// SPDX-License-Identifier: GPL-2.0 /* Copyright (C) 2023 Chuyi Zhou */ #include "vmlinux.h" #include #include #include "bpf_misc.h" #include "bpf_experimental.h" char _license[] SEC("license") = "GPL"; struct cgroup *bpf_cgroup_from_id(u64 cgid) __ksym; void bpf_cgroup_release(struct cgroup *p) __ksym; void bpf_rcu_read_lock(void) __ksym; void bpf_rcu_read_unlock(void) __ksym; SEC("?fentry.s/" SYS_PREFIX "sys_getpgid") __failure __msg("expected an RCU CS when using bpf_iter_task_next") int BPF_PROG(iter_tasks_without_lock) { struct task_struct *pos; bpf_for_each(task, pos, NULL, BPF_TASK_ITER_ALL_PROCS) { } return 0; } SEC("?fentry.s/" SYS_PREFIX "sys_getpgid") __failure __msg("expected an RCU CS when using bpf_iter_css_next") int BPF_PROG(iter_css_without_lock) { u64 cg_id = bpf_get_current_cgroup_id(); struct cgroup *cgrp = bpf_cgroup_from_id(cg_id); struct cgroup_subsys_state *root_css, *pos; if (!cgrp) return 0; root_css = &cgrp->self; bpf_for_each(css, pos, root_css, BPF_CGROUP_ITER_DESCENDANTS_POST) { } bpf_cgroup_release(cgrp); return 0; } SEC("?fentry.s/" SYS_PREFIX "sys_getpgid") __failure __msg("expected an RCU CS when using bpf_iter_task_next") int BPF_PROG(iter_tasks_lock_and_unlock) { struct task_struct *pos; bpf_rcu_read_lock(); bpf_for_each(task, pos, NULL, BPF_TASK_ITER_ALL_PROCS) { bpf_rcu_read_unlock(); bpf_rcu_read_lock(); } bpf_rcu_read_unlock(); return 0; } SEC("?fentry.s/" SYS_PREFIX "sys_getpgid") __failure __msg("expected an RCU CS when using bpf_iter_css_next") int BPF_PROG(iter_css_lock_and_unlock) { u64 cg_id = bpf_get_current_cgroup_id(); struct cgroup *cgrp = bpf_cgroup_from_id(cg_id); struct cgroup_subsys_state *root_css, *pos; if (!cgrp) return 0; root_css = &cgrp->self; bpf_rcu_read_lock(); bpf_for_each(css, pos, root_css, BPF_CGROUP_ITER_DESCENDANTS_POST) { bpf_rcu_read_unlock(); bpf_rcu_read_lock(); } bpf_rcu_read_unlock(); bpf_cgroup_release(cgrp); return 0; } SEC("?fentry/" SYS_PREFIX "sys_getpgid") __failure __msg("css_task_iter is only allowed in bpf_lsm, bpf_iter and sleepable progs") int BPF_PROG(iter_css_task_for_each) { u64 cg_id = bpf_get_current_cgroup_id(); struct cgroup *cgrp = bpf_cgroup_from_id(cg_id); struct cgroup_subsys_state *css; struct task_struct *task; if (cgrp == NULL) return 0; css = &cgrp->self; bpf_for_each(css_task, task, css, CSS_TASK_ITER_PROCS) { } bpf_cgroup_release(cgrp); return 0; }