sysctl_net_ipv4.c 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772
  1. /*
  2. * sysctl_net_ipv4.c: sysctl interface to net IPV4 subsystem.
  3. *
  4. * Begun April 1, 1996, Mike Shaver.
  5. * Added /proc/sys/net/ipv4 directory entry (empty =) ). [MS]
  6. */
  7. #include <linux/mm.h>
  8. #include <linux/module.h>
  9. #include <linux/sysctl.h>
  10. #include <linux/igmp.h>
  11. #include <linux/inetdevice.h>
  12. #include <linux/seqlock.h>
  13. #include <linux/init.h>
  14. #include <linux/slab.h>
  15. #include <net/snmp.h>
  16. #include <net/icmp.h>
  17. #include <net/ip.h>
  18. #include <net/route.h>
  19. #include <net/tcp.h>
  20. #include <net/udp.h>
  21. #include <net/cipso_ipv4.h>
  22. #include <net/inet_frag.h>
  23. static int zero;
  24. static int tcp_retr1_max = 255;
  25. static int ip_local_port_range_min[] = { 1, 1 };
  26. static int ip_local_port_range_max[] = { 65535, 65535 };
  27. static int tcp_adv_win_scale_min = -31;
  28. static int tcp_adv_win_scale_max = 31;
  29. static int ip_ttl_min = 1;
  30. static int ip_ttl_max = 255;
  31. /* Update system visible IP port range */
  32. static void set_local_port_range(int range[2])
  33. {
  34. write_seqlock(&sysctl_local_ports.lock);
  35. sysctl_local_ports.range[0] = range[0];
  36. sysctl_local_ports.range[1] = range[1];
  37. write_sequnlock(&sysctl_local_ports.lock);
  38. }
  39. /* Validate changes from /proc interface. */
  40. static int ipv4_local_port_range(ctl_table *table, int write,
  41. void __user *buffer,
  42. size_t *lenp, loff_t *ppos)
  43. {
  44. int ret;
  45. int range[2];
  46. ctl_table tmp = {
  47. .data = &range,
  48. .maxlen = sizeof(range),
  49. .mode = table->mode,
  50. .extra1 = &ip_local_port_range_min,
  51. .extra2 = &ip_local_port_range_max,
  52. };
  53. inet_get_local_port_range(range, range + 1);
  54. ret = proc_dointvec_minmax(&tmp, write, buffer, lenp, ppos);
  55. if (write && ret == 0) {
  56. if (range[1] < range[0])
  57. ret = -EINVAL;
  58. else
  59. set_local_port_range(range);
  60. }
  61. return ret;
  62. }
  63. static int proc_tcp_congestion_control(ctl_table *ctl, int write,
  64. void __user *buffer, size_t *lenp, loff_t *ppos)
  65. {
  66. char val[TCP_CA_NAME_MAX];
  67. ctl_table tbl = {
  68. .data = val,
  69. .maxlen = TCP_CA_NAME_MAX,
  70. };
  71. int ret;
  72. tcp_get_default_congestion_control(val);
  73. ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
  74. if (write && ret == 0)
  75. ret = tcp_set_default_congestion_control(val);
  76. return ret;
  77. }
  78. static int proc_tcp_available_congestion_control(ctl_table *ctl,
  79. int write,
  80. void __user *buffer, size_t *lenp,
  81. loff_t *ppos)
  82. {
  83. ctl_table tbl = { .maxlen = TCP_CA_BUF_MAX, };
  84. int ret;
  85. tbl.data = kmalloc(tbl.maxlen, GFP_USER);
  86. if (!tbl.data)
  87. return -ENOMEM;
  88. tcp_get_available_congestion_control(tbl.data, TCP_CA_BUF_MAX);
  89. ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
  90. kfree(tbl.data);
