2 * sysctl_net_ipv4.c: sysctl interface to net IPV4 subsystem.
4 * Begun April 1, 1996, Mike Shaver.
5 * Added /proc/sys/net/ipv4 directory entry (empty =) ). [MS]
9 #include <linux/module.h>
10 #include <linux/sysctl.h>
11 #include <linux/igmp.h>
12 #include <linux/inetdevice.h>
13 #include <linux/seqlock.h>
14 #include <linux/init.h>
15 #include <linux/slab.h>
16 #include <linux/nsproxy.h>
17 #include <linux/swap.h>
21 #include <net/route.h>
24 #include <net/cipso_ipv4.h>
25 #include <net/inet_frag.h>
27 #include <net/tcp_memcontrol.h>
32 static int tcp_retr1_max
= 255;
33 static int ip_local_port_range_min
[] = { 1, 1 };
34 static int ip_local_port_range_max
[] = { 65535, 65535 };
35 static int tcp_adv_win_scale_min
= -31;
36 static int tcp_adv_win_scale_max
= 31;
37 static int ip_ttl_min
= 1;
38 static int ip_ttl_max
= 255;
39 static int ip_ping_group_range_min
[] = { 0, 0 };
40 static int ip_ping_group_range_max
[] = { GID_T_MAX
, GID_T_MAX
};
42 /* Update system visible IP port range */
43 static void set_local_port_range(int range
[2])
45 write_seqlock(&sysctl_local_ports
.lock
);
46 sysctl_local_ports
.range
[0] = range
[0];
47 sysctl_local_ports
.range
[1] = range
[1];
48 write_sequnlock(&sysctl_local_ports
.lock
);
51 /* Validate changes from /proc interface. */
52 static int ipv4_local_port_range(ctl_table
*table
, int write
,
54 size_t *lenp
, loff_t
*ppos
)
60 .maxlen
= sizeof(range
),
62 .extra1
= &ip_local_port_range_min
,
63 .extra2
= &ip_local_port_range_max
,
66 inet_get_local_port_range(range
, range
+ 1);
67 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
69 if (write
&& ret
== 0) {
70 if (range
[1] < range
[0])
73 set_local_port_range(range
);
80 static void inet_get_ping_group_range_table(struct ctl_table
*table
, kgid_t
*low
, kgid_t
*high
)
82 kgid_t
*data
= table
->data
;
85 seq
= read_seqbegin(&sysctl_local_ports
.lock
);
89 } while (read_seqretry(&sysctl_local_ports
.lock
, seq
));
92 /* Update system visible IP port range */
93 static void set_ping_group_range(struct ctl_table
*table
, kgid_t low
, kgid_t high
)
95 kgid_t
*data
= table
->data
;
96 write_seqlock(&sysctl_local_ports
.lock
);
99 write_sequnlock(&sysctl_local_ports
.lock
);
102 /* Validate changes from /proc interface. */
103 static int ipv4_ping_group_range(ctl_table
*table
, int write
,
105 size_t *lenp
, loff_t
*ppos
)
107 struct user_namespace
*user_ns
= current_user_ns();
113 .maxlen
= sizeof(urange
),
115 .extra1
= &ip_ping_group_range_min
,
116 .extra2
= &ip_ping_group_range_max
,
119 inet_get_ping_group_range_table(table
, &low
, &high
);
120 urange
[0] = from_kgid_munged(user_ns
, low
);
121 urange
[1] = from_kgid_munged(user_ns
, high
);
122 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
124 if (write
&& ret
== 0) {
125 low
= make_kgid(user_ns
, urange
[0]);
126 high
= make_kgid(user_ns
, urange
[1]);
127 if (!gid_valid(low
) || !gid_valid(high
) ||
128 (urange
[1] < urange
[0]) || gid_lt(high
, low
)) {
129 low
= make_kgid(&init_user_ns
, 1);
130 high
= make_kgid(&init_user_ns
, 0);
132 set_ping_group_range(table
, low
, high
);
138 static int proc_tcp_congestion_control(ctl_table
*ctl
, int write
,
139 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
141 char val
[TCP_CA_NAME_MAX
];
144 .maxlen
= TCP_CA_NAME_MAX
,
148 tcp_get_default_congestion_control(val
);
150 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
151 if (write
&& ret
== 0)
152 ret
= tcp_set_default_congestion_control(val
);
156 static int proc_tcp_available_congestion_control(ctl_table
*ctl
,
158 void __user
*buffer
, size_t *lenp
,
161 ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
, };
164 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
