flow_dissector: implements flow dissector BPF hook

Adds a hook for programs of type BPF_PROG_TYPE_FLOW_DISSECTOR and
attach type BPF_FLOW_DISSECTOR that is executed in the flow dissector
path. The BPF program is per-network namespace.

Signed-off-by: Petar Penkov <ppenkov@google.com>
Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

1 files changed, 8 insertions, 0 deletions

diff --git a/kernel/bpf/syscall.c b/kernel/bpf/syscall.c
index 3c9636f03bb2..b3c2d09bcf7a 100644
--- a/kernel/bpf/syscall.c
+++ b/kernel/bpf/syscall.c
@@ -1615,6 +1615,9 @@ static int bpf_prog_attach(const union bpf_attr *attr)
         case BPF_LIRC_MODE2:
                 ptype = BPF_PROG_TYPE_LIRC_MODE2;
                 break;
+        case BPF_FLOW_DISSECTOR:
+                ptype = BPF_PROG_TYPE_FLOW_DISSECTOR;
+                break;
         default:
                 return -EINVAL;
         }
@@ -1636,6 +1639,9 @@ static int bpf_prog_attach(const union bpf_attr *attr)
         case BPF_PROG_TYPE_LIRC_MODE2:
                 ret = lirc_prog_attach(attr, prog);
                 break;
+        case BPF_PROG_TYPE_FLOW_DISSECTOR:
+                ret = skb_flow_dissector_bpf_prog_attach(attr, prog);
+                break;
         default:
                 ret = cgroup_bpf_prog_attach(attr, ptype, prog);
         }
@@ -1688,6 +1694,8 @@ static int bpf_prog_detach(const union bpf_attr *attr)
                 return sockmap_get_from_fd(attr, BPF_PROG_TYPE_SK_SKB, NULL);
         case BPF_LIRC_MODE2:
                 return lirc_prog_detach(attr);
+        case BPF_FLOW_DISSECTOR:
+                return skb_flow_dissector_bpf_prog_detach(attr);
         default:
                 return -EINVAL;
         }