lgcosta
da2e9b679a
- pfk.h: BSD types/ioctl encoding (OpenBSD bit layout), locks (NET_LOCK=rwsem), pools, timeouts, mbuf shim over sk_buff, ifnet registry, toeplitz/siphash - pfk_mod/pfk_hooks: misc /dev/pf (0600), IPv4 netfilter hook skeleton, DIOCGETSTATUS answered (M1 skeleton; engine ioctls land with pf_ioctl.c) - vendorize/stage-port scripts: deterministic upstream staging with seds (struct renames, IFF_*->PFIFF_*, sa_len drops) logged to docs/porting-notes - fixes: modules_prepare+Module.symvers for out-of-tree builds
87 lines
1.8 KiB
C
87 lines
1.8 KiB
C
/*
|
|
* PF-on-Linux: pfk module core — load/exit, /dev/pf misc device,
|
|
* NET_LOCK bring-up, staged upstream bring-up hooks. (ISC 2026)
|
|
*/
|
|
#include <pfk.h>
|
|
#include <pfk_api.h>
|
|
#include <net/pfvar.h>
|
|
#include <net/pfvar_priv.h>
|
|
|
|
extern void pfk_mbuf_exit(void);
|
|
extern int pfk_if_init(void);
|
|
extern void pfk_if_exit(void);
|
|
|
|
static int pfk_open(struct inode *inode, struct file *filp)
|
|
{
|
|
if (filp->f_mode & FMODE_WRITE)
|
|
return capable(CAP_NET_ADMIN) ? 0 : -EPERM;
|
|
return 0;
|
|
}
|
|
|
|
static long pfk_ioctl_io(struct file *filp, unsigned int cmd,
|
|
unsigned long arg)
|
|
{
|
|
if (!capable(CAP_NET_ADMIN))
|
|
return -EPERM;
|
|
return pfk_ioctl(filp, cmd, arg);
|
|
}
|
|
|
|
static const struct file_operations pfk_fops = {
|
|
.owner = THIS_MODULE,
|
|
.open = pfk_open,
|
|
.unlocked_ioctl = pfk_ioctl_io,
|
|
.compat_ioctl = compat_ptr_ioctl,
|
|
};
|
|
|
|
static struct miscdevice pfk_dev = {
|
|
.minor = MISC_DYNAMIC_MINOR,
|
|
.name = "pf",
|
|
.fops = &pfk_fops,
|
|
.mode = 0600,
|
|
};
|
|
|
|
static int __init pfk_init(void)
|
|
{
|
|
int err;
|
|
|
|
pfk_net_lock_init();
|
|
err = pfk_mbuf_init();
|
|
if (err)
|
|
return err;
|
|
err = pfk_if_init();
|
|
if (err)
|
|
goto err_mbuf;
|
|
err = pfk_hooks_register();
|
|
if (err)
|
|
goto err_if;
|
|
err = misc_register(&pfk_dev);
|
|
if (err)
|
|
goto err_hooks;
|
|
pr_info("pfk: PF-on-Linux engine loaded (OpenBSD 8.0 base)\n");
|
|
return 0;
|
|
err_hooks:
|
|
pfk_hooks_unregister();
|
|
err_if:
|
|
pfk_if_exit();
|
|
err_mbuf:
|
|
pfk_mbuf_exit();
|
|
return err;
|
|
}
|
|
|
|
static void __exit pfk_exit(void)
|
|
{
|
|
misc_deregister(&pfk_dev);
|
|
pfk_hooks_unregister();
|
|
pfk_if_exit();
|
|
pfk_mbuf_exit();
|
|
pr_info("pfk: unloaded\n");
|
|
}
|
|
|
|
module_init(pfk_init);
|
|
module_exit(pfk_exit);
|
|
MODULE_LICENSE("Dual MIT/GPL"); /* ISC/BSD code; Dual MIT/GPL is the kernel-
|
|
* recognised tag for permissive BSD-licensed
|
|
* modules linking GPL exports (see LICENSE). */
|
|
MODULE_DESCRIPTION("PF packet filter (ported from OpenBSD 8.0) for Linux");
|
|
MODULE_AUTHOR("PF-on-Linux contributors");
|