1 #include <linux/workqueue.h>
2 #include <linux/rtnetlink.h>
3 #include <linux/cache.h>
4 #include <linux/slab.h>
5 #include <linux/list.h>
6 #include <linux/delay.h>
7 #include <linux/sched.h>
9 #include <net/net_namespace.h>
10 #include <net/netns/generic.h>
13 * Our network namespace constructor/destructor lists
16 static LIST_HEAD(pernet_list);
17 static struct list_head *first_device = &pernet_list;
18 static DEFINE_MUTEX(net_mutex);
20 LIST_HEAD(net_namespace_list);
21 EXPORT_SYMBOL_GPL(net_namespace_list);
24 EXPORT_SYMBOL(init_net);
26 #define INITIAL_NET_GEN_PTRS 13 /* +1 for len +2 for rcu_head */
29 * setup_net runs the initializers for the network namespace object.
31 static __net_init int setup_net(struct net *net)
33 /* Must be called with net_mutex held */
34 struct pernet_operations *ops;
37 atomic_set(&net->count, 1);
39 #ifdef NETNS_REFCNT_DEBUG
40 atomic_set(&net->use_count, 0);
43 list_for_each_entry(ops, &pernet_list, list) {
45 error = ops->init(net);
54 /* Walk through the list backwards calling the exit functions
55 * for the pernet modules whose init functions did not fail.
57 list_for_each_entry_continue_reverse(ops, &pernet_list, list) {
66 static struct net_generic *net_alloc_generic(void)
68 struct net_generic *ng;
69 size_t generic_size = sizeof(struct net_generic) +
70 INITIAL_NET_GEN_PTRS * sizeof(void *);
72 ng = kzalloc(generic_size, GFP_KERNEL);
74 ng->len = INITIAL_NET_GEN_PTRS;
80 static struct kmem_cache *net_cachep;
81 static struct workqueue_struct *netns_wq;
83 static struct net *net_alloc(void)
85 struct net *net = NULL;
86 struct net_generic *ng;
88 ng = net_alloc_generic();
92 net = kmem_cache_zalloc(net_cachep, GFP_KERNEL);
96 rcu_assign_pointer(net->gen, ng);
105 static void net_free(struct net *net)
107 #ifdef NETNS_REFCNT_DEBUG
108 if (unlikely(atomic_read(&net->use_count) != 0)) {
109 printk(KERN_EMERG "network namespace not free! Usage: %d\n",
110 atomic_read(&net->use_count));
115 kmem_cache_free(net_cachep, net);
118 static struct net *net_create(void)
125 return ERR_PTR(-ENOMEM);
126 mutex_lock(&net_mutex);
130 list_add_tail(&net->list, &net_namespace_list);
133 mutex_unlock(&net_mutex);
141 struct net *copy_net_ns(unsigned long flags, struct net *old_net)
143 if (!(flags & CLONE_NEWNET))
144 return get_net(old_net);
148 static void cleanup_net(struct work_struct *work)
150 struct pernet_operations *ops;
153 net = container_of(work, struct net, work);
155 mutex_lock(&net_mutex);
157 /* Don't let anyone else find us. */
159 list_del(&net->list);
162 /* Run all of the network namespace exit methods */
163 list_for_each_entry_reverse(ops, &pernet_list, list) {
168 mutex_unlock(&net_mutex);
170 /* Ensure there are no outstanding rcu callbacks using this
175 /* Finally it is safe to free my network namespace structure */
179 void __put_net(struct net *net)
181 /* Cleanup the network namespace in process context */
182 INIT_WORK(&net->work, cleanup_net);
183 queue_work(netns_wq, &net->work);
185 EXPORT_SYMBOL_GPL(__put_net);
188 struct net *copy_net_ns(unsigned long flags, struct net *old_net)
190 if (flags & CLONE_NEWNET)
191 return ERR_PTR(-EINVAL);
196 static int __init net_ns_init(void)
198 struct net_generic *ng;
202 net_cachep = kmem_cache_create("net_namespace", sizeof(struct net),
206 /* Create workqueue for cleanup */
207 netns_wq = create_singlethread_workqueue("netns");
209 panic("Could not create netns workq");
212 ng = net_alloc_generic();
214 panic("Could not allocate generic netns");
216 rcu_assign_pointer(init_net.gen, ng);
218 mutex_lock(&net_mutex);
219 err = setup_net(&init_net);
222 list_add_tail(&init_net.list, &net_namespace_list);
225 mutex_unlock(&net_mutex);
227 panic("Could not setup the initial network namespace");
232 pure_initcall(net_ns_init);
235 static int register_pernet_operations(struct list_head *list,
236 struct pernet_operations *ops)
238 struct net *net, *undo_net;
241 list_add_tail(&ops->list, list);
244 error = ops->init(net);
252 /* If I have an error cleanup all namespaces I initialized */
253 list_del(&ops->list);
255 for_each_net(undo_net) {
265 static void unregister_pernet_operations(struct pernet_operations *ops)
269 list_del(&ops->list);
277 static int register_pernet_operations(struct list_head *list,
278 struct pernet_operations *ops)
280 if (ops->init == NULL)
282 return ops->init(&init_net);
285 static void unregister_pernet_operations(struct pernet_operations *ops)
288 ops->exit(&init_net);
292 static DEFINE_IDA(net_generic_ids);
295 * register_pernet_subsys - register a network namespace subsystem
296 * @ops: pernet operations structure for the subsystem
298 * Register a subsystem which has init and exit functions
299 * that are called when network namespaces are created and
300 * destroyed respectively.
