1 // SPDX-License-Identifier: GPL-2.0
2 #include "vmlinux.h"
3 #include "net_shared.h"
4 #include <bpf/bpf_helpers.h>
5 
6 SEC("cgroup/sock")
bpf_prog1(struct bpf_sock * sk)7 int bpf_prog1(struct bpf_sock *sk)
8 {
9 	char fmt[] = "socket: family %d type %d protocol %d\n";
10 	char fmt2[] = "socket: uid %u gid %u\n";
11 	__u64 gid_uid = bpf_get_current_uid_gid();
12 	__u32 uid = gid_uid & 0xffffffff;
13 	__u32 gid = gid_uid >> 32;
14 
15 	bpf_trace_printk(fmt, sizeof(fmt), sk->family, sk->type, sk->protocol);
16 	bpf_trace_printk(fmt2, sizeof(fmt2), uid, gid);
17 
18 	/* block AF_INET6, SOCK_DGRAM, IPPROTO_ICMPV6 sockets
19 	 * ie., make ping6 fail
20 	 */
21 	if (sk->family == AF_INET6 &&
22 	    sk->type == SOCK_DGRAM   &&
23 	    sk->protocol == IPPROTO_ICMPV6)
24 		return 0;
25 
26 	return 1;
27 }
28 
29 SEC("cgroup/sock")
bpf_prog2(struct bpf_sock * sk)30 int bpf_prog2(struct bpf_sock *sk)
31 {
32 	char fmt[] = "socket: family %d type %d protocol %d\n";
33 
34 	bpf_trace_printk(fmt, sizeof(fmt), sk->family, sk->type, sk->protocol);
35 
36 	/* block AF_INET, SOCK_DGRAM, IPPROTO_ICMP sockets
37 	 * ie., make ping fail
38 	 */
39 	if (sk->family == AF_INET &&
40 	    sk->type == SOCK_DGRAM  &&
41 	    sk->protocol == IPPROTO_ICMP)
42 		return 0;
43 
44 	return 1;
45 }
46 
47 char _license[] SEC("license") = "GPL";
48