2005-04-17 02:20:36 +04:00
/* -*- linux-c -*-
* sysctl_net . c : sysctl interface to net subsystem .
*
* Begun April 1 , 1996 , Mike Shaver .
* Added / proc / sys / net directories for each protocol family . [ MS ]
*
* Revision 1.2 1996 / 05 / 08 20 : 24 : 40 shaver
* Added bits for NET_BRIDGE and the NET_IPV4_ARP stuff and
* NET_IPV4_IP_FORWARD .
*
*
*/
# include <linux/mm.h>
2011-07-15 19:47:34 +04:00
# include <linux/export.h>
2005-04-17 02:20:36 +04:00
# include <linux/sysctl.h>
2007-11-30 15:55:42 +03:00
# include <linux/nsproxy.h>
2005-04-17 02:20:36 +04:00
2005-10-04 01:16:34 +04:00
# include <net/sock.h>
2005-04-17 02:20:36 +04:00
# ifdef CONFIG_INET
2005-08-16 09:18:02 +04:00
# include <net/ip.h>
2005-04-17 02:20:36 +04:00
# endif
# ifdef CONFIG_NET
2005-08-16 09:18:02 +04:00
# include <linux/if_ether.h>
2005-04-17 02:20:36 +04:00
# endif
# ifdef CONFIG_TR
2005-08-16 09:18:02 +04:00
# include <linux/if_tr.h>
2005-04-17 02:20:36 +04:00
# endif
2008-07-15 05:22:20 +04:00
static struct ctl_table_set *
2007-11-30 15:55:42 +03:00
net_ctl_header_lookup ( struct ctl_table_root * root , struct nsproxy * namespaces )
{
2008-07-15 05:22:20 +04:00
return & namespaces - > net_ns - > sysctls ;
}
static int is_seen ( struct ctl_table_set * set )
{
return & current - > nsproxy - > net_ns - > sysctls = = set ;
2007-11-30 15:55:42 +03:00
}
2008-07-25 12:48:32 +04:00
/* Return standard mode bits for table entry. */
static int net_ctl_permissions ( struct ctl_table_root * root ,
struct nsproxy * nsproxy ,
struct ctl_table * table )
{
/* Allow network administrator to have same access as root. */
if ( capable ( CAP_NET_ADMIN ) ) {
int mode = ( table - > mode > > 6 ) & 7 ;
return ( mode < < 6 ) | ( mode < < 3 ) | mode ;
}
return table - > mode ;
}
2007-11-30 15:55:42 +03:00
static struct ctl_table_root net_sysctl_root = {
. lookup = net_ctl_header_lookup ,
2008-07-25 12:48:32 +04:00
. permissions = net_ctl_permissions ,
2007-11-30 15:55:42 +03:00
} ;
2008-05-20 00:45:33 +04:00
static int net_ctl_ro_header_perms ( struct ctl_table_root * root ,
struct nsproxy * namespaces , struct ctl_table * table )
{
2009-03-16 18:23:30 +03:00
if ( net_eq ( namespaces - > net_ns , & init_net ) )
2008-05-20 00:45:33 +04:00
return table - > mode ;
else
return table - > mode & ~ 0222 ;
}
static struct ctl_table_root net_sysctl_ro_root = {
. permissions = net_ctl_ro_header_perms ,
} ;
2010-01-17 06:35:32 +03:00
static int __net_init sysctl_net_init ( struct net * net )
2007-11-30 15:55:42 +03:00
{
2012-01-23 09:26:00 +04:00
setup_sysctl_set ( & net - > sysctls , & net_sysctl_root , is_seen ) ;
2007-11-30 15:55:42 +03:00
return 0 ;
}
2010-01-17 06:35:32 +03:00
static void __net_exit sysctl_net_exit ( struct net * net )
2007-11-30 15:55:42 +03:00
{
2012-01-10 10:19:13 +04:00
retire_sysctl_set ( & net - > sysctls ) ;
2007-11-30 15:55:42 +03:00
}
static struct pernet_operations sysctl_pernet_ops = {
. init = sysctl_net_init ,
. exit = sysctl_net_exit ,
} ;
2012-04-19 17:19:46 +04:00
static struct ctl_table_header * net_header ;
2012-01-06 15:34:20 +04:00
static __init int net_sysctl_init ( void )
2007-11-30 15:55:42 +03:00
{
2012-04-19 17:19:46 +04:00
static struct ctl_table empty [ 1 ] ;
int ret = - ENOMEM ;
/* Avoid limitations in the sysctl implementation by
* registering " /proc/sys/net " as an empty directory not in a
* network namespace .
*/
net_header = register_sysctl ( " net " , empty ) ;
if ( ! net_header )
goto out ;
2007-11-30 15:55:42 +03:00
ret = register_pernet_subsys ( & sysctl_pernet_ops ) ;
if ( ret )
goto out ;
2012-01-23 09:26:00 +04:00
setup_sysctl_set ( & net_sysctl_ro_root . default_set , & net_sysctl_ro_root , NULL ) ;
2008-05-20 00:45:33 +04:00
register_sysctl_root ( & net_sysctl_ro_root ) ;
2012-01-23 09:10:21 +04:00
register_sysctl_root ( & net_sysctl_root ) ;
2007-11-30 15:55:42 +03:00
out :
return ret ;
}
2012-01-06 15:34:20 +04:00
subsys_initcall ( net_sysctl_init ) ;
2007-11-30 15:55:42 +03:00
struct ctl_table_header * register_net_sysctl_table ( struct net * net ,
const struct ctl_path * path , struct ctl_table * table )
{
2012-01-08 12:02:37 +04:00
return __register_sysctl_paths ( & net - > sysctls , path , table ) ;
2007-11-30 15:55:42 +03:00
}
EXPORT_SYMBOL_GPL ( register_net_sysctl_table ) ;
2008-05-20 00:45:33 +04:00
struct ctl_table_header * register_net_sysctl_rotable ( const
struct ctl_path * path , struct ctl_table * table )
{
2012-01-08 12:02:37 +04:00
return __register_sysctl_paths ( & net_sysctl_ro_root . default_set ,
path , table ) ;
2008-05-20 00:45:33 +04:00
}
EXPORT_SYMBOL_GPL ( register_net_sysctl_rotable ) ;
2012-04-19 17:18:47 +04:00
struct ctl_table_header * register_net_sysctl ( struct net * net ,
const char * path , struct ctl_table * table )
{
return __register_sysctl_table ( & net - > sysctls , path , table ) ;
}
EXPORT_SYMBOL_GPL ( register_net_sysctl ) ;
2007-11-30 15:55:42 +03:00
void unregister_net_sysctl_table ( struct ctl_table_header * header )
{
2008-05-01 13:47:38 +04:00
unregister_sysctl_table ( header ) ;
2007-11-30 15:55:42 +03:00
}
EXPORT_SYMBOL_GPL ( unregister_net_sysctl_table ) ;