1ccea77e2a
Based on 2 normalized pattern(s): this program is free software you can redistribute it and or modify it under the terms of the gnu general public license as published by the free software foundation either version 2 of the license or at your option any later version this program is distributed in the hope that it will be useful but without any warranty without even the implied warranty of merchantability or fitness for a particular purpose see the gnu general public license for more details you should have received a copy of the gnu general public license along with this program if not see http www gnu org licenses this program is free software you can redistribute it and or modify it under the terms of the gnu general public license as published by the free software foundation either version 2 of the license or at your option any later version this program is distributed in the hope that it will be useful but without any warranty without even the implied warranty of merchantability or fitness for a particular purpose see the gnu general public license for more details [based] [from] [clk] [highbank] [c] you should have received a copy of the gnu general public license along with this program if not see http www gnu org licenses extracted by the scancode license scanner the SPDX license identifier GPL-2.0-or-later has been chosen to replace the boilerplate/reference in 355 file(s). Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Kate Stewart <kstewart@linuxfoundation.org> Reviewed-by: Jilayne Lovejoy <opensource@jilayne.com> Reviewed-by: Steve Winslow <swinslow@gmail.com> Reviewed-by: Allison Randal <allison@lohutok.net> Cc: linux-spdx@vger.kernel.org Link: https://lkml.kernel.org/r/20190519154041.837383322@linutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
75 lines
1.7 KiB
C
75 lines
1.7 KiB
C
// SPDX-License-Identifier: GPL-2.0-or-later
|
|
/*
|
|
* Copyright (c) 2003+ Evgeniy Polyakov <zbr@ioremap.net>
|
|
*/
|
|
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
|
|
#include <linux/module.h>
|
|
#include <linux/kernel.h>
|
|
|
|
#include <linux/capability.h>
|
|
#include <linux/if.h>
|
|
#include <linux/inetdevice.h>
|
|
#include <linux/ip.h>
|
|
#include <linux/list.h>
|
|
#include <linux/rculist.h>
|
|
#include <linux/skbuff.h>
|
|
#include <linux/slab.h>
|
|
#include <linux/tcp.h>
|
|
|
|
#include <net/ip.h>
|
|
#include <net/tcp.h>
|
|
|
|
#include <linux/netfilter/nfnetlink.h>
|
|
#include <linux/netfilter/x_tables.h>
|
|
#include <net/netfilter/nf_log.h>
|
|
#include <linux/netfilter/xt_osf.h>
|
|
|
|
static bool
|
|
xt_osf_match_packet(const struct sk_buff *skb, struct xt_action_param *p)
|
|
{
|
|
return nf_osf_match(skb, xt_family(p), xt_hooknum(p), xt_in(p),
|
|
xt_out(p), p->matchinfo, xt_net(p), nf_osf_fingers);
|
|
}
|
|
|
|
static struct xt_match xt_osf_match = {
|
|
.name = "osf",
|
|
.revision = 0,
|
|
.family = NFPROTO_IPV4,
|
|
.proto = IPPROTO_TCP,
|
|
.hooks = (1 << NF_INET_LOCAL_IN) |
|
|
(1 << NF_INET_PRE_ROUTING) |
|
|
(1 << NF_INET_FORWARD),
|
|
.match = xt_osf_match_packet,
|
|
.matchsize = sizeof(struct xt_osf_info),
|
|
.me = THIS_MODULE,
|
|
};
|
|
|
|
static int __init xt_osf_init(void)
|
|
{
|
|
int err;
|
|
|
|
err = xt_register_match(&xt_osf_match);
|
|
if (err) {
|
|
pr_err("Failed to register OS fingerprint "
|
|
"matching module (%d)\n", err);
|
|
return err;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void __exit xt_osf_fini(void)
|
|
{
|
|
xt_unregister_match(&xt_osf_match);
|
|
}
|
|
|
|
module_init(xt_osf_init);
|
|
module_exit(xt_osf_fini);
|
|
|
|
MODULE_LICENSE("GPL");
|
|
MODULE_AUTHOR("Evgeniy Polyakov <zbr@ioremap.net>");
|
|
MODULE_DESCRIPTION("Passive OS fingerprint matching.");
|
|
MODULE_ALIAS("ipt_osf");
|
|
MODULE_ALIAS("ip6t_osf");
|
|
MODULE_ALIAS_NFNL_SUBSYS(NFNL_SUBSYS_OSF);
|