Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 1 | /* |
| 2 | * fuse_media eBPF program |
| 3 | * |
| 4 | * Copyright (C) 2021 Google |
| 5 | * |
| 6 | * This program is free software; you can redistribute it and/or |
| 7 | * modify it under the terms of the GNU General Public License version |
| 8 | * 2 as published by the Free Software Foundation. |
| 9 | * |
| 10 | * This program is distributed in the hope that it will be useful, |
| 11 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 12 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 13 | * GNU General Public License for more details. |
| 14 | * |
| 15 | */ |
| 16 | |
| 17 | #include <bpf_helpers.h> |
| 18 | |
| 19 | #include <stdint.h> |
| 20 | |
| 21 | #define __KERNEL__ |
| 22 | #include <fuse_kernel.h> |
| 23 | |
| 24 | #define bpf_printk(fmt, ...) \ |
| 25 | ({ \ |
| 26 | char ____fmt[] = fmt; \ |
| 27 | bpf_trace_printk(____fmt, sizeof(____fmt), ##__VA_ARGS__); \ |
| 28 | }) |
| 29 | |
| 30 | DEFINE_BPF_PROG("fuse/media", AID_ROOT, AID_MEDIA_RW, fuse_media) |
| 31 | (struct fuse_args* fa) { |
| 32 | switch (fa->opcode) { |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 33 | case FUSE_LOOKUP | FUSE_PREFILTER: { |
| 34 | const char* name = fa->in_args[0].value; |
| 35 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 36 | bpf_printk("LOOKUP: %lx %s", fa->nodeid, name); |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 37 | if (fa->nodeid == 1) |
| 38 | return FUSE_BPF_USER_FILTER | FUSE_BPF_BACKING; |
| 39 | else |
| 40 | return FUSE_BPF_BACKING; |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 41 | } |
| 42 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 43 | /* FUSE_FORGET */ |
| 44 | |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 45 | case FUSE_GETATTR | FUSE_PREFILTER: { |
| 46 | const struct fuse_getattr_in* fgi = fa->in_args[0].value; |
| 47 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 48 | bpf_printk("GETATTR: %d", fgi->fh); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 49 | return FUSE_BPF_BACKING; |
| 50 | } |
| 51 | |
| 52 | case FUSE_SETATTR | FUSE_PREFILTER: { |
| 53 | const struct fuse_setattr_in* fsi = fa->in_args[0].value; |
| 54 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 55 | bpf_printk("SETATTR: %d", fsi->fh); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 56 | return FUSE_BPF_BACKING; |
| 57 | } |
| 58 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 59 | /* FUSE_READLINK */ |
| 60 | /* FUSE_SYMLINK */ |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 61 | |
| 62 | case FUSE_MKNOD | FUSE_PREFILTER: { |
| 63 | const struct fuse_mknod_in* fmi = fa->in_args[0].value; |
| 64 | const char* name = fa->in_args[1].value; |
| 65 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 66 | bpf_printk("MKNOD: %s %x %x", name, fmi->rdev | fmi->mode, fmi->umask); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 67 | return FUSE_BPF_BACKING; |
| 68 | } |
| 69 | |
| 70 | case FUSE_MKDIR | FUSE_PREFILTER: { |
| 71 | const struct fuse_mkdir_in* fmi = fa->in_args[0].value; |
| 72 | const char* name = fa->in_args[1].value; |
| 73 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 74 | bpf_printk("MKDIR: %s %x %x", name, fmi->mode, fmi->umask); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 75 | return FUSE_BPF_BACKING; |
| 76 | } |
| 77 | |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 78 | case FUSE_UNLINK | FUSE_PREFILTER: { |
| 79 | const char* name = fa->in_args[0].value; |
| 80 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 81 | bpf_printk("UNLINK: %s", name); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 82 | return FUSE_BPF_BACKING; |
| 83 | } |
| 84 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 85 | case FUSE_RMDIR | FUSE_PREFILTER: { |
| 86 | const char* name = fa->in_args[0].value; |
