SAFE public projects git trees. - safe/jmp/linux-2.6/blob - net/ipv6/sysctl_net_ipv6.c

   1 /*
   2  * sysctl_net_ipv6.c: sysctl interface to net IPV6 subsystem.
   3  *
   4  * Changes:
   5  * YOSHIFUJI Hideaki @USAGI:    added icmp sysctl table.
   6  */
   7
   8 #include <linux/mm.h>
   9 #include <linux/sysctl.h>
  10 #include <linux/in6.h>
  11 #include <linux/ipv6.h>
  12 #include <net/ndisc.h>
  13 #include <net/ipv6.h>
  14 #include <net/addrconf.h>
  15 #include <net/inet_frag.h>
  16
  17 extern struct ctl_table *ipv6_route_sysctl_init(struct net *net);
  18 extern struct ctl_table *ipv6_icmp_sysctl_init(struct net *net);
  19
  20 static ctl_table ipv6_table_template[] = {
  21         {
  22                 .ctl_name       = NET_IPV6_ROUTE,
  23                 .procname       = "route",
  24                 .maxlen         = 0,
  25                 .mode           = 0555,
  26                 .child          = ipv6_route_table_template
  27         },
  28         {
  29                 .ctl_name       = NET_IPV6_ICMP,
  30                 .procname       = "icmp",
  31                 .maxlen         = 0,
  32                 .mode           = 0555,
  33                 .child          = ipv6_icmp_table_template
  34         },
  35         {
  36                 .ctl_name       = NET_IPV6_BINDV6ONLY,
  37                 .procname       = "bindv6only",
  38                 .data           = &init_net.ipv6.sysctl.bindv6only,
  39                 .maxlen         = sizeof(int),
  40                 .mode           = 0644,
  41                 .proc_handler   = &proc_dointvec
  42         },
  43         {
  44                 .ctl_name       = NET_IPV6_IP6FRAG_HIGH_THRESH,
  45                 .procname       = "ip6frag_high_thresh",
  46                 .data           = &init_net.ipv6.sysctl.frags.high_thresh,
  47                 .maxlen         = sizeof(int),
  48                 .mode           = 0644,
  49                 .proc_handler   = &proc_dointvec
  50         },
  51         {
  52                 .ctl_name       = NET_IPV6_IP6FRAG_LOW_THRESH,
  53                 .procname       = "ip6frag_low_thresh",
  54                 .data           = &init_net.ipv6.sysctl.frags.low_thresh,
  55                 .maxlen         = sizeof(int),
  56                 .mode           = 0644,
  57                 .proc_handler   = &proc_dointvec
  58         },
  59         {
  60                 .ctl_name       = NET_IPV6_IP6FRAG_TIME,
  61                 .procname       = "ip6frag_time",
  62                 .data           = &init_net.ipv6.sysctl.frags.timeout,
  63                 .maxlen         = sizeof(int),
  64                 .mode           = 0644,
  65                 .proc_handler   = &proc_dointvec_jiffies,
  66                 .strategy       = &sysctl_jiffies,
  67         },
  68         {
  69                 .ctl_name       = NET_IPV6_IP6FRAG_SECRET_INTERVAL,
  70                 .procname       = "ip6frag_secret_interval",
  71                 .data           = &init_net.ipv6.sysctl.frags.secret_interval,
  72                 .maxlen         = sizeof(int),
  73                 .mode           = 0644,
  74                 .proc_handler   = &proc_dointvec_jiffies,
  75                 .strategy       = &sysctl_jiffies
  76         },
  77         {
  78                 .ctl_name       = NET_IPV6_MLD_MAX_MSF,
  79                 .procname       = "mld_max_msf",
  80                 .data           = &sysctl_mld_max_msf,