  91. return ret;
  92. }
  93. static int proc_allowed_congestion_control(ctl_table *ctl,
  94. int write,
  95. void __user *buffer, size_t *lenp,
  96. loff_t *ppos)
  97. {
  98. ctl_table tbl = { .maxlen = TCP_CA_BUF_MAX };
  99. int ret;
  100. tbl.data = kmalloc(tbl.maxlen, GFP_USER);
  101. if (!tbl.data)
  102. return -ENOMEM;
  103. tcp_get_allowed_congestion_control(tbl.data, tbl.maxlen);
  104. ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
  105. if (write && ret == 0)
  106. ret = tcp_set_allowed_congestion_control(tbl.data);
  107. kfree(tbl.data);
  108. return ret;
  109. }
  110. static struct ctl_table ipv4_table[] = {
  111. {
  112. .procname = "tcp_timestamps",
  113. .data = &sysctl_tcp_timestamps,
  114. .maxlen = sizeof(int),
  115. .mode = 0644,
  116. .proc_handler = proc_dointvec
  117. },
  118. {
  119. .procname = "tcp_window_scaling",
  120. .data = &sysctl_tcp_window_scaling,
  121. .maxlen = sizeof(int),
  122. .mode = 0644,
  123. .proc_handler = proc_dointvec
  124. },
  125. {
  126. .procname = "tcp_sack",
  127. .data = &sysctl_tcp_sack,
  128. .maxlen = sizeof(int),
  129. .mode = 0644,
  130. .proc_handler = proc_dointvec
  131. },
  132. {
  133. .procname = "tcp_retrans_collapse",
  134. .data = &sysctl_tcp_retrans_collapse,
  135. .maxlen = sizeof(int),
  136. .mode = 0644,
  137. .proc_handler = proc_dointvec
  138. },
  139. {
  140. .procname = "ip_default_ttl",
  141. .data = &sysctl_ip_default_ttl,
  142. .maxlen = sizeof(int),
  143. .mode = 0644,
  144. .proc_handler = proc_dointvec_minmax,
  145. .extra1 = &ip_ttl_min,
  146. .extra2 = &ip_ttl_max,
  147. },
  148. {
  149. .procname = "ip_no_pmtu_disc",
  150. .data = &ipv4_config.no_pmtu_disc,
  151. .maxlen = sizeof(int),
  152. .mode = 0644,
  153. .proc_handler = proc_dointvec
  154. },
  155. {
  156. .procname = "ip_nonlocal_bind",
  157. .data = &sysctl_ip_nonlocal_bind,
  158. .maxlen = sizeof(int),
  159. .mode = 0644,
  160. .proc_handler = proc_dointvec
  161. },
  162. {
  163. .procname = "tcp_syn_retries",
  164. .data = &sysctl_tcp_syn_retries,
  165. .maxlen = sizeof(int),
  166. .mode = 0644,
  167. .proc_handler = proc_dointvec
  168. },
  169. {
  170. .procname = "tcp_synack_retries",
  171. .data = &sysctl_tcp_synack_retries,
  172. .maxlen = sizeof(int),
  173. .mode = 0644,
  174. .proc_handler = proc_dointvec
  175. },
  176. {
  177. .procname = "tcp_max_orphans",
  178. .data = &sysctl_tcp_max_orphans,
  179. .maxlen = sizeof(int),
  180. .mode = 0644,
  181. .proc_handler = proc_dointvec
  182. },
  183. {
  184. .procname = "tcp_max_tw_buckets",
  185. .data = &tcp_death_row.sysctl_max_tw_buckets,
  186. .maxlen = sizeof(int),
  187. .mode = 0644,
  188. .proc_handler = proc_dointvec
  189. },
  190. {
  191. .procname = "ip_dynaddr",
  192. .data = &sysctl_ip_dynaddr,
  193. .maxlen = sizeof(int),
  194. .mode = 0644,
  195. .proc_handler = proc_dointvec
  196. },
  197. {
  198. .procname = "tcp_keepalive_time",
  199. .data = &sysctl_tcp_keepalive_time,
