vikarti.anatra/safing-portmaster
1
0
Fork 0
mirror of https://github.com/safing/portmaster synced 2025-09-01 18:19:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge pull request #171 from safing/feature/conn-proc-ctx

Browse source 
Add ProcessContext to network connection
This commit is contained in:
Patrick Pacher 2020-10-08 16:57:12 +02:00 • committed by GitHub
commit 7feefc13e5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 36 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

43
network/connection.go
View file

@ -24,6 +24,20 @@ import (
// locked before the firewall handler is called.
type FirewallHandler func(conn *Connection, pkt packet.Packet)
// ProcessContext holds additional information about the process
// that iniated a connection.
type ProcessContext struct {
// Name is the name of the process.
Name string
// BinaryPath is the path to the process binary.
BinaryPath string
// PID i the process identifier.
PID int
// ProfileID is the ID of the main profile that
// is applied to the process.
ProfileID string
}
// Connection describes a distinct physical network connection
// identified by the IP/Port pair.
type Connection struct { //nolint:maligned // TODO: fix alignment
@ -98,6 +112,10 @@ type Connection struct { //nolint:maligned // TODO: fix alignment
Tunneled bool
// Encrypted is currently unused and MUST be ignored.
Encrypted bool
// ProcessContext holds additional information about the process
// that iniated the connection. It is set once when the connection
// object is created and is considered immutable afterwards.
ProcessContext ProcessContext
// Internal is set to true if the connection is attributed as an
// Portmaster internal connection. Internal may be set at different
// points and access to it must be guarded by the connection lock.
@ -129,6 +147,15 @@ type Connection struct { //nolint:maligned // TODO: fix alignment
profileRevisionCounter uint64
}
func getProcessContext(proc *process.Process) ProcessContext {
return ProcessContext{
BinaryPath: proc.Path,
Name: proc.Name,
PID: proc.Pid,
ProfileID: proc.LocalProfileKey,
}
}
// NewConnectionFromDNSRequest returns a new connection based on the given dns request.
func NewConnectionFromDNSRequest(ctx context.Context, fqdn string, cnames []string, ipVersion packet.IPVersion, localIP net.IP, localPort uint16) *Connection {
// get Process
@ -156,9 +183,10 @@ func NewConnectionFromDNSRequest(ctx context.Context, fqdn string, cnames []stri
Domain: fqdn,
CNAME: cnames,
},
process: proc,
Started: timestamp,
Ended: timestamp,
process: proc,
ProcessContext: getProcessContext(proc),
Started: timestamp,
Ended: timestamp,
}
return dnsConn
}
@ -251,10 +279,11 @@ func NewConnectionFromFirstPacket(pkt packet.Packet) *Connection {
IPVersion: pkt.Info().Version,
Inbound: inbound,
// local endpoint
IPProtocol: pkt.Info().Protocol,
LocalIP: pkt.Info().LocalIP(),
LocalPort: pkt.Info().LocalPort(),
process: proc,
IPProtocol: pkt.Info().Protocol,
LocalIP: pkt.Info().LocalIP(),
LocalPort: pkt.Info().LocalPort(),
ProcessContext: getProcessContext(proc),
process: proc,
// remote endpoint
Entity: entity,
// meta