mirrors/opensnitch
1
0
Fork 0
mirror of https://github.com/evilsocket/opensnitch.git synced 2025-03-04 16:44:46 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Load nfq_get_uid dynamically

Browse source 
nfq_get_uid symbol does not exist on some systems.
This commit is contained in:
Gustavo Iñiguez Goia 2019-12-05 01:48:21 +01:00
parent 3e6520edad
commit 5d92cbb893
2 changed files with 17 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
daemon/netfilter/queue.go
View file

@ -3,7 +3,7 @@ package netfilter
/* /*
#cgo pkg-config: libnetfilter_queue #cgo pkg-config: libnetfilter_queue
#cgo CFLAGS: -Wall -I/usr/include #cgo CFLAGS: -Wall -I/usr/include
#cgo LDFLAGS: -L/usr/lib64/ #cgo LDFLAGS: -L/usr/lib64/ -ldl
#include "queue.h" #include "queue.h"
*/ */

17
daemon/netfilter/queue.h
View file

@ -7,6 +7,7 @@
#include <errno.h> #include <errno.h>
#include <math.h> #include <math.h>
#include <unistd.h> #include <unistd.h>
#include <dlfcn.h>
#include <netinet/in.h> #include <netinet/in.h>
#include <linux/types.h> #include <linux/types.h>
#include <linux/socket.h> #include <linux/socket.h>
@ -21,6 +22,8 @@ typedef struct {
unsigned char *data; unsigned char *data;
} verdictContainer; } verdictContainer;
static void *get_uid = NULL;
extern void go_callback(int id, unsigned char* data, int len, uint mark, u_int32_t idx, verdictContainer *vc, uint32_t uid); extern void go_callback(int id, unsigned char* data, int len, uint mark, u_int32_t idx, verdictContainer *vc, uint32_t uid);
static int nf_callback(struct nfq_q_handle *qh, struct nfgenmsg *nfmsg, struct nfq_data *nfa, void *arg){ static int nf_callback(struct nfq_q_handle *qh, struct nfgenmsg *nfmsg, struct nfq_data *nfa, void *arg){
@ -37,7 +40,9 @@ static int nf_callback(struct nfq_q_handle *qh, struct nfgenmsg *nfmsg, struct n
size = nfq_get_payload(nfa, &buffer); size = nfq_get_payload(nfa, &buffer);
idx = (uint32_t)((uintptr_t)arg); idx = (uint32_t)((uintptr_t)arg);
nfq_get_uid(nfa, &uid); if (get_uid)
nfq_get_uid(nfa, &uid);
go_callback(id, buffer, size, mark, idx, &vc, uid); go_callback(id, buffer, size, mark, idx, &vc, uid);
if( vc.mark_set == 1 ) { if( vc.mark_set == 1 ) {
@ -59,6 +64,16 @@ static inline int Run(struct nfq_handle *h, int fd) {
char buf[4096] __attribute__ ((aligned)); char buf[4096] __attribute__ ((aligned));
int rcvd, opt = 1; int rcvd, opt = 1;
void *hndl = dlopen("libnetfilter_queue.so.1", RTLD_LAZY);
if (!hndl) {
hndl = dlopen("libnetfilter_queue.so", RTLD_LAZY);
}
if (hndl) {
if ((get_uid = dlsym(hndl, "nfq_get_uid")) == NULL){
printf("Warning: nfq_get_uid not available\n");
}
}
setsockopt(fd, SOL_NETLINK, NETLINK_NO_ENOBUFS, &opt, sizeof(int)); setsockopt(fd, SOL_NETLINK, NETLINK_NO_ENOBUFS, &opt, sizeof(int));
while ((rcvd = recv(fd, buf, sizeof(buf), 0)) && rcvd >= 0) { while ((rcvd = recv(fd, buf, sizeof(buf), 0)) && rcvd >= 0) {