  200. .maxlen = sizeof(int),
  201. .mode = 0644,
  202. .proc_handler = proc_dointvec_jiffies,
  203. },
  204. {
  205. .procname = "tcp_keepalive_probes",
  206. .data = &sysctl_tcp_keepalive_probes,
  207. .maxlen = sizeof(int),
  208. .mode = 0644,
  209. .proc_handler = proc_dointvec
  210. },
  211. {
  212. .procname = "tcp_keepalive_intvl",
  213. .data = &sysctl_tcp_keepalive_intvl,
  214. .maxlen = sizeof(int),
  215. .mode = 0644,
  216. .proc_handler = proc_dointvec_jiffies,
  217. },
  218. {
  219. .procname = "tcp_retries1",
  220. .data = &sysctl_tcp_retries1,
  221. .maxlen = sizeof(int),
  222. .mode = 0644,
  223. .proc_handler = proc_dointvec_minmax,
  224. .extra2 = &tcp_retr1_max
  225. },
  226. {
  227. .procname = "tcp_retries2",
  228. .data = &sysctl_tcp_retries2,
  229. .maxlen = sizeof(int),
  230. .mode = 0644,
  231. .proc_handler = proc_dointvec
  232. },
  233. {
  234. .procname = "tcp_fin_timeout",
  235. .data = &sysctl_tcp_fin_timeout,
  236. .maxlen = sizeof(int),
  237. .mode = 0644,
  238. .proc_handler = proc_dointvec_jiffies,
  239. },
  240. #ifdef CONFIG_SYN_COOKIES
  241. {
  242. .procname = "tcp_syncookies",
  243. .data = &sysctl_tcp_syncookies,
  244. .maxlen = sizeof(int),
  245. .mode = 0644,
  246. .proc_handler = proc_dointvec
  247. },
  248. #endif
  249. {
  250. .procname = "tcp_tw_recycle",
  251. .data = &tcp_death_row.sysctl_tw_recycle,
  252. .maxlen = sizeof(int),
  253. .mode = 0644,
  254. .proc_handler = proc_dointvec
  255. },
  256. {
  257. .procname = "tcp_abort_on_overflow",
  258. .data = &sysctl_tcp_abort_on_overflow,
  259. .maxlen = sizeof(int),
  260. .mode = 0644,
  261. .proc_handler = proc_dointvec
  262. },
  263. {
  264. .procname = "tcp_stdurg",
  265. .data = &sysctl_tcp_stdurg,
  266. .maxlen = sizeof(int),
  267. .mode = 0644,
  268. .proc_handler = proc_dointvec
  269. },
  270. {
  271. .procname = "tcp_rfc1337",
  272. .data = &sysctl_tcp_rfc1337,
  273. .maxlen = sizeof(int),
  274. .mode = 0644,
  275. .proc_handler = proc_dointvec
  276. },
  277. {
  278. .procname = "tcp_max_syn_backlog",
  279. .data = &sysctl_max_syn_backlog,
  280. .maxlen = sizeof(int),
  281. .mode = 0644,
  282. .proc_handler = proc_dointvec
  283. },
  284. {
  285. .procname = "ip_local_port_range",
  286. .data = &sysctl_local_ports.range,
  287. .maxlen = sizeof(sysctl_local_ports.range),
  288. .mode = 0644,
  289. .proc_handler = ipv4_local_port_range,
  290. },
  291. {
  292. .procname = "ip_local_reserved_ports",
  293. .data = NULL, /* initialized in sysctl_ipv4_init */
  294. .maxlen = 65536,
  295. .mode = 0644,
  296. .proc_handler = proc_do_large_bitmap,
  297. },
  298. {
  299. .procname = "igmp_max_memberships",
  300. .data = &sysctl_igmp_max_memberships,
  301. .maxlen = sizeof(int),
  302. .mode = 0644,
  303. .proc_handler = proc_dointvec
  304. },
  305. {
  306. .procname = "igmp_max_msf",
  307. .data = &sysctl_igmp_max_msf,
  308. .maxlen = sizeof(int),
  309. .mode = 0644,
