Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * net/core/netclassid_cgroup.c Classid Cgroupfs Handling
4 *
5 * Authors: Thomas Graf <tgraf@suug.ch>
6 */
7
8#include <linux/slab.h>
9#include <linux/cgroup.h>
10#include <linux/fdtable.h>
11#include <linux/sched/task.h>
12
13#include <net/cls_cgroup.h>
14#include <net/sock.h>
15
16static inline struct cgroup_cls_state *css_cls_state(struct cgroup_subsys_state *css)
17{
18 return css ? container_of(css, struct cgroup_cls_state, css) : NULL;
19}
20
21struct cgroup_cls_state *task_cls_state(struct task_struct *p)
22{
23 return css_cls_state(task_css_check(p, net_cls_cgrp_id,
24 rcu_read_lock_bh_held()));
25}
26EXPORT_SYMBOL_GPL(task_cls_state);
27
28static struct cgroup_subsys_state *
29cgrp_css_alloc(struct cgroup_subsys_state *parent_css)
30{
31 struct cgroup_cls_state *cs;
32
33 cs = kzalloc(sizeof(*cs), GFP_KERNEL);
34 if (!cs)
35 return ERR_PTR(-ENOMEM);
36
37 return &cs->css;
38}
39
40static int cgrp_css_online(struct cgroup_subsys_state *css)
41{
42 struct cgroup_cls_state *cs = css_cls_state(css);
43 struct cgroup_cls_state *parent = css_cls_state(css->parent);
44
45 if (parent)
46 cs->classid = parent->classid;
47
48 return 0;
49}
50
51static void cgrp_css_free(struct cgroup_subsys_state *css)
52{
53 kfree(css_cls_state(css));
54}
55
56/*
57 * To avoid freezing of sockets creation for tasks with big number of threads
58 * and opened sockets lets release file_lock every 1000 iterated descriptors.
59 * New sockets will already have been created with new classid.
60 */
61
62struct update_classid_context {
63 u32 classid;
64 unsigned int batch;
65};
66
67#define UPDATE_CLASSID_BATCH 1000
68
69static int update_classid_sock(const void *v, struct file *file, unsigned int n)
70{
71 struct update_classid_context *ctx = (void *)v;
72 struct socket *sock = sock_from_file(file);
73
74 if (sock)
75 sock_cgroup_set_classid(&sock->sk->sk_cgrp_data, ctx->classid);
76 if (--ctx->batch == 0) {
77 ctx->batch = UPDATE_CLASSID_BATCH;
78 return n + 1;
79 }
80 return 0;
81}
82
83static void update_classid_task(struct task_struct *p, u32 classid)
84{
85 struct update_classid_context ctx = {
86 .classid = classid,
87 .batch = UPDATE_CLASSID_BATCH
88 };
89 unsigned int fd = 0;
90
91 /* Only update the leader task, when many threads in this task,
92 * so it can avoid the useless traversal.
93 */
94 if (p != p->group_leader)
95 return;
96
97 do {
98 task_lock(p);
99 fd = iterate_fd(p->files, fd, update_classid_sock, &ctx);
100 task_unlock(p);
101 cond_resched();
102 } while (fd);
103}
104
105static void cgrp_attach(struct cgroup_taskset *tset)
106{
107 struct cgroup_subsys_state *css;
108 struct task_struct *p;
109
110 cgroup_taskset_for_each(p, css, tset) {
111 update_classid_task(p, css_cls_state(css)->classid);
112 }
113}
114
115static u64 read_classid(struct cgroup_subsys_state *css, struct cftype *cft)
116{
117 return css_cls_state(css)->classid;
118}
119
120static int write_classid(struct cgroup_subsys_state *css, struct cftype *cft,
121 u64 value)
122{
123 struct cgroup_cls_state *cs = css_cls_state(css);
124 struct css_task_iter it;
125 struct task_struct *p;
126
127 cs->classid = (u32)value;
128
129 css_task_iter_start(css, 0, &it);
130 while ((p = css_task_iter_next(&it)))
131 update_classid_task(p, cs->classid);
132 css_task_iter_end(&it);
133
134 return 0;
135}
136
