Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::3:8 as permitted sender) client-ip=2620:137:e000::3:8;
IronPort-PHdr: A9a23:ViDUjRTNaSgIxZFKTT9G4EQdHNpsovKeAWYlg6HP9ppQJ/3wt523J
 lfWoO5thQWUA9aT4Kdehu7fo63sHnYN5Z+RvXxRFf4EW0oLk8wLmQwnDsOfT0r9Kf/hdSshG
 8peElRi+iLzKh1OFcLzbEHVuCf34yQbBxP/MgR4PKHyHIvThN6wzOe859jYZAAb4Vj1YeZcN
 hKz/ynYqsREupZoKKs61knsr2BTcutbgEJEd3mUmQrx4Nv1wI97/nZ1mtcMsvBNS777eKJqf
 fl9N3ELI2s17cvkuFz4QA2D62E1fk4WnxFLUG2npBv6C6vU6THFhLEi2Q6feo71fbQdVz/4/
 rt3akW4qhg/Zi8czUyQoMgsk7Jdqjf09Hkdi4SBQJyXGaN7W4fDdM8FGzR8dJpNWyJBRYXsX
 a0CIPI7FMRnqNnegmITtTa1CCCVCcPiwCZi3kW11ogn7bpwNV7s5VIRJ/4qnWr6h8zILKUXc
 uaIkKjBlD/bdvJ0iQzXxarneE8Hi6GgZ/FRX9Tuk3kiKT/mgguqhYPfYjPEzflVnEqp3tt8b
 dKtmT8IqSpYmRKt3v18i7j0nd062Eza/ngoy48lfsOgaxFXQfP0RcgYp2SbLYxwWsQ4XyRyt
 T0nzqFToZegZ3tiIPUPwhfeb7mKf4eFzEi/EuiLKCp+hHVrdaj5ixvhuUSjy+ipTsCvyx4Kt
 StKlNDQq2oAnwLe8MmJS/Zxvw+h1D+D2hqV67RsL1o9iKzbLJAs2Pg3kJ8Sul7EBSj4hAP9i
 6r+Sw==
IronPort-SDR: 6538e32e_u995T+0f3oI3d8Xb2kCivg0XfYFggWJCbsif8dTsb2Rtm+Z
 gO48y34Lg4sdYqOE2vKa1KF9YJV1dCJIWD7GB4w==
IronPort-PHdr: A9a23:lvyQWB/TwSp4Kv9uWWy9ngc9DxPPxp3qa1dGopNykalHN7+j9s6/Y
 h+X7qB3gVvATYjXrOhJj+PGvqyzPA5I7cOPqnkfdpxLWRIfz8IQmg0rGsmeDkPnavXtan9yB
 5FZWVto9G28KxIQFtz3elvSpXO/93sVHBD+PhByPeP7BsvZiMHksoL6+8j9eQJN1ha0fb4gF
 wi8rwjaqpszjJB5I6k8jzrl8FBPffhbw38tGUOLkkTZx+KduaBu6T9RvPRzx4tlauDXb684R
 LpXAXEdPmY56dfCmTLDQACMtR5+Gm8WxyZtWBL63kqlX7D09Wj5hu5U1iLALNHqb+pkewuav
 rZOdTKvoiNbKC4/+kSC2akSxKgOgA+jikV65qrKaZ2KaqRDVP/Bcd0aAmwRbOBceDR7K6GDa
 NssKtMcJctToqDEqnsDpwKUXTPvD8by9GEZoiDc5PML68gFPB/o9xUdB9ALk3Lp8NT8ba0KS
 OGXnJLi4BfsZaxw82fR0svpXA4e+8GBY45TfZTr5UYVSgOUlUjIhq7XDgKJ7tQPoTm07cFJb
 sitk1R3qjBMuWeA1NsygdSYjYsFkU7c1npV4KtlcI7wWAt6e9miCJxKq2SAOpBrRt93W2hzo
 3VSItwuvJe6eG0P1J0E7kSPLfKdepWO4hXtWfzXLTorzH5mebfqnx+p6gDg0ezzUMCozUxH5
 jRIiNjCt30BllTT58GLR+E7/xKJ1yyGygbT7e9JOwYzk6/aIIQm2bk+itwYtkGrIw==
IronPort-Data: A9a23:oYHBOKgCIlWznsTOLJMp7fOHX161wxQKZh0ujC45NGQN5FlHY01je
