#ifndef BPF_I_H
#define BPF_I_H

#include <linux/filter.h>
#include <stdint.h>
#include <stdlib.h>

#include "bpf_insns.h"
#include "bpf_ext.h"
#include "config.h"
#include "die.h"

extern void bpf_dump_op_table(void);
extern void bpf_dump_all(struct sock_fprog *bpf);
extern int __bpf_validate(const struct sock_fprog *bpf);
extern uint32_t bpf_run_filter(const struct sock_fprog *bpf, uint8_t *packet,
			       size_t plen);
extern void bpf_attach_to_sock(int sock, struct sock_fprog *bpf);
extern void bpf_detach_from_sock(int sock);
extern int enable_kernel_bpf_jit_compiler(void);
extern void bpf_parse_rules(char *rulefile, struct sock_fprog *bpf, uint32_t link_type);
#if defined(HAVE_TCPDUMP_LIKE_FILTER) && defined(NEED_TCPDUMP_LIKE_FILTER)
extern void bpf_try_compile(const char *rulefile, struct sock_fprog *bpf,
			    uint32_t link_type);
#else
static inline void bpf_try_compile(const char *rulefile,
				   struct sock_fprog *bpf __maybe_unused,
				   uint32_t link_type __maybe_unused)
{
	panic("No libpcap support, cannot compile filter: %s\n", rulefile);
}
#endif
static inline void bpf_release(struct sock_fprog *bpf)
{
	free(bpf->filter);
}

#endif /* BPF_I_H */
ion>
<option value='nds-private-remove'>nds-private-remove</option>
<option value='packet-loop-back'>packet-loop-back</option>
<option value='packet-rx-pump-back'>packet-rx-pump-back</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>net-next plumbings</td><td class='sub right'>Tobias Klauser</td></tr></table>
<table class='tabs'><tr><td>
<a href='/cgit.cgi/linux/net-next.git/'>summary</a><a href='/cgit.cgi/linux/net-next.git/refs/?id=19339c251607a3defc7f089511ce8561936fee45'>refs</a><a href='/cgit.cgi/linux/net-next.git/log/Documentation'>log</a><a href='/cgit.cgi/linux/net-next.git/tree/Documentation?id=19339c251607a3defc7f089511ce8561936fee45'>tree</a><a class='active' href='/cgit.cgi/linux/net-next.git/commit/Documentation?id=19339c251607a3defc7f089511ce8561936fee45'>commit</a><a href='/cgit.cgi/linux/net-next.git/diff/Documentation?id=19339c251607a3defc7f089511ce8561936fee45'>diff</a></td><td class='form'><form class='right' method='get' action='/cgit.cgi/linux/net-next.git/log/Documentation'>
<input type='hidden' name='id' value='19339c251607a3defc7f089511ce8561936fee45'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/cgit.cgi/linux/net-next.git/commit/?id=19339c251607a3defc7f089511ce8561936fee45'>root</a>/<a href='/cgit.cgi/linux/net-next.git/commit/Documentation?id=19339c251607a3defc7f089511ce8561936fee45'>Documentation</a></div><div class='content'><div class='cgit-panel'><b>diff options</b><form method='get'><input type='hidden' name='id' value='19339c251607a3defc7f089511ce8561936fee45'/><table><tr><td colspan='2'/></tr><tr><td class='label'>context:</td><td class='ctrl'><select name='context' onchange='this.form.submit();'><option value='1'>1</option><option value='2'>2</option><option value='3' selected='selected'>3</option><option value='4'>4</option><option value='5'>5</option><option value='6'>6</option><option value='7'>7</option><option value='8'>8</option><option value='9'>9</option><option value='10'>10</option><option value='15'>15</option><option value='20'>20</option><option value='25'>25</option><option value='30'>30</option><option value='35'>35</option><option value='40'>40</option></select></td></tr><tr><td class='label'>space:</td><td class='ctrl'><select name='ignorews' onchange='this.form.submit();'><option value='0' selected='selected'>include</option><option value='1'>ignore</option></select></td></tr><tr><td class='label'>mode:</td><td class='ctrl'><select name='dt' onchange='this.form.submit();'><option value='0' selected='selected'>unified</option><option value='1'>ssdiff</option><option value='2'>stat only</option></select></td></tr><tr><td/><td class='ctrl'><noscript><input type='submit' value='reload'/></noscript></td></tr></table></form></div><table summary='commit info' class='commit-info'>
<tr><th>author</th><td>Eric W. Biederman &lt;ebiederm@xmission.com&gt;</td><td class='right'>2016-12-02 09:35:31 -0600</td></tr>
<tr><th>committer</th><td>Eric W. Biederman &lt;ebiederm@xmission.com&gt;</td><td class='right'>2016-12-02 20:58:41 -0600</td></tr>
<tr><th>commit</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/Documentation?id=19339c251607a3defc7f089511ce8561936fee45'>19339c251607a3defc7f089511ce8561936fee45</a> (<a href='/cgit.cgi/linux/net-next.git/patch/Documentation?id=19339c251607a3defc7f089511ce8561936fee45'>patch</a>)</td></tr>
<tr><th>tree</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/tree/?id=19339c251607a3defc7f089511ce8561936fee45'>bc9111556f3cdf375c0a3530420ae9da0b578342</a> /<a href='/cgit.cgi/linux/net-next.git/tree/Documentation?id=19339c251607a3defc7f089511ce8561936fee45'>Documentation</a></td></tr>
<tr><th>parent</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/Documentation?id=f84df2a6f268de584a201e8911384a2d244876e3'>f84df2a6f268de584a201e8911384a2d244876e3</a> (<a href='/cgit.cgi/linux/net-next.git/diff/Documentation?id=19339c251607a3defc7f089511ce8561936fee45&amp;id2=f84df2a6f268de584a201e8911384a2d244876e3'>diff</a>)</td></tr></table>
<div class='commit-subject'>Revert "evm: Translate user/group ids relative to s_user_ns when computing HMAC"</div><div class='commit-msg'>This reverts commit 0b3c9761d1e405514a551ed24d3ea89aea26ce14.

Seth Forshee &lt;seth.forshee@canonical.com&gt; writes:
&gt; All right, I think 0b3c9761d1e405514a551ed24d3ea89aea26ce14 should be
&gt; reverted then. EVM is a machine-local integrity mechanism, and so it
&gt; makes sense that the signature would be based on the kernel's notion of
&gt; the uid and not the filesystem's.

I added a commment explaining why the EVM hmac needs to be in the
kernel's notion of uid and gid, not the filesystems to prevent
remounting the filesystem and gaining unwaranted trust in files.

Acked-by: Seth Forshee &lt;seth.forshee@canonical.com&gt;
Signed-off-by: "Eric W. Biederman" &lt;ebiederm@xmission.com&gt;
</div><div class='diffstat-header'><a href='/cgit.cgi/linux/net-next.git/diff/?id=19339c251607a3defc7f089511ce8561936fee45'>Diffstat</a> (limited to 'Documentation')</div><table summary='diffstat' class='diffstat'>