Report TCP MD5 (RFC2385) signing keys, addresses and address prefixes to processes with CAP_NET_ADMIN requesting INET_DIAG_INFO. Currently it is not possible to retrieve these from the kernel once they have been configured on sockets.
Showing the changes to include/uapi/linux (2 of 3 files). Show all
Unified · Split
| @@ -143,6 +143,7 @@ enum { · 142 unmodified lines | ||
| 143 | 143 | INET_DIAG_MARK, |
| 144 | 144 | INET_DIAG_BBRINFO, |
| 145 | 145 | INET_DIAG_CLASS_ID, |
| 146 | + INET_DIAG_MD5SIG, | |
| 146 | 147 | __INET_DIAG_MAX, |
| 147 | 148 | }; |
| 148 | 149 | |
| @@ -256,4 +256,13 @@ struct tcp_md5sig { · 255 unmodified lines | ||
| 256 | 256 | __u8 tcpm_key[TCP_MD5SIG_MAXKEYLEN]; /* key (binary) */ |
| 257 | 257 | }; |
| 258 | 258 | |
| 259 | +/* INET_DIAG_MD5SIG */ | |
| 260 | +struct tcp_diag_md5sig { | |
| 261 | + __u8 tcpm_family; | |
| 262 | + __u8 tcpm_prefixlen; | |
| 263 | + __u16 tcpm_keylen; | |
| 264 | + __be32 tcpm_addr[4]; | |
| 265 | + __u8 tcpm_key[TCP_MD5SIG_MAXKEYLEN]; | |
| 266 | +}; | |
| 267 | + | |
| 259 | 268 | #endif /* _UAPI_LINUX_TCP_H */ |