 htvXm2Ha/7cNzGnLd1/OoS/8EIHv5XXyIdlGwZr+Ck2RnhjpJueD7x1DKtf0wB+jiHnZBg6h
 ynLQoCYdKjYdleF+lH3dOKJQUBUjcmgXqD7BPPPJhd/TAplTDZJoR94kobVuKYx6TSCK13L4
 YiaT/H3Ygf/gGcsaD9MsspvlTs21BjMkGNA1rABTa0T1LPuvyF9JI4SI6i3M0z5TuF8dgJtb
 7+epF0R1jqxEyYFUrtJoJ6iGqE5auK60Ty1t5Zjc/PKbi6uBsAF+v1T2PI0MS+7gtgS9jx74
 I0lWZeYEW/FMkBQ8QgQe0EwLs1wAUFJ0OX6IVmwk8Oo9W75eiXRnvB1EmExApJNr46bAUkWn
 RAZACsIcgjFivK9wPS1UOBxgMQkIsTxeo8S0p1i5WiEVrB3HtaaHPSMvIUHtNszrpgm8fL2Y
 ssSaTNiaFLfbhxUIX8eCYkzl6GmnHDidT1fpl+P46Y6i4TW5FUqjeCyb4uLIrRmQ+0Mp33Eo
 zv29l7aORo6KIehy2PfrUOj07qncSTTHdh6+KeD3vdujU2awGAeEjUTVFuypfiym0j4UNVaQ
 2Qe4CMzq6Uo3E+mVN/wW1u/unHslhcHR/JTHvc85QXLzbDbiy6BD3UAZiZIddhjscgxXzFs3
 ViM9/vlDDpuvbm9SHWS+76OpzSify4YMQcqbCkIVwoEy9ruuoc+ilTIVNkLOKu8lMH0H3f0y
 i2iqCk4mqVVgcMVv42g+lbIqzGhvJ7ESkgy/Aq/dnOl9St3bsiuYInAwVrc7fAGIo+CUlCLs
 X4Is8eb5eEKS5qKkUSlQ/0WHbem596GPSfajFopGIMunxy293CLcodX7zVzYkxuN64seTbuZ
 FLUkQxW45BXMT2haqofS4C2D98j5avtD9LoUrbTdNUmSoFseQmb/SdGZFWXwWnpnU4w16o4P
 P+zb8e2Cl4IBKJm0nyyRuEAwfks3C942GC7bZX6zBCgypKFdnOPRLsEdluTBsgw6aKe/17U9
 /5QMsKLz1NUV+iWSjLa64EeBVADKXwqA9b9rMk/XuSbLCJ4F2w7Tfzc27Usf8pihas9vuPJ+
 GytH0xV0lzygVXZJgiQLHNucrXiWdB4t31TFSgtO0u4nnY4bYux4aM3aZQ6Z/8k+fZlwPoyS
 OMKE+2JBvlMUT3B9y5baJj+rIVmdQiwlASmNCOjZz4+dJdkAQfO/7fZkhDHrXRVS3vo8JJh8
 vj5jFydX59FTEJsFs/LbvKowV6r+3QQ8A5vY3b1zhBoUByE2KBkMSXsiP8wLcwWbxLFwzqRz
 QGNBhkE4+LKpucIHBPh3Mhodq/4QrcsLVkQBGTB87e9OA/T+2fpk8cKU/+FcXqZHCn48bmrL
 7cdhfztEuw1rHATuapFEpFv0f0f4fnrrORk1QhKJijAQGmqLbJCGUO4+/dzmJdD/ZJjgjvua
 HmzooFbHZ6rJPLaFEUgIVt5T+abitARtDrgzdU0B0TY5CZH2r62QBhXNByi0SZYLKVHNb005
 eIbvO8X9A2NpR44OfmWji1v1jqtL15Rd44Fp50lEIvQpQ5z8W57YLvYET7Q3JGDT/5uI3saC
 GaYq4SajosN23eYVWQ4EEb8+NZ0hLMMiUhs90ADLVHYoej1rKY78zMJ+AtmUzkP6AtM1t9yH
 W1ZN0dVA6Gq1BUwjehhW1GcIS1wNCe7yGfQlWRQzHb4SnO2XFPjNGc+YOaB3H4I+lJmIwR0w
 uuq93bHYx3LIufKwSoAaWx0oafCTPtw1DH4tuKJIsCnJ6Q+MB3Z2vKARGxQsBb2I9IDtGuer
 8lQwetAQ6naNykRnq4FN7enxYkgEBCqGEESQNVK3r84ImXHSTTjhRmMMx+Qf+1OFdzr8Gi5K
 d5kFvhQcxGAiBfUoS0pA4wML4Apm/Rz1t4Je+7oF1UnqJqalCJi67jLxxj9hUgqYtRgqtk8I
