1 // SPDX-License-Identifier: GPL-2.0-only
3 * xt_LED.c - netfilter target to make LEDs blink upon packet matches
5 * Copyright (C) 2008 Adam Nielsen <a.nielsen@shikadi.net>
7 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
8 #include <linux/module.h>
9 #include <linux/skbuff.h>
10 #include <linux/netfilter/x_tables.h>
11 #include <linux/slab.h>
12 #include <linux/leds.h>
13 #include <linux/mutex.h>
15 #include <linux/netfilter/xt_LED.h>
17 MODULE_LICENSE("GPL");
18 MODULE_AUTHOR("Adam Nielsen <a.nielsen@shikadi.net>");
19 MODULE_DESCRIPTION("Xtables: trigger LED devices on packet match");
20 MODULE_ALIAS("ipt_LED");
21 MODULE_ALIAS("ip6t_LED");
23 static LIST_HEAD(xt_led_triggers
);
24 static DEFINE_MUTEX(xt_led_mutex
);
27 * This is declared in here (the kernel module) only, to avoid having these
28 * dependencies in userspace code. This is what xt_led_info.internal_data
31 struct xt_led_info_internal
{
32 struct list_head list
;
35 struct led_trigger netfilter_led_trigger
;
36 struct timer_list timer
;
39 #define XT_LED_BLINK_DELAY 50 /* ms */
42 led_tg(struct sk_buff
*skb
, const struct xt_action_param
*par
)
44 const struct xt_led_info
*ledinfo
= par
->targinfo
;
45 struct xt_led_info_internal
*ledinternal
= ledinfo
->internal_data
;
48 * If "always blink" is enabled, and there's still some time until the
49 * LED will switch off, briefly switch it off now.
51 if ((ledinfo
->delay
> 0) && ledinfo
->always_blink
&&
52 timer_pending(&ledinternal
->timer
))
53 led_trigger_blink_oneshot(&ledinternal
->netfilter_led_trigger
,
54 XT_LED_BLINK_DELAY
, XT_LED_BLINK_DELAY
, 1);
56 led_trigger_event(&ledinternal
->netfilter_led_trigger
, LED_FULL
);
58 /* If there's a positive delay, start/update the timer */
59 if (ledinfo
->delay
> 0) {
60 mod_timer(&ledinternal
->timer
,
61 jiffies
+ msecs_to_jiffies(ledinfo
->delay
));
63 /* Otherwise if there was no delay given, blink as fast as possible */
64 } else if (ledinfo
->delay
== 0) {
65 led_trigger_event(&ledinternal
->netfilter_led_trigger
, LED_OFF
);
68 /* else the delay is negative, which means switch on and stay on */
73 static void led_timeout_callback(struct timer_list
*t
)
75 struct xt_led_info_internal
*ledinternal
= from_timer(ledinternal
, t
,
78 led_trigger_event(&ledinternal
->netfilter_led_trigger
, LED_OFF
);
81 static struct xt_led_info_internal
*led_trigger_lookup(const char *name
)
83 struct xt_led_info_internal
*ledinternal
;
85 list_for_each_entry(ledinternal
, &xt_led_triggers
, list
) {
86 if (!strcmp(name
, ledinternal
->netfilter_led_trigger
.name
)) {
93 static int led_tg_check(const struct xt_tgchk_param
*par
)
95 struct xt_led_info
*ledinfo
= par
->targinfo
;
96 struct xt_led_info_internal
*ledinternal
;
99 /* Bail out if empty string or not a string at all. */
100 if (ledinfo
->id
[0] == '\0' ||
101 !memchr(ledinfo
->id
, '\0', sizeof(ledinfo
->id
)))
104 mutex_lock(&xt_led_mutex
);
106 ledinternal
= led_trigger_lookup(ledinfo
->id
);
108 ledinternal
->refcnt
++;
113 ledinternal
= kzalloc(sizeof(struct xt_led_info_internal
), GFP_KERNEL
);
115 goto exit_mutex_only
;
117 ledinternal
->trigger_id
= kstrdup(ledinfo
->id
, GFP_KERNEL
);
118 if (!ledinternal
->trigger_id
)
119 goto exit_internal_alloc
;
121 ledinternal
->refcnt
= 1;
122 ledinternal
->netfilter_led_trigger
.name
= ledinternal
->trigger_id
;
124 err
= led_trigger_register(&ledinternal
->netfilter_led_trigger
);
126 pr_info_ratelimited("Trigger name is already in use.\n");
130 /* Since the letinternal timer can be shared between multiple targets,
131 * always set it up, even if the current target does not need it
133 timer_setup(&ledinternal
->timer
, led_timeout_callback
, 0);
135 list_add_tail(&ledinternal
->list
, &xt_led_triggers
);
138 mutex_unlock(&xt_led_mutex
);
140 ledinfo
->internal_data
= ledinternal
;
145 kfree(ledinternal
->trigger_id
);
151 mutex_unlock(&xt_led_mutex
);
156 static void led_tg_destroy(const struct xt_tgdtor_param
*par
)
158 const struct xt_led_info
*ledinfo
= par
->targinfo
;
159 struct xt_led_info_internal
*ledinternal
= ledinfo
->internal_data
;
161 mutex_lock(&xt_led_mutex
);
163 if (--ledinternal
->refcnt
) {
164 mutex_unlock(&xt_led_mutex
);
168 list_del(&ledinternal
->list
);
170 timer_shutdown_sync(&ledinternal
->timer
);
172 led_trigger_unregister(&ledinternal
->netfilter_led_trigger
);
174 mutex_unlock(&xt_led_mutex
);
176 kfree(ledinternal
->trigger_id
);
180 static struct xt_target led_tg_reg
[] __read_mostly
= {
184 .family
= NFPROTO_IPV4
,
186 .targetsize
= sizeof(struct xt_led_info
),
187 .usersize
= offsetof(struct xt_led_info
, internal_data
),
188 .checkentry
= led_tg_check
,
189 .destroy
= led_tg_destroy
,
192 #if IS_ENABLED(CONFIG_IP6_NF_IPTABLES)
196 .family
= NFPROTO_IPV6
,
198 .targetsize
= sizeof(struct xt_led_info
),
199 .usersize
= offsetof(struct xt_led_info
, internal_data
),
200 .checkentry
= led_tg_check
,
201 .destroy
= led_tg_destroy
,
207 static int __init
led_tg_init(void)
209 return xt_register_targets(led_tg_reg
, ARRAY_SIZE(led_tg_reg
));
212 static void __exit
led_tg_exit(void)
214 xt_unregister_targets(led_tg_reg
, ARRAY_SIZE(led_tg_reg
));
217 module_init(led_tg_init
);
218 module_exit(led_tg_exit
);