302 * When registered all network namespace init functions are
303 * called for every existing network namespace. Allowing kernel
304 * modules to have a race free view of the set of network namespaces.
306 * When a new network namespace is created all of the init
307 * methods are called in the order in which they were registered.
309 * When a network namespace is destroyed all of the exit methods
310 * are called in the reverse of the order with which they were
313 int register_pernet_subsys(struct pernet_operations *ops)
316 mutex_lock(&net_mutex);
317 error = register_pernet_operations(first_device, ops);
318 mutex_unlock(&net_mutex);
321 EXPORT_SYMBOL_GPL(register_pernet_subsys);
324 * unregister_pernet_subsys - unregister a network namespace subsystem
325 * @ops: pernet operations structure to manipulate
327 * Remove the pernet operations structure from the list to be
328 * used when network namespaces are created or destroyed. In
329 * addition run the exit method for all existing network
332 void unregister_pernet_subsys(struct pernet_operations *module)
334 mutex_lock(&net_mutex);
335 unregister_pernet_operations(module);
336 mutex_unlock(&net_mutex);
338 EXPORT_SYMBOL_GPL(unregister_pernet_subsys);
340 int register_pernet_gen_subsys(int *id, struct pernet_operations *ops)
344 mutex_lock(&net_mutex);
346 rv = ida_get_new_above(&net_generic_ids, 1, id);
349 ida_pre_get(&net_generic_ids, GFP_KERNEL);
354 rv = register_pernet_operations(first_device, ops);
356 ida_remove(&net_generic_ids, *id);
358 mutex_unlock(&net_mutex);
361 EXPORT_SYMBOL_GPL(register_pernet_gen_subsys);
363 void unregister_pernet_gen_subsys(int id, struct pernet_operations *ops)
365 mutex_lock(&net_mutex);
366 unregister_pernet_operations(ops);
367 ida_remove(&net_generic_ids, id);
368 mutex_unlock(&net_mutex);
370 EXPORT_SYMBOL_GPL(unregister_pernet_gen_subsys);
373 * register_pernet_device - register a network namespace device
374 * @ops: pernet operations structure for the subsystem
376 * Register a device which has init and exit functions
377 * that are called when network namespaces are created and
378 * destroyed respectively.
380 * When registered all network namespace init functions are
381 * called for every existing network namespace. Allowing kernel
382 * modules to have a race free view of the set of network namespaces.
384 * When a new network namespace is created all of the init
385 * methods are called in the order in which they were registered.
387 * When a network namespace is destroyed all of the exit methods
388 * are called in the reverse of the order with which they were
391 int register_pernet_device(struct pernet_operations *ops)
394 mutex_lock(&net_mutex);
395 error = register_pernet_operations(&pernet_list, ops);
396 if (!error && (first_device == &pernet_list))
397 first_device = &ops->list;
398 mutex_unlock(&net_mutex);
401 EXPORT_SYMBOL_GPL(register_pernet_device);
403 int register_pernet_gen_device(int *id, struct pernet_operations *ops)
406 mutex_lock(&net_mutex);
408 error = ida_get_new_above(&net_generic_ids, 1, id);
410 if (error == -EAGAIN) {
411 ida_pre_get(&net_generic_ids, GFP_KERNEL);
416 error = register_pernet_operations(&pernet_list, ops);
418 ida_remove(&net_generic_ids, *id);
419 else if (first_device == &pernet_list)
420 first_device = &ops->list;
422 mutex_unlock(&net_mutex);
425 EXPORT_SYMBOL_GPL(register_pernet_gen_device);
428 * unregister_pernet_device - unregister a network namespace netdevice
429 * @ops: pernet operations structure to manipulate
431 * Remove the pernet operations structure from the list to be
432 * used when network namespaces are created or destroyed. In
433 * addition run the exit method for all existing network
436 void unregister_pernet_device(struct pernet_operations *ops)
438 mutex_lock(&net_mutex);
439 if (&ops->list == first_device)
440 first_device = first_device->next;
441 unregister_pernet_operations(ops);
442 mutex_unlock(&net_mutex);
444 EXPORT_SYMBOL_GPL(unregister_pernet_device);
446 void unregister_pernet_gen_device(int id, struct pernet_operations *ops)
448 mutex_lock(&net_mutex);
449 if (&ops->list == first_device)
450 first_device = first_device->next;
451 unregister_pernet_operations(ops);
452 ida_remove(&net_generic_ids, id);
453 mutex_unlock(&net_mutex);
455 EXPORT_SYMBOL_GPL(unregister_pernet_gen_device);
457 static void net_generic_release(struct rcu_head *rcu)
459 struct net_generic *ng;
461 ng = container_of(rcu, struct net_generic, rcu);
465 int net_assign_generic(struct net *net, int id, void *data)
467 struct net_generic *ng, *old_ng;
469 BUG_ON(!mutex_is_locked(&net_mutex));
472 ng = old_ng = net->gen;
473 if (old_ng->len >= id)
476 ng = kzalloc(sizeof(struct net_generic) +
477 id * sizeof(void *), GFP_KERNEL);
482 * Some synchronisation notes:
484 * The net_generic explores the net->gen array inside rcu
485 * read section. Besides once set the net->gen->ptr[x]
486 * pointer never changes (see rules in netns/generic.h).
488 * That said, we simply duplicate this array and schedule
489 * the old copy for kfree after a grace period.
493 memcpy(&ng->ptr, &old_ng->ptr, old_ng->len);
495 rcu_assign_pointer(net->gen, ng);
496 call_rcu(&old_ng->rcu, net_generic_release);
498 ng->ptr[id - 1] = data;
501 EXPORT_SYMBOL_GPL(net_assign_generic);