 YXvbAC/EnScqH9Xum3VpuxGBzaIWsYFbwjCw+yFyuUFOJYduuVKc0tp8L+Lk1iKEQlgpTS4g
 RjiYvLI8ulc1ohcpYvgPaFdDQGSK9moduCp8hi2gutef+H0LsbCmAMEmGbJZz0ME+MqZO12s
 rCRvPrc/kDP5u82Wl+EvaixLfBC4MHqUddHNs7yEmJhohKDf83R+DoGxXGzLM1YsdFa5/T/f
 TCCVumLSYc3VetelVpvUAoPNzYGCq/yULXsmjPlkdSIFSom8FLmKPGJyCbXSF91JwE0P6/wM
 AvWg8qVx8t5qd1MDSAUBvs9DJ5fJkTiaJQcdNbwlGe5C0ewiQm8uJ/npwsR2Q/WA1bVFfTKw
 I/3aSX/UD+Qu6j46s5TnKIvnx8QDVd72fIReGBE8fFIqjmKNkw0BsVDDocnU7Z6yjfT0rP8b
 xHzNFoSMz33B2l4QE+t8ebdURe6Lc1QHNXAfxgC3V6eMgWyD6O+WIpRzD9quSpKS2Gy3dOcC
 I8s/1PrNUKM2bBvf+EY48K7jcpBxv/3wnEp+1j3o/ftAiQxUKk763h8IDVjDSD3MdnBtEHuF
 1gHQWppREKaS0moNe1Cf3VTOg8SvRKx7jEOQBqM/u3iuNSg/LUd8MH8BuD97ORSJoBCbrsDX
 mj+SGax8nibkC5b87cgv9Uyx7R4E7SXF8y9N7XuXhAWg7r20Gk8IscehmAaeanOIuKE/4/1z
 VFAO0QDOXk=
IronPort-HdrOrdr: A9a23:4sS34Kj1sgRPnOtVEqjzEqcxHnBQXrUji2hC6mlwRA09TyX4ra
 2TdZsgtSMc5Ax6ZJhfo7G90cC7KBu2yXcf2+Us1NmZMzUOwFHHEL1f
From:   =?UTF-8?q?Michael=20Wei=C3=9F?= <michael.weiss@aisec.fraunhofer.de>
To:     Alexander Mikhalitsyn <alexander@mihalicyn.com>,
        Christian Brauner <brauner@kernel.org>,
        Alexei Starovoitov <ast@kernel.org>,
        Paul Moore <paul@paul-moore.com>
CC:     Daniel Borkmann <daniel@iogearbox.net>,
        Andrii Nakryiko <andrii@kernel.org>,
        Martin KaFai Lau <martin.lau@linux.dev>,
        Song Liu <song@kernel.org>, Yonghong Song <yhs@fb.com>,
        John Fastabend <john.fastabend@gmail.com>,
        KP Singh <kpsingh@kernel.org>,
        Stanislav Fomichev <sdf@google.com>,
        Hao Luo <haoluo@google.com>, Jiri Olsa <jolsa@kernel.org>,
        Quentin Monnet <quentin@isovalent.com>,
        Alexander Viro <viro@zeniv.linux.org.uk>,
        Miklos Szeredi <miklos@szeredi.hu>,
        Amir Goldstein <amir73il@gmail.com>,
        "Serge E. Hallyn" <serge@hallyn.com>, <bpf@vger.kernel.org>,
        <linux-kernel@vger.kernel.org>, <linux-fsdevel@vger.kernel.org>,
        <gyroidos@aisec.fraunhofer.de>,