| 87 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 88 | bpf_printk("RMDIR: %s", name); |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 89 | return FUSE_BPF_BACKING; |
| 90 | } |
| 91 | |
Alessio Balsini | 6def194 | 2022-03-15 10:44:09 +0000 | [diff] [blame] | 92 | case FUSE_RENAME | FUSE_PREFILTER: { |
| 93 | const char* name_old = fa->in_args[1].value; |
| 94 | const char* name_new = fa->in_args[2].value; |
| 95 | |
| 96 | bpf_printk("RENAME: %s to %s", name_old, name_new); |
| 97 | return FUSE_BPF_BACKING; |
| 98 | } |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 99 | |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 100 | case FUSE_LINK | FUSE_PREFILTER: { |
| 101 | const struct fuse_link_in* fli = fa->in_args[0].value; |
| 102 | const char* dst_name = fa->in_args[1].value; |
| 103 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 104 | bpf_printk("LINK: %d %s", fli->oldnodeid, dst_name); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 105 | return FUSE_BPF_BACKING; |
| 106 | } |
| 107 | |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 108 | case FUSE_OPEN | FUSE_PREFILTER: { |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 109 | bpf_printk("OPEN: %d", fa->nodeid); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 110 | return FUSE_BPF_BACKING; |
| 111 | } |
| 112 | |
| 113 | case FUSE_READ | FUSE_PREFILTER: { |
| 114 | const struct fuse_read_in* fri = fa->in_args[0].value; |
| 115 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 116 | bpf_printk("READ: fh: %lu, offset %lu, size %lu", fri->fh, fri->offset, fri->size); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 117 | return FUSE_BPF_BACKING; |
| 118 | } |
| 119 | |
| 120 | case FUSE_WRITE | FUSE_PREFILTER: { |
| 121 | const struct fuse_write_in* fwi = fa->in_args[0].value; |
| 122 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 123 | bpf_printk("WRITE: fh: %lu, offset %lu, size %lu", fwi->fh, fwi->offset, fwi->size); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 124 | return FUSE_BPF_BACKING; |
| 125 | } |
| 126 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 127 | /* FUSE_STATFS */ |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 128 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 129 | case FUSE_RELEASE | FUSE_PREFILTER: { |
| 130 | const struct fuse_release_in* fri = fa->in_args[0].value; |
| 131 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 132 | bpf_printk("RELEASE: %d", fri->fh); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 133 | return FUSE_BPF_BACKING; |
| 134 | } |
| 135 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 136 | /* FUSE_FSYNC */ |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 137 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 138 | case FUSE_SETXATTR | FUSE_PREFILTER: { |
| 139 | const char* name = fa->in_args[1].value; |
| 140 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 141 | bpf_printk("SETXATTR: %d %s", fa->nodeid, name); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 142 | return FUSE_BPF_BACKING; |
| 143 | } |
| 144 | |
| 145 | case FUSE_GETXATTR | FUSE_PREFILTER: { |
| 146 | const char* name = fa->in_args[1].value; |
| 147 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 148 | bpf_printk("GETXATTR: %d %s", fa->nodeid, name); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 149 | return FUSE_BPF_BACKING; |
| 150 | } |
| 151 | |
| 152 | case FUSE_LISTXATTR | FUSE_PREFILTER: { |
| 153 | const char* name = fa->in_args[1].value; |
| 154 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 155 | bpf_printk("LISTXATTR: %d %s", fa->nodeid, name); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 156 | return FUSE_BPF_BACKING; |
| 157 | } |
| 158 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 159 | /* FUSE_REMOVEXATTR */ |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 160 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 161 | case FUSE_FLUSH | FUSE_PREFILTER: { |