  310. .proc_handler = proc_dointvec
  311. },
  312. {
  313. .procname = "inet_peer_threshold",
  314. .data = &inet_peer_threshold,
  315. .maxlen = sizeof(int),
  316. .mode = 0644,
  317. .proc_handler = proc_dointvec
  318. },
  319. {
  320. .procname = "inet_peer_minttl",
  321. .data = &inet_peer_minttl,
  322. .maxlen = sizeof(int),
  323. .mode = 0644,
  324. .proc_handler = proc_dointvec_jiffies,
  325. },
  326. {
  327. .procname = "inet_peer_maxttl",
  328. .data = &inet_peer_maxttl,
  329. .maxlen = sizeof(int),
  330. .mode = 0644,
  331. .proc_handler = proc_dointvec_jiffies,
  332. },
  333. {
  334. .procname = "inet_peer_gc_mintime",
  335. .data = &inet_peer_gc_mintime,
  336. .maxlen = sizeof(int),
  337. .mode = 0644,
  338. .proc_handler = proc_dointvec_jiffies,
  339. },
  340. {
  341. .procname = "inet_peer_gc_maxtime",
  342. .data = &inet_peer_gc_maxtime,
  343. .maxlen = sizeof(int),
  344. .mode = 0644,
  345. .proc_handler = proc_dointvec_jiffies,
  346. },
  347. {
  348. .procname = "tcp_orphan_retries",
  349. .data = &sysctl_tcp_orphan_retries,
  350. .maxlen = sizeof(int),
  351. .mode = 0644,
  352. .proc_handler = proc_dointvec
  353. },
  354. {
  355. .procname = "tcp_fack",
  356. .data = &sysctl_tcp_fack,
  357. .maxlen = sizeof(int),
  358. .mode = 0644,
  359. .proc_handler = proc_dointvec
  360. },
  361. {
  362. .procname = "tcp_reordering",
  363. .data = &sysctl_tcp_reordering,
  364. .maxlen = sizeof(int),
  365. .mode = 0644,
  366. .proc_handler = proc_dointvec
  367. },
  368. {
  369. .procname = "tcp_ecn",
  370. .data = &sysctl_tcp_ecn,
  371. .maxlen = sizeof(int),
  372. .mode = 0644,
  373. .proc_handler = proc_dointvec
  374. },
  375. {
  376. .procname = "tcp_dsack",
  377. .data = &sysctl_tcp_dsack,
  378. .maxlen = sizeof(int),
  379. .mode = 0644,
  380. .proc_handler = proc_dointvec
  381. },
  382. {
  383. .procname = "tcp_mem",
  384. .data = &sysctl_tcp_mem,
  385. .maxlen = sizeof(sysctl_tcp_mem),
  386. .mode = 0644,
  387. .proc_handler = proc_doulongvec_minmax
  388. },
  389. {
  390. .procname = "tcp_wmem",
  391. .data = &sysctl_tcp_wmem,
  392. .maxlen = sizeof(sysctl_tcp_wmem),
  393. .mode = 0644,
  394. .proc_handler = proc_dointvec
  395. },
  396. {
  397. .procname = "tcp_rmem",
  398. .data = &sysctl_tcp_rmem,
  399. .maxlen = sizeof(sysctl_tcp_rmem),
  400. .mode = 0644,
  401. .proc_handler = proc_dointvec
  402. },
  403. {
  404. .procname = "tcp_app_win",
  405. .data = &sysctl_tcp_app_win,
  406. .maxlen = sizeof(int),
  407. .mode = 0644,
  408. .proc_handler = proc_dointvec
  409. },
  410. {
  411. .procname = "tcp_adv_win_scale",
  412. .data = &sysctl_tcp_adv_win_scale,
  413. .maxlen = sizeof(int),
  414. .mode = 0644,
  415. .proc_handler = proc_dointvec_minmax,
  416. .extra1 = &tcp_adv_win_scale_min,
  417. .extra2 = &tcp_adv_win_scale_max,
  418. },
  419. {
  420. .procname = "tcp_tw_reuse",
  421. .data = &sysctl_tcp_tw_reuse,
  422. .maxlen = sizeof(int),
  423. .mode = 0644,