  81                 .maxlen         = sizeof(int),
  82                 .mode           = 0644,
  83                 .proc_handler   = &proc_dointvec
  84         },
  85         { .ctl_name = 0 }
  86 };
  87
  88 struct ctl_path net_ipv6_ctl_path[] = {
  89         { .procname = "net", .ctl_name = CTL_NET, },
  90         { .procname = "ipv6", .ctl_name = NET_IPV6, },
  91         { },
  92 };
  93 EXPORT_SYMBOL_GPL(net_ipv6_ctl_path);
  94
  95 static int ipv6_sysctl_net_init(struct net *net)
  96 {
  97         struct ctl_table *ipv6_table;
  98         struct ctl_table *ipv6_route_table;
  99         struct ctl_table *ipv6_icmp_table;
 100         int err;
 101
 102         err = -ENOMEM;
 103         ipv6_table = kmemdup(ipv6_table_template, sizeof(ipv6_table_template),
 104                              GFP_KERNEL);
 105         if (!ipv6_table)
 106                 goto out;
 107
 108         ipv6_route_table = ipv6_route_sysctl_init(net);
 109         if (!ipv6_route_table)
 110                 goto out_ipv6_table;
 111
 112         ipv6_icmp_table = ipv6_icmp_sysctl_init(net);
 113         if (!ipv6_icmp_table)
 114                 goto out_ipv6_route_table;
 115
 116         ipv6_table[0].child = ipv6_route_table;
 117         ipv6_table[1].child = ipv6_icmp_table;
 118
 119         ipv6_table[2].data = &net->ipv6.sysctl.bindv6only;
 120         ipv6_table[3].data = &net->ipv6.sysctl.frags.high_thresh;
 121         ipv6_table[4].data = &net->ipv6.sysctl.frags.low_thresh;
 122         ipv6_table[5].data = &net->ipv6.sysctl.frags.timeout;
 123         ipv6_table[6].data = &net->ipv6.sysctl.frags.secret_interval;
 124
 125         /* We don't want this value to be per namespace, it should be global
 126            to all namespaces, so make it read-only when we are not in the
 127            init network namespace */
 128         if (net != &init_net)
 129                 ipv6_table[7].mode = 0444;
 130
 131         net->ipv6.sysctl.table = register_net_sysctl_table(net, net_ipv6_ctl_path,
 132                                                            ipv6_table);
 133         if (!net->ipv6.sysctl.table)
 134                 return -ENOMEM;
 135
 136         if (!net->ipv6.sysctl.table)
 137                 goto out_ipv6_icmp_table;
 138
 139         err = 0;
 140 out:
 141         return err;
 142
 143 out_ipv6_icmp_table:
 144         kfree(ipv6_icmp_table);
 145 out_ipv6_route_table:
 146         kfree(ipv6_route_table);
 147 out_ipv6_table:
 148         kfree(ipv6_table);
 149         goto out;
 150 }
 151
 152 static void ipv6_sysctl_net_exit(struct net *net)
 153 {
 154         struct ctl_table *ipv6_table;
 155         struct ctl_table *ipv6_route_table;
 156         struct ctl_table *ipv6_icmp_table;
 157
 158         ipv6_table = net->ipv6.sysctl.table->ctl_table_arg;
 159         ipv6_route_table = ipv6_table[0].child;
 160         ipv6_icmp_table = ipv6_table[1].child;
 161
 162         unregister_net_sysctl_table(net->ipv6.sysctl.table);
 163
 164         kfree(ipv6_table);
 165         kfree(ipv6_route_table);
 166         kfree(ipv6_icmp_table);
 167 }
 168
 169 static struct pernet_operations ipv6_sysctl_net_ops = {
 170         .init = ipv6_sysctl_net_init,
 171         .exit = ipv6_sysctl_net_exit,
 172 };
 173
 174 int ipv6_sysctl_register(void)
 175 {
 176         return register_pernet_subsys(&ipv6_sysctl_net_ops);
 177 }
 178
 179 void ipv6_sysctl_unregister(void)
 180 {
 181         unregister_pernet_subsys(&ipv6_sysctl_net_ops);
 182 }