167 tcp_get_available_congestion_control(tbl
.data
, TCP_CA_BUF_MAX
);
168 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
173 static int proc_allowed_congestion_control(ctl_table
*ctl
,
175 void __user
*buffer
, size_t *lenp
,
178 ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
};
181 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
185 tcp_get_allowed_congestion_control(tbl
.data
, tbl
.maxlen
);
186 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
187 if (write
&& ret
== 0)
188 ret
= tcp_set_allowed_congestion_control(tbl
.data
);
193 static int ipv4_tcp_mem(ctl_table
*ctl
, int write
,
194 void __user
*buffer
, size_t *lenp
,
198 unsigned long vec
[3];
199 struct net
*net
= current
->nsproxy
->net_ns
;
200 #ifdef CONFIG_MEMCG_KMEM
201 struct mem_cgroup
*memcg
;
206 .maxlen
= sizeof(vec
),
211 ctl
->data
= &net
->ipv4
.sysctl_tcp_mem
;
212 return proc_doulongvec_minmax(ctl
, write
, buffer
, lenp
, ppos
);
215 ret
= proc_doulongvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
219 #ifdef CONFIG_MEMCG_KMEM
221 memcg
= mem_cgroup_from_task(current
);
223 tcp_prot_mem(memcg
, vec
[0], 0);
224 tcp_prot_mem(memcg
, vec
[1], 1);
225 tcp_prot_mem(memcg
, vec
[2], 2);
229 net
->ipv4
.sysctl_tcp_mem
[0] = vec
[0];
230 net
->ipv4
.sysctl_tcp_mem
[1] = vec
[1];
231 net
->ipv4
.sysctl_tcp_mem
[2] = vec
[2];
236 static int proc_tcp_fastopen_key(ctl_table
*ctl
, int write
, void __user
*buffer
,
237 size_t *lenp
, loff_t
*ppos
)
239 ctl_table tbl
= { .maxlen
= (TCP_FASTOPEN_KEY_LENGTH
* 2 + 10) };
240 struct tcp_fastopen_context
*ctxt
;
242 u32 user_key
[4]; /* 16 bytes, matching TCP_FASTOPEN_KEY_LENGTH */
244 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_KERNEL
);
249 ctxt
= rcu_dereference(tcp_fastopen_ctx
);
251 memcpy(user_key
, ctxt
->key
, TCP_FASTOPEN_KEY_LENGTH
);
253 memset(user_key
, 0, sizeof(user_key
));
256 snprintf(tbl
.data
, tbl
.maxlen
, "%08x-%08x-%08x-%08x",
257 user_key
[0], user_key
[1], user_key
[2], user_key
[3]);
258 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
260 if (write
&& ret
== 0) {
261 if (sscanf(tbl
.data
, "%x-%x-%x-%x", user_key
, user_key
+ 1,
262 user_key
+ 2, user_key
+ 3) != 4) {
266 tcp_fastopen_reset_cipher(user_key
, TCP_FASTOPEN_KEY_LENGTH
);
270 pr_debug("proc FO key set 0x%x-%x-%x-%x <- 0x%s: %u\n",
271 user_key
[0], user_key
[1], user_key
[2], user_key
[3],
272 (char *)tbl
.data
, ret
);
277 static struct ctl_table ipv4_table
[] = {
279 .procname
= "tcp_timestamps",
280 .data
= &sysctl_tcp_timestamps
,
281 .maxlen
= sizeof(int),
283 .proc_handler
= proc_dointvec
286 .procname
= "tcp_window_scaling",
287 .data
= &sysctl_tcp_window_scaling
,
288 .maxlen
= sizeof(int),
290 .proc_handler
= proc_dointvec
293 .procname
= "tcp_sack",
294 .data
= &sysctl_tcp_sack
,
295 .maxlen
= sizeof(int),
297 .proc_handler
= proc_dointvec
300 .procname
= "tcp_retrans_collapse",
301 .data
= &sysctl_tcp_retrans_collapse
,
302 .maxlen
= sizeof(int),
304 .proc_handler
= proc_dointvec
307 .procname
= "ip_default_ttl",
308 .data
= &sysctl_ip_default_ttl
,
309 .maxlen
= sizeof(int),
311 .proc_handler
= proc_dointvec_minmax
,
312 .extra1
= &ip_ttl_min
,
313 .extra2
= &ip_ttl_max
,
316 .procname
= "ip_no_pmtu_disc",
317 .data
= &ipv4_config
.no_pmtu_disc
,
318 .maxlen
= sizeof(int),
320 .proc_handler
= proc_dointvec
323 .procname
= "ip_nonlocal_bind",
324 .data
= &sysctl_ip_nonlocal_bind
,
325 .maxlen
= sizeof(int),
327 .proc_handler
= proc_dointvec
330 .procname
= "tcp_syn_retries",
331 .data
= &sysctl_tcp_syn_retries
,
332 .maxlen
= sizeof(int),
334 .proc_handler
= proc_dointvec
337 .procname
= "tcp_synack_retries",
338 .data
= &sysctl_tcp_synack_retries