137static struct cftype ss_files[] = {
138 {
139 .name = "classid",
140 .read_u64 = read_classid,
141 .write_u64 = write_classid,
142 },
143 { } /* terminate */
144};
145
146struct cgroup_subsys net_cls_cgrp_subsys = {
147 .css_alloc = cgrp_css_alloc,
148 .css_online = cgrp_css_online,
149 .css_free = cgrp_css_free,
150 .attach = cgrp_attach,
151 .legacy_cftypes = ss_files,
152};
1/*
2 * net/core/netclassid_cgroup.c Classid Cgroupfs Handling
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
8 *
9 * Authors: Thomas Graf <tgraf@suug.ch>
10 */
11
12#include <linux/slab.h>
13#include <linux/cgroup.h>
14#include <linux/fdtable.h>
15#include <net/cls_cgroup.h>
16#include <net/sock.h>
17
18static inline struct cgroup_cls_state *css_cls_state(struct cgroup_subsys_state *css)
19{
20 return css ? container_of(css, struct cgroup_cls_state, css) : NULL;
21}
22
23struct cgroup_cls_state *task_cls_state(struct task_struct *p)
24{
25 return css_cls_state(task_css_check(p, net_cls_cgrp_id,
26 rcu_read_lock_bh_held()));
27}
28EXPORT_SYMBOL_GPL(task_cls_state);
29
30static struct cgroup_subsys_state *
31cgrp_css_alloc(struct cgroup_subsys_state *parent_css)
32{
33 struct cgroup_cls_state *cs;
34
35 cs = kzalloc(sizeof(*cs), GFP_KERNEL);
36 if (!cs)
37 return ERR_PTR(-ENOMEM);
38
39 return &cs->css;
40}
41
42static int cgrp_css_online(struct cgroup_subsys_state *css)
43{
44 struct cgroup_cls_state *cs = css_cls_state(css);
45 struct cgroup_cls_state *parent = css_cls_state(css->parent);
46
47 if (parent)
48 cs->classid = parent->classid;
49
50 return 0;
51}
52
53static void cgrp_css_free(struct cgroup_subsys_state *css)
54{
55 kfree(css_cls_state(css));
56}
57
58static int update_classid_sock(const void *v, struct file *file, unsigned n)
59{
60 int err;
61 struct socket *sock = sock_from_file(file, &err);
62
63 if (sock) {
64 spin_lock(&cgroup_sk_update_lock);
65 sock_cgroup_set_classid(&sock->sk->sk_cgrp_data,
66 (unsigned long)v);
67 spin_unlock(&cgroup_sk_update_lock);
68 }
69 return 0;
70}
71
72static void update_classid(struct cgroup_subsys_state *css, void *v)
73{
74 struct css_task_iter it;
75 struct task_struct *p;
76
77 css_task_iter_start(css, &it);
78 while ((p = css_task_iter_next(&it))) {
79 task_lock(p);
80 iterate_fd(p->files, 0, update_classid_sock, v);
81 task_unlock(p);
82 }
83 css_task_iter_end(&it);
84}
85
86static void cgrp_attach(struct cgroup_taskset *tset)
87{
88 struct cgroup_subsys_state *css;
89
90 cgroup_taskset_first(tset, &css);
91 update_classid(css,
92 (void *)(unsigned long)css_cls_state(css)->classid);
93}
94
95static u64 read_classid(struct cgroup_subsys_state *css, struct cftype *cft)
96{
97 return css_cls_state(css)->classid;
98}
99
100static int write_classid(struct cgroup_subsys_state *css, struct cftype *cft,
101 u64 value)
102{
103 struct cgroup_cls_state *cs = css_cls_state(css);
104
105 cgroup_sk_alloc_disable();
106
107 cs->classid = (u32)value;
108
109 update_classid(css, (void *)(unsigned long)cs->classid);
110 return 0;
111}
112
113static struct cftype ss_files[] = {
114 {
115 .name = "classid",
116 .read_u64 = read_classid,
117 .write_u64 = write_classid,
118 },
119 { } /* terminate */
120};
121
122struct cgroup_subsys net_cls_cgrp_subsys = {
123 .css_alloc = cgrp_css_alloc,
124 .css_online = cgrp_css_online,
125 .css_free = cgrp_css_free,
126 .attach = cgrp_attach,
127 .legacy_cftypes = ss_files,
128};