        =?UTF-8?q?Michael=20Wei=C3=9F?= <michael.weiss@aisec.fraunhofer.de>,
        Alexander Mikhalitsyn <aleksandr.mikhalitsyn@canonical.com>
Subject: [RESEND RFC PATCH v2 13/14] bpf: cgroup: Introduce helper cgroup_bpf_current_enabled()
Date:   Wed, 25 Oct 2023 11:42:23 +0200
Message-Id: <20231025094224.72858-14-michael.weiss@aisec.fraunhofer.de>
In-Reply-To: <20231025094224.72858-1-michael.weiss@aisec.fraunhofer.de>
References: <20231025094224.72858-1-michael.weiss@aisec.fraunhofer.de>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?ekMzd1Jadk9vWWs0Wll3QnRjUXJ4eWVQU0hXd24rbURId3hrKzNIbzVVckxO?=
 =?utf-8?B?Zmp3VmRZYzFldW9kZGdpR1NZTVFIYy9MTEMrSXgyeWcxb2FnZHRtdVhEVUFZ?=
 =?utf-8?B?R3Z4NFk3SmFDcmdQOHBGY0hEQ1UwOTZnbDZ3MWxRdklkdnJCTVVuaXF5M010?=
 =?utf-8?B?MXA1RnhKeGxYMXBLYmFYMThKWENnUHhnYU5EV0lKSTc3L1RKODkxY0hnSXYy?=
 =?utf-8?B?WGFNMytFRzMvS09jUTA2WXhpM1JXUUIxUVFGYzRLNlBOcW1YcXlQUkJ3MUxk?=
 =?utf-8?B?MEh0UFNCQjE1aCs4bXlReGRYSWQ3dXhZc29yZWNyelUxMVhkdUs4Wm1uc0xF?=
 =?utf-8?B?Q3RWcmMvbTA3Rm8vRlY1d3hBbVdIUnNxOFZERzVac3d4azlmeTN3UEd1dUZQ?=
 =?utf-8?B?ZFpRcEdWNUgxeUo4R3Axa0VTUnNrb0FzR3ltY2hDV1RuRDRrdHQrSTBuTXhi?=
 =?utf-8?B?MXhuV2loU0hGVzlZZjliM3djdTNnUTZQMGtnUmJTNStnSHA4RWFJazJqZWts?=
 =?utf-8?B?bkNIbjdlVm8zZzkxc1pDejY3RzZxSzlTNG5qak1JTEVtbG56dGdzdW1ZMlZ1?=
 =?utf-8?B?b3RFY29FU2pldVJ1UXVsdzdwYWFMZGRMNFNJeXNCMFVLdzhaUFg1bTQ3Nllx?=
 =?utf-8?B?bUQ4bkl1R0pZbXVlWEZiRmtBSXMxK1VKZ0ZIZjNNakJvSGZoeTg0MnVhNmhV?=
 =?utf-8?B?SWJqMnZGTDBtRGwyblRrdXlKWm1KbTNBR0RlUnp2Vjd3REN1cG9YTUlMdEZI?=
 =?utf-8?B?em9QRzNWWVRRdVdYQWlMc0VpNWlJWThUckFCcHFPd250eWtQUUlrWEV0RHBK?=
 =?utf-8?B?L3hYK3h4M05oYTBOM21HTTQ2amRZTStoWEE0ek1EYy9GK3RVaU9wTWtJMHAz?=
 =?utf-8?B?cUxISE9mR3ROZkZNaSsxVkptcVRqWTdDdUczRWZyc05HUm5mZ3NLQzlRRE0x?=
 =?utf-8?B?MFZpQjNYSVJTbDlvbGNmL1Vmck9odnJmcWYxdnNrbXBCcVl1OWo1STJnMWI1?=
 =?utf-8?B?VEZNYlJCUzZyQ1VrWnhremtqU2oxLzc1b1VVbXUzVVcyRHlaekZqRThibkV2?=
 =?utf-8?B?Wnd3dDVTTHNZMy9TWTByZ0VaSFhTaGQvbERYanQzL0YxTWJlQVRhYktzWlJW?=