,
339 .maxlen
= sizeof(int),
341 .proc_handler
= proc_dointvec
344 .procname
= "tcp_max_orphans",
345 .data
= &sysctl_tcp_max_orphans
,
346 .maxlen
= sizeof(int),
348 .proc_handler
= proc_dointvec
351 .procname
= "tcp_max_tw_buckets",
352 .data
= &tcp_death_row
.sysctl_max_tw_buckets
,
353 .maxlen
= sizeof(int),
355 .proc_handler
= proc_dointvec
358 .procname
= "ip_early_demux",
359 .data
= &sysctl_ip_early_demux
,
360 .maxlen
= sizeof(int),
362 .proc_handler
= proc_dointvec
365 .procname
= "ip_dynaddr",
366 .data
= &sysctl_ip_dynaddr
,
367 .maxlen
= sizeof(int),
369 .proc_handler
= proc_dointvec
372 .procname
= "tcp_keepalive_time",
373 .data
= &sysctl_tcp_keepalive_time
,
374 .maxlen
= sizeof(int),
376 .proc_handler
= proc_dointvec_jiffies
,
379 .procname
= "tcp_keepalive_probes",
380 .data
= &sysctl_tcp_keepalive_probes
,
381 .maxlen
= sizeof(int),
383 .proc_handler
= proc_dointvec
386 .procname
= "tcp_keepalive_intvl",
387 .data
= &sysctl_tcp_keepalive_intvl
,
388 .maxlen
= sizeof(int),
390 .proc_handler
= proc_dointvec_jiffies
,
393 .procname
= "tcp_retries1",
394 .data
= &sysctl_tcp_retries1
,
395 .maxlen
= sizeof(int),
397 .proc_handler
= proc_dointvec_minmax
,
398 .extra2
= &tcp_retr1_max
401 .procname
= "tcp_retries2",
402 .data
= &sysctl_tcp_retries2
,
403 .maxlen
= sizeof(int),
405 .proc_handler
= proc_dointvec
408 .procname
= "tcp_fin_timeout",
409 .data
= &sysctl_tcp_fin_timeout
,
410 .maxlen
= sizeof(int),
412 .proc_handler
= proc_dointvec_jiffies
,
414 #ifdef CONFIG_SYN_COOKIES
416 .procname
= "tcp_syncookies",
417 .data
= &sysctl_tcp_syncookies
,
418 .maxlen
= sizeof(int),
420 .proc_handler
= proc_dointvec
424 .procname
= "tcp_fastopen",
425 .data
= &sysctl_tcp_fastopen
,
426 .maxlen
= sizeof(int),
428 .proc_handler
= proc_dointvec
,
431 .procname
= "tcp_fastopen_key",
433 .maxlen
= ((TCP_FASTOPEN_KEY_LENGTH
* 2) + 10),
434 .proc_handler
= proc_tcp_fastopen_key
,
437 .procname
= "tcp_tw_recycle",
438 .data
= &tcp_death_row
.sysctl_tw_recycle
,
439 .maxlen
= sizeof(int),
441 .proc_handler
= proc_dointvec
444 .procname
= "tcp_abort_on_overflow",
445 .data
= &sysctl_tcp_abort_on_overflow
,
446 .maxlen
= sizeof(int),
448 .proc_handler
= proc_dointvec
451 .procname
= "tcp_stdurg",
452 .data
= &sysctl_tcp_stdurg
,
453 .maxlen
= sizeof(int),
455 .proc_handler
= proc_dointvec
458 .procname
= "tcp_rfc1337",
459 .data
= &sysctl_tcp_rfc1337
,
460 .maxlen
= sizeof(int),
462 .proc_handler
= proc_dointvec
465 .procname
= "tcp_max_syn_backlog",
466 .data
= &sysctl_max_syn_backlog
,
467 .maxlen
= sizeof(int),
469 .proc_handler
= proc_dointvec
472 .procname
= "ip_local_port_range",
473 .data
= &sysctl_local_ports
.range
,
474 .maxlen
= sizeof(sysctl_local_ports
.range
),
476 .proc_handler
= ipv4_local_port_range
,
479 .procname
= "ip_local_reserved_ports",
480 .data
= NULL
, /* initialized in sysctl_ipv4_init */
483 .proc_handler
= proc_do_large_bitmap
,
486 .procname
= "igmp_max_memberships",
487 .data
= &sysctl_igmp_max_memberships
,
488 .maxlen
= sizeof(int),
490 .proc_handler
= proc_dointvec
493 .procname
= "igmp_max_msf",
494 .data
= &sysctl_igmp_max_msf
,
495 .maxlen
= sizeof(int),
497 .proc_handler
= proc_dointvec
500 .procname
= "inet_peer_threshold",
501 .data
= &inet_peer_threshold
,
502 .maxlen
= sizeof(int),
504 .proc_handler
= proc_dointvec
507 .procname
= "inet_peer_minttl",
508 .data
= &inet_peer_minttl
,
509 .maxlen
= sizeof(int),
511 .proc_handler
= proc_dointvec_jiffies
,
514 .procname
= "inet_peer_maxttl",
515 .data
= &inet_peer_maxttl
,
516 .maxlen
= sizeof(int),
518 .proc_handler
= proc_dointvec_jiffies
,
521 .procname
= "tcp_orphan_retries",
522 .data
= &sysctl_tcp_orphan_retries
,
523