| 162 | const struct fuse_flush_in* ffi = fa->in_args[0].value; |
| 163 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 164 | bpf_printk("FLUSH: %d", ffi->fh); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 165 | return FUSE_BPF_BACKING; |
| 166 | } |
| 167 | |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 168 | /* FUSE_INIT */ |
| 169 | |
| 170 | case FUSE_OPENDIR | FUSE_PREFILTER: { |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 171 | bpf_printk("OPENDIR: %d", fa->nodeid); |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 172 | return FUSE_BPF_BACKING; |
| 173 | } |
| 174 | |
| 175 | case FUSE_READDIR | FUSE_PREFILTER: { |
| 176 | const struct fuse_read_in* fri = fa->in_args[0].value; |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 177 | bpf_printk("READDIR: fh: %lu", fri->fh, fri->offset); |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 178 | return FUSE_BPF_BACKING; |
| 179 | } |
| 180 | |
| 181 | case FUSE_RELEASEDIR | FUSE_PREFILTER: { |
| 182 | const struct fuse_release_in* fri = fa->in_args[0].value; |
| 183 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 184 | bpf_printk("RELEASEDIR: %d", fri->fh); |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 185 | return FUSE_BPF_BACKING; |
| 186 | } |
| 187 | |
| 188 | /* FUSE_FSYNCDIR */ |
| 189 | /* FUSE_GETLK */ |
| 190 | /* FUSE_SETLK */ |
| 191 | /* FUSE_SETLKW */ |
| 192 | |
| 193 | case FUSE_ACCESS | FUSE_PREFILTER: { |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 194 | bpf_printk("ACCESS: %d", fa->nodeid); |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 195 | return FUSE_BPF_BACKING; |
| 196 | } |
| 197 | |
| 198 | case FUSE_CREATE | FUSE_PREFILTER: { |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 199 | bpf_printk("CREATE: %s", fa->in_args[1].value); |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 200 | return FUSE_BPF_BACKING; |
| 201 | } |
| 202 | |
| 203 | /* FUSE_INTERRUPT */ |
| 204 | /* FUSE_BMAP */ |
| 205 | /* FUSE_DESTROY */ |
| 206 | /* FUSE_IOCTL */ |
| 207 | /* FUSE_POLL */ |
| 208 | /* FUSE_NOTIFY_REPLY */ |
| 209 | /* FUSE_BATCH_FORGET */ |
| 210 | |
| 211 | case FUSE_FALLOCATE | FUSE_PREFILTER: { |
| 212 | const struct fuse_fallocate_in* ffa = fa->in_args[0].value; |
| 213 | |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 214 | bpf_printk("FALLOCATE: %d %lu", ffa->fh, ffa->length); |
Alessio Balsini | 41fe801 | 2022-03-15 11:06:45 +0000 | [diff] [blame] | 215 | return FUSE_BPF_BACKING; |
| 216 | } |
| 217 | |
| 218 | /* FUSE_READDIRPLUS */ |
| 219 | /* FUSE_RENAME2 */ |
| 220 | /* FUSE_LSEEK */ |
| 221 | /* FUSE_COPY_FILE_RANGE */ |
| 222 | /* CUSE_INIT */ |
| 223 | |
Alessio Balsini | b7d120d | 2022-01-22 12:31:32 +0000 | [diff] [blame] | 224 | case FUSE_CANONICAL_PATH | FUSE_PREFILTER: { |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 225 | bpf_printk("CANONICAL_PATH: %d", fa->nodeid); |
Alessio Balsini | b7d120d | 2022-01-22 12:31:32 +0000 | [diff] [blame] | 226 | return FUSE_BPF_BACKING; |
| 227 | } |
| 228 | |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 229 | default: |
| 230 | if (fa->opcode & FUSE_PREFILTER) |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 231 | bpf_printk("Prefilter *** UNKNOWN *** opcode: %d", fa->opcode & FUSE_OPCODE_FILTER); |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 232 | else if (fa->opcode & FUSE_POSTFILTER) |
Alessio Balsini | 3f3c5c9 | 2022-03-15 11:14:34 +0000 | [diff] [blame] | 233 | bpf_printk("Postfilter *** UNKNOWN *** opcode: %d", |
Paul Lawrence | 5bb6bb9 | 2021-11-09 16:33:29 +0000 | [diff] [blame] | 234 | fa->opcode & FUSE_OPCODE_FILTER); |
| 235 | else |
| 236 | bpf_printk("*** UNKNOWN *** opcode: %d", fa->opcode); |
| 237 | return FUSE_BPF_BACKING; |
| 238 | } |
| 239 | } |
| 240 | |
| 241 | LICENSE("GPL"); |