netebpfext: Enable multi-attach for the sock_addr listen hook (#5339)#5384

Draft

mikeagun wants to merge 19 commits into

microsoft:mainfrom

mikeagun:pr2-listen-multi-attach

Commits on Jun 19, 2026

tests/util: Make native_module_helper_t safely movable

Michael Agun
and
Copilot
committed
netebpfext: Restore sock_addr context between multi-attach programs

Michael Agun
and
Copilot
committed
netebpfext: Check FWPS_RIGHT_ACTION_WRITE in sock_addr classify functions

Michael Agun
and
Copilot
committed
tests/util: Add optional compartment_id to socket_helper constructors

Michael Agun
and
Copilot
committed
tests/socket: Extend execute_connection_test for multi-program scenarios

Michael Agun
and
Copilot
committed
tests/socket: Add bind multi-program test suite and scenario helpers

Michael Agun
and
Copilot
committed
docs: Document bind hook multi-attach verdict combination semantics

Michael Agun
and
Copilot
committed
tests/socket: Address adversarial review findings in multi-attach tests

Michael Agun
and
Copilot
committed
netebpfext: Fix auth-connect rights check skipping connection context cleanup

Michael Agun
and
Copilot
committed

Commits on Jun 23, 2026

tests/socket: Fix bpf_prog_detach2 failure for BPF_ATTACH_TYPE_BIND programs

Michael Agun
and
Copilot
committed
tests/socket: Remove compartment_id infrastructure from socket helpers

Michael Agun
and
Copilot
committed

Commits on Jul 7, 2026

Merge branch 'main' into pr1-bind-multi-attach
Alan-Jowett
authored

Commits on Jul 17, 2026

libs/api: reject non-wildcard attachable_fd for the legacy bind hook

Michael Agun
and
Copilot
committed
tests/socket: use ASCII characters in multi-attach test comments

Michael Agun
and
Copilot
committed
docs: clarify bind hook multi-attach verdict and WFP semantics

Michael Agun
and
Copilot
committed
netebpfext: Enable multi-attach for the sock_addr listen hook

Michael Agun
and
Copilot
committed
tests/socket: Add listen multi-attach test suite

Michael Agun
and
Copilot
committed
docs: Document listen hook multi-attach verdict combination semantics

Michael Agun
and
Copilot
committed
tests/socket: Fix listen test family detection for program_policies path

Michael Agun
and
Copilot
committed