add changes from #1969

Signed-off-by: Aryan-sharma11 <[email protected]>
kubearmor · Feb 13, 2025 · b749390 · b749390
1 parent 9b5456f
commit b749390
Show file tree

Hide file tree

Showing 5 changed files with 9 additions and 7 deletions.
diff --git a/KubeArmor/BPF/shared.h b/KubeArmor/BPF/shared.h
@@ -661,13 +661,13 @@ static inline int match_and_enforce_path_hooks(struct path *f_path, u32 id,
       }
     }
 
-    if (retval == -EPERM) {
-      goto ringbuf;
-    }
-
     bpf_map_update_elem(&bufk, &two, z, BPF_ANY);
     pk->path[0] = dfile;
     struct data_t *allow = bpf_map_lookup_elem(inner, pk);
+
+    if (retval == -EPERM && !(allow && !fromSourceCheck)) {
+      goto ringbuf;
+    }
 
     if (allow) {
       if (!match) {
@@ -697,14 +697,16 @@ static inline int match_and_enforce_path_hooks(struct path *f_path, u32 id,
       }
     }
 
-    if (retval == -EPERM) {
-      goto ringbuf;
-    }
+
 
     bpf_map_update_elem(&bufk, &two, z, BPF_ANY);
     pk->path[0] = dfile;
     struct data_t *allow = bpf_map_lookup_elem(inner, pk);
 
+    if (retval == -EPERM && !(allow && !fromSourceCheck)) {
+      goto ringbuf;
+    }
+
     if (allow) {
       if (!match) {
         if (allow->processmask == BLOCK_POSTURE) {

diff --git a/KubeArmor/enforcer/bpflsm/enforcer_bpfeb.o b/KubeArmor/enforcer/bpflsm/enforcer_bpfeb.o
diff --git a/KubeArmor/enforcer/bpflsm/enforcer_bpfel.o b/KubeArmor/enforcer/bpflsm/enforcer_bpfel.o
diff --git a/KubeArmor/enforcer/bpflsm/enforcer_path_bpfeb.o b/KubeArmor/enforcer/bpflsm/enforcer_path_bpfeb.o
diff --git a/KubeArmor/enforcer/bpflsm/enforcer_path_bpfel.o b/KubeArmor/enforcer/bpflsm/enforcer_path_bpfel.o