  424. .proc_handler = proc_dointvec
  425. },
  426. {
  427. .procname = "tcp_frto",
  428. .data = &sysctl_tcp_frto,
  429. .maxlen = sizeof(int),
  430. .mode = 0644,
  431. .proc_handler = proc_dointvec
  432. },
  433. {
  434. .procname = "tcp_frto_response",
  435. .data = &sysctl_tcp_frto_response,
  436. .maxlen = sizeof(int),
  437. .mode = 0644,
  438. .proc_handler = proc_dointvec
  439. },
  440. {
  441. .procname = "tcp_low_latency",
  442. .data = &sysctl_tcp_low_latency,
  443. .maxlen = sizeof(int),
  444. .mode = 0644,
  445. .proc_handler = proc_dointvec
  446. },
  447. {
  448. .procname = "tcp_no_metrics_save",
  449. .data = &sysctl_tcp_nometrics_save,
  450. .maxlen = sizeof(int),
  451. .mode = 0644,
  452. .proc_handler = proc_dointvec,
  453. },
  454. {
  455. .procname = "tcp_moderate_rcvbuf",
  456. .data = &sysctl_tcp_moderate_rcvbuf,
  457. .maxlen = sizeof(int),
  458. .mode = 0644,
  459. .proc_handler = proc_dointvec,
  460. },
  461. {
  462. .procname = "tcp_tso_win_divisor",
  463. .data = &sysctl_tcp_tso_win_divisor,
  464. .maxlen = sizeof(int),
  465. .mode = 0644,
  466. .proc_handler = proc_dointvec,
  467. },
  468. {
  469. .procname = "tcp_congestion_control",
  470. .mode = 0644,
  471. .maxlen = TCP_CA_NAME_MAX,
  472. .proc_handler = proc_tcp_congestion_control,
  473. },
  474. {
  475. .procname = "tcp_abc",
  476. .data = &sysctl_tcp_abc,
  477. .maxlen = sizeof(int),
  478. .mode = 0644,
  479. .proc_handler = proc_dointvec,
  480. },
  481. {
  482. .procname = "tcp_mtu_probing",
  483. .data = &sysctl_tcp_mtu_probing,
  484. .maxlen = sizeof(int),
  485. .mode = 0644,
  486. .proc_handler = proc_dointvec,
  487. },
  488. {
  489. .procname = "tcp_base_mss",
  490. .data = &sysctl_tcp_base_mss,
  491. .maxlen = sizeof(int),
  492. .mode = 0644,
  493. .proc_handler = proc_dointvec,
  494. },
  495. {
  496. .procname = "tcp_workaround_signed_windows",
  497. .data = &sysctl_tcp_workaround_signed_windows,
  498. .maxlen = sizeof(int),
  499. .mode = 0644,
  500. .proc_handler = proc_dointvec
  501. },
  502. #ifdef CONFIG_NET_DMA
  503. {
  504. .procname = "tcp_dma_copybreak",
  505. .data = &sysctl_tcp_dma_copybreak,
  506. .maxlen = sizeof(int),
  507. .mode = 0644,
  508. .proc_handler = proc_dointvec
  509. },
  510. #endif
  511. {
  512. .procname = "tcp_slow_start_after_idle",
  513. .data = &sysctl_tcp_slow_start_after_idle,
  514. .maxlen = sizeof(int),
  515. .mode = 0644,
  516. .proc_handler = proc_dointvec
  517. },
  518. #ifdef CONFIG_NETLABEL
  519. {
  520. .procname = "cipso_cache_enable",
  521. .data = &cipso_v4_cache_enabled,
  522. .maxlen = sizeof(int),
  523. .mode = 0644,
  524. .proc_handler = proc_dointvec,
  525. },
  526. {
  527. .procname = "cipso_cache_bucket_size",
  528. .data = &cipso_v4_cache_bucketsize,
  529. .maxlen = sizeof(int),
  530. .mode = 0644,
  531. .proc_handler = proc_dointvec,
  532. },
  533. {
  534. .procname = "cipso_rbm_optfmt",
  535. .data = &cipso_v4_rbm_optfmt,
  536. .maxlen = sizeof(int),
