netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7915 from tanyifeng:tcp

Browse Source 
PiperOrigin-RevId: 472880146
This commit is contained in:
gVisor bot
2022-09-07 20:19:29 -07:00
parent d9556a543f 39e2e5b968
commit d57bdac008
2 changed files with 28 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/sentry/socket/hostinet/socket.go
+6 -2
View File
@@ -406,10 +406,12 @@ func (s *socketOpsCommon) GetSockOpt(t *kernel.Task, level int, name int, optVal
}
case linux.SOL_TCP:
switch name {
case linux.TCP_NODELAY:
case linux.TCP_NODELAY, linux.TCP_MAXSEG:
optlen = sizeofInt32
case linux.TCP_INFO:
optlen = linux.SizeOfTCPInfo
case linux.TCP_CONGESTION:
optlen = outLen
}
}
@@ -461,8 +463,10 @@ func (s *socketOpsCommon) SetSockOpt(t *kernel.Task, level int, name int, opt []
}
case linux.SOL_TCP:
switch name {
case linux.TCP_NODELAY, linux.TCP_INQ:
case linux.TCP_NODELAY, linux.TCP_INQ, linux.TCP_MAXSEG:
optlen = sizeofInt32
case linux.TCP_CONGESTION:
optlen = len(opt)
}
}
runsc/boot/filter/config.go
+22
View File
@@ -504,6 +504,16 @@ func hostInetFilters() seccomp.SyscallRules {
seccomp.EqualTo(unix.SOL_TCP),
seccomp.EqualTo(linux.TCP_INQ),
},
{
seccomp.MatchAny{},
seccomp.EqualTo(unix.SOL_TCP),
seccomp.EqualTo(linux.TCP_MAXSEG),
},
{
seccomp.MatchAny{},
seccomp.EqualTo(unix.SOL_TCP),
seccomp.EqualTo(linux.TCP_CONGESTION),
},
},
unix.SYS_IOCTL: []seccomp.Rule{
{
@@ -572,6 +582,18 @@ func hostInetFilters() seccomp.SyscallRules {
seccomp.MatchAny{},
seccomp.EqualTo(4),
},
{
seccomp.MatchAny{},
seccomp.EqualTo(unix.SOL_TCP),
seccomp.EqualTo(linux.TCP_MAXSEG),
seccomp.MatchAny{},
seccomp.EqualTo(4),
},
{
seccomp.MatchAny{},
seccomp.EqualTo(unix.SOL_TCP),
seccomp.EqualTo(linux.TCP_CONGESTION),
},
{
seccomp.MatchAny{},
seccomp.EqualTo(unix.SOL_IP),