 =?utf-8?B?cFRNemxMNWVyaFFXN0lvdU5uNGU0NGtXeHpGL08vSzlKM0hHWVhJVEZ6KzQy?=
 =?utf-8?B?RWJoWGc5Q1dxb1htRkpHTWJjeFFKTlJLSk9WWXFYbGlMam9xUnU0OW42c1hZ?=
 =?utf-8?B?dER3b3JvejVMYjVtRERERUFTWGErNjVLcVRCWVphMlZoUWp2MFQyZU9lWXBS?=
 =?utf-8?B?RWRtVXhZVzlNbVJkdjZ4Nlo2aWhNRXU1S3BNT3pnWmgyQk5mSmpzSEJJUDBN?=
 =?utf-8?B?eW9SdEVGdDlReWUvaGlvL2ZTVEQyTVI2OHhlLzFFZGtoZXVOQ1h4VlRldFhM?=
 =?utf-8?B?RFBjUFNKaWJuMkNIdkMwKzBUR2ZZamVuelAybnV5cm85cU0rZDIzZEdybUtY?=
 =?utf-8?B?S2dYRVZRNDI4b016cGNuSGc0NnlUYmJMVVlSWkhGL0NSVDlBWFBPWDBtRWRy?=
 =?utf-8?B?QlpsZ2lHaE45NjU3dnFob21PWldRM2pmdXZEUmVmNkl1UGF4TXpHbHhLRG1H?=
 =?utf-8?B?bW5YU01XNG9pUjkxUnJUYzNiejJCTWtCcDV5L3RqY08rMVFLTldvR2FwbW40?=
 =?utf-8?B?ajRNSEFoM3JnT2hVb01YUTRZSGxwaVRCSjErSEtIR1NvQmUyTjZ6R2sxT3VQ?=
 =?utf-8?B?ejhFL09jOUtMakR3bEk0YUp6eWZhWXExdUh6aDZNeVJqWTlPVlV4eFA2YlR4?=
 =?utf-8?B?OG5TQ0JJNHR5dnNNMHRMSEc1cUtxZlliZTV4ZzdDMkp1MWsyMGEwcUwyNEVx?=
 =?utf-8?B?UnBFVjJGU1dkNis1ZjJMQ1FHaCtqSWRYZndaaUd2bVhuTVF3Y1g0T29MbnB6?=
 =?utf-8?B?RFpuRDZTRWVISkJJU2c4UnRHY3NJVGlFeERLMC9GSGV0RWxMQTZCSzlja1Nq?=
 =?utf-8?B?eG5PYjgxYkN4V3c5eUZ4MmJGL1pEN1FkNXp6Q0tQMEdwY3BaOVArVjFNK2F2?=
 =?utf-8?B?S3Zwb2hVZG9qV09mdEJ6Wkl3R0ZrWElidUh5cnduUk9ucUlhVHp0ejBxSjFF?=
 =?utf-8?B?Rm85SDZGcFYyZTNyUzJOOU5UMUFxOHVrR09hZ2ZqYlM0Szd3eEJwZndHWGpU?=
 =?utf-8?B?K0hialFrc1RXdkxmN1l5dHEvQ1I2Z0Vnek54VXZhNDRkdXo4WG1xSHlNVUVt?=
 =?utf-8?Q?2Q7UOgspyo2wOslYsSI2q35G+iUT3GoJy4RXsZleWc=3D?=
X-MS-Exchange-CrossTenant-Network-Message-Id: e03c1c06-6d09-4730-cc83-08dbd53ecad0
X-MS-Exchange-CrossTenant-AuthSource: BEZP281MB2791.DEUP281.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Oct 2023 09:43:07.1760
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: f930300c-c97d-4019-be03-add650a171c4
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: YGBrTQLBBxYvBDOPV23YGMx640pRU+21xc5d9X0e0w9rvkPgrR8oe/7vdwP+S7je6G2gTimxcZgaZaMOJvAGVoWJasj3f40XqUdM3aZTfycXfQdazJYqOPQ2sFeIZQ7D
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BE0P281MB0116
X-OriginatorOrg: aisec.fraunhofer.de
X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,
	SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on fry.vger.email
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org
X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.4 (fry.vger.email [0.0.0.0]); Wed, 25 Oct 2023 02:45:45 -0700 (PDT)

This helper can be used to check if a cgroup-bpf specific program is
active for the current task.

Signed-off-by: Michael Weiß <michael.weiss@aisec.fraunhofer.de>
Reviewed-by: Alexander Mikhalitsyn <aleksandr.mikhalitsyn@canonical.com>
---
 include/linux/bpf-cgroup.h |  2 ++
 kernel/bpf/cgroup.c        | 14 ++++++++++++++
 2 files changed, 16 insertions(+)

diff --git a/include/linux/bpf-cgroup.h b/include/linux/bpf-cgroup.h
index 8506690dbb9c..655697c2a620 100644
--- a/include/linux/bpf-cgroup.h
+++ b/include/linux/bpf-cgroup.h
@@ -184,6 +184,8 @@ static inline bool cgroup_bpf_sock_enabled(struct sock *sk,
 	return array != &bpf_empty_prog_array.hdr;
 }
 
+bool cgroup_bpf_current_enabled(enum cgroup_bpf_attach_type type);
+
 /* Wrappers for __cgroup_bpf_run_filter_skb() guarded by cgroup_bpf_enabled. */
 #define BPF_CGROUP_RUN_PROG_INET_INGRESS(sk, skb)			      \
 ({									      \
diff --git a/kernel/bpf/cgroup.c b/kernel/bpf/cgroup.c
index 03b3d4492980..19ae3d037db7 100644
--- a/kernel/bpf/cgroup.c
+++ b/kernel/bpf/cgroup.c
@@ -24,6 +24,20 @@
 DEFINE_STATIC_KEY_ARRAY_FALSE(cgroup_bpf_enabled_key, MAX_CGROUP_BPF_ATTACH_TYPE);
 EXPORT_SYMBOL(cgroup_bpf_enabled_key);
 
+bool cgroup_bpf_current_enabled(enum cgroup_bpf_attach_type type)
+{
+	struct cgroup *cgrp;
+	struct bpf_prog_array *array;
+
+	rcu_read_lock();
+	cgrp = task_dfl_cgroup(current);
+	rcu_read_unlock();
+
+	array = rcu_access_pointer(cgrp->bpf.effective[type]);
+	return array != &bpf_empty_prog_array.hdr;
+}
+EXPORT_SYMBOL(cgroup_bpf_current_enabled);
+
 /* __always_inline is necessary to prevent indirect call through run_prog
  * function pointer.
  */
-- 
2.30.2