  537. .mode = 0644,
  538. .proc_handler = proc_dointvec,
  539. },
  540. {
  541. .procname = "cipso_rbm_strictvalid",
  542. .data = &cipso_v4_rbm_strictvalid,
  543. .maxlen = sizeof(int),
  544. .mode = 0644,
  545. .proc_handler = proc_dointvec,
  546. },
  547. #endif /* CONFIG_NETLABEL */
  548. {
  549. .procname = "tcp_available_congestion_control",
  550. .maxlen = TCP_CA_BUF_MAX,
  551. .mode = 0444,
  552. .proc_handler = proc_tcp_available_congestion_control,
  553. },
  554. {
  555. .procname = "tcp_allowed_congestion_control",
  556. .maxlen = TCP_CA_BUF_MAX,
  557. .mode = 0644,
  558. .proc_handler = proc_allowed_congestion_control,
  559. },
  560. {
  561. .procname = "tcp_max_ssthresh",
  562. .data = &sysctl_tcp_max_ssthresh,
  563. .maxlen = sizeof(int),
  564. .mode = 0644,
  565. .proc_handler = proc_dointvec,
  566. },
  567. {
  568. .procname = "tcp_cookie_size",
  569. .data = &sysctl_tcp_cookie_size,
  570. .maxlen = sizeof(int),
  571. .mode = 0644,
  572. .proc_handler = proc_dointvec
  573. },
  574. {
  575. .procname = "tcp_thin_linear_timeouts",
  576. .data = &sysctl_tcp_thin_linear_timeouts,
  577. .maxlen = sizeof(int),
  578. .mode = 0644,
  579. .proc_handler = proc_dointvec
  580. },
  581. {
  582. .procname = "tcp_thin_dupack",
  583. .data = &sysctl_tcp_thin_dupack,
  584. .maxlen = sizeof(int),
  585. .mode = 0644,
  586. .proc_handler = proc_dointvec
  587. },
  588. {
  589. .procname = "udp_mem",
  590. .data = &sysctl_udp_mem,
  591. .maxlen = sizeof(sysctl_udp_mem),
  592. .mode = 0644,
  593. .proc_handler = proc_doulongvec_minmax,
  594. },
  595. {
  596. .procname = "udp_rmem_min",
  597. .data = &sysctl_udp_rmem_min,
  598. .maxlen = sizeof(sysctl_udp_rmem_min),
  599. .mode = 0644,
  600. .proc_handler = proc_dointvec_minmax,
  601. .extra1 = &zero
  602. },
  603. {
  604. .procname = "udp_wmem_min",
  605. .data = &sysctl_udp_wmem_min,
  606. .maxlen = sizeof(sysctl_udp_wmem_min),
  607. .mode = 0644,
  608. .proc_handler = proc_dointvec_minmax,
  609. .extra1 = &zero
  610. },
  611. { }
  612. };
  613. static struct ctl_table ipv4_net_table[] = {
  614. {
  615. .procname = "icmp_echo_ignore_all",
  616. .data = &init_net.ipv4.sysctl_icmp_echo_ignore_all,
  617. .maxlen = sizeof(int),
  618. .mode = 0644,
  619. .proc_handler = proc_dointvec
  620. },
  621. {
  622. .procname = "icmp_echo_ignore_broadcasts",
  623. .data = &init_net.ipv4.sysctl_icmp_echo_ignore_broadcasts,
  624. .maxlen = sizeof(int),
  625. .mode = 0644,
  626. .proc_handler = proc_dointvec
  627. },
  628. {
  629. .procname = "icmp_ignore_bogus_error_responses",
  630. .data = &init_net.ipv4.sysctl_icmp_ignore_bogus_error_responses,
  631. .maxlen = sizeof(int),
  632. .mode = 0644,
  633. .proc_handler = proc_dointvec
  634. },
  635. {
  636. .procname = "icmp_errors_use_inbound_ifaddr",
  637. .data = &init_net.ipv4.sysctl_icmp_errors_use_inbound_ifaddr,
  638. .maxlen = sizeof(int),
  639. .mode = 0644,
  640. .proc_handler = proc_dointvec
  641. },
  642. {
  643. .procname = "icmp_ratelimit",
  644. .data = &init_net.ipv4.sysctl_icmp_ratelimit,
  645. .maxlen = sizeof(int),
  646. .mode = 0644,
  647. .proc_handler = proc_dointvec_ms_jiffies,
  648. },
  649. {
  650. .procname = "icmp_ratemask",
  651. .data = &init_net.ipv4.sysctl_icmp_ratemask,
  652. .maxlen = sizeof(int),
  653. .mode = 0644,
  654. .proc_handler = proc_dointvec
  655. },
  656. {
  657. .procname = "rt_cache_rebuild_count",
  658. .data = &init_net.ipv4.sysctl_rt_cache_rebuild_count,
  659. .maxlen = sizeof(int),
  660. .mode = 0644,
  661. .proc_handler = proc_dointvec
  662. },
  663. { }
  664. };
  665. struct ctl_path net_ipv4_ctl_path[] = {
  666. { .procname = "net", },
  667. { .procname = "ipv4", },
  668. { },
  669. };
  670. EXPORT_SYMBOL_GPL(net_ipv4_ctl_path);
  671. static __net_init int ipv4_sysctl_init_net(struct net *net)
  672. {
  673. struct ctl_table *table;
  674. table = ipv4_net_table;
  675. if (!net_eq(net, &init_net)) {
  676. table = kmemdup(table, sizeof(ipv4_net_table), GFP_KERNEL);
  677. if (table == NULL)
  678. goto err_alloc;
  679. table[0].data =
  680. &net->ipv4.sysctl_icmp_echo_ignore_all;
  681. table[1].data =
  682. &net->ipv4.sysctl_icmp_echo_ignore_broadcasts;
  683. table[2].data =
  684. &net->ipv4.sysctl_icmp_ignore_bogus_error_responses;
  685. table[3].data =
  686. &net->ipv4.sysctl_icmp_errors_use_inbound_ifaddr;
  687. table[4].data =
  688. &net->ipv4.sysctl_icmp_ratelimit;
  689. table[5].data =
  690. &net->ipv4.sysctl_icmp_ratemask;
  691. table[6].data =
  692. &net->ipv4.sysctl_rt_cache_rebuild_count;
  693. }
  694. net->ipv4.sysctl_rt_cache_rebuild_count = 4;
  695. net->ipv4.ipv4_hdr = register_net_sysctl_table(net,
  696. net_ipv4_ctl_path, table);
  697. if (net->ipv4.ipv4_hdr == NULL)
  698. goto err_reg;
  699. return 0;
  700. err_reg:
  701. if (!net_eq(net, &init_net))
  702. kfree(table);
  703. err_alloc:
  704. return -ENOMEM;
  705. }
  706. static __net_exit void ipv4_sysctl_exit_net(struct net *net)
  707. {
  708. struct ctl_table *table;
  709. table = net->ipv4.ipv4_hdr->ctl_table_arg;
  710. unregister_net_sysctl_table(net->ipv4.ipv4_hdr);
  711. kfree(table);
  712. }
  713. static __net_initdata struct pernet_operations ipv4_sysctl_ops = {
  714. .init = ipv4_sysctl_init_net,
  715. .exit = ipv4_sysctl_exit_net,
  716. };
  717. static __init int sysctl_ipv4_init(void)
  718. {
  719. struct ctl_table_header *hdr;
  720. struct ctl_table *i;
  721. for (i = ipv4_table; i->procname; i++) {
  722. if (strcmp(i->procname, "ip_local_reserved_ports") == 0) {
  723. i->data = sysctl_local_reserved_ports;
  724. break;
  725. }
  726. }
  727. if (!i->procname)
  728. return -EINVAL;
  729. hdr = register_sysctl_paths(net_ipv4_ctl_path, ipv4_table);
  730. if (hdr == NULL)
  731. return -ENOMEM;
  732. if (register_pernet_subsys(&ipv4_sysctl_ops)) {
  733. unregister_sysctl_table(hdr);
  734. return -ENOMEM;
  735. }
  736. return 0;
  737. }
  738. __initcall(sysctl_ipv4_init);