bpf subsystemsZbigniew Jędrzejewski-Szmek2022-06-021-29/+35
* bpf-firewall: invert testLennart Poettering2022-03-241-10/+11
* strv: make iterator in STRV_FOREACH() declaread in the loopYu Watanabe2022-03-191-2/+0
* bpf: load firewall with name only if supportedJulia Kartseva2022-01-281-5/+16
* bpf: name unnamed bpf programsJulia Kartseva2022-01-221-3/+4
* Merge pull request #21583 from bluca/bpf_assertYu Watanabe2021-12-011-1/+4
|\
| * cgroup: don't emit BPF firewall warning when manager is in test modeLuca Boccassi2021-12-011-1/+4
* | core/bpf-firewall: make bpf_firewall_supported() always set unsupported reaso...Yu Watanabe2021-12-011-2/+8
|/
* core/bpf-firewall: add missing oom checkYu Watanabe2021-10-131-1/+3
* core: remove refcount for bpf programalexlzhu2021-10-121-25/+18
* core: replace IPAddressAccessItem with struct in_addr_prefixYu Watanabe2021-09-141-13/+21
* bpf-firewall: close gap when updating the firewallLennart Poettering2021-06-081-4/+19
* bpf-program: export hash_ops for BPFProgam objectsLennart Poettering2021-06-081-4/+2
* bpf-firewall: move destruction of IP firewall objects to bpf-firewall.cLennart Poettering2021-06-081-0/+23
* core: add UNIT_GET_SLICE() helperLennart Poettering2021-05-251-2/+2
* bpf-firewall: attach with BPF_F_ALLOW_MULTI if kernel supportsJulia Kartseva2021-04-101-6/+3
* bpf: do not use structured initialization for bpf_attrLuca Boccassi2021-01-101-11/+13
* core: detect_container() may return negative errnoYu Watanabe2020-12-141-1/+1
* core: use SYNTHETIC_ERRNO() macroYu Watanabe2020-11-271-8/+4
* license: LGPL-2.1+ -> LGPL-2.1-or-laterYu Watanabe2020-11-091-1/+1
* core: make log_unit_error() or friends return voidYu Watanabe2020-09-081-5/+5
* tree-wide: define iterator inside of the macroZbigniew Jędrzejewski-Szmek2020-09-081-2/+1
* tree: wide "the the" and other trivial grammar fixesZbigniew Jędrzejewski-Szmek2020-07-021-1/+1
* core/bpf-firewall: use the correct cleanup functionZbigniew Jędrzejewski-Szmek2020-06-241-3/+2
* tree-wide: use set_ensure_put()Zbigniew Jędrzejewski-Szmek2020-06-221-10/+3
* core: constify bpf program arraysZbigniew Jędrzejewski-Szmek2019-11-101-5/+5
* tree-wide: drop string.h when string-util.h or friends are includedYu Watanabe2019-11-031-1/+0
* Create src/shared/unit-file.[ch] for unit-file related opsZbigniew Jędrzejewski-Szmek2019-07-191-0/+1
* bpf-firewall: custom BPF programs through IP(Ingress|Egress)FilterPath=Kai Lüke2019-06-251-2/+104
* bpf-firewall: optimization for IPAddressXYZ="any" (and unprivileged users)Anita Zhang2019-06-221-36/+61
* bpf: use more TAKE_FD()Lennart Poettering2019-06-201-4/+2
* Silence warning about BPF firewall in containersZbigniew Jędrzejewski-Szmek2019-06-041-11/+26
* Move warning about unsupported BPF firewall right before the firewall would b...Zbigniew Jędrzejewski-Szmek2019-06-041-8/+18
* tree-wide: drop several missing_*.h and import relevant headers from kernel-5.0Yu Watanabe2019-04-111-1/+1
* util: split out memcmp()/memset() related calls into memory-util.[ch]Lennart Poettering2019-03-131-0/+1
* tree-wide: drop missing.h from headers and use relevant missing_*.hYu Watanabe2018-12-061-0/+1
* bpf-firewall: always use log_unit_xyz() insteadof log_xyz()Lennart Poettering2018-10-091-12/+12
* core: fix the check if CONFIG_CGROUP_BPF is onAlexander Filippov2018-09-181-8/+8
* tree-wide: drop empty lines in commentsYu Watanabe2018-07-231-1/+0
* tree-wide: drop copyright headers from frequent contributorsZbigniew Jędrzejewski-Szmek2018-06-201-3/+0
* tree-wide: beautify remaining copyright statementsLennart Poettering2018-06-141-1/+1
* tree-wide: drop 'This file is part of systemd' blurbLennart Poettering2018-06-141-2/+0
* Fix three uses of bogus errno value in logs (and returned value in one case)Zbigniew Jędrzejewski-Szmek2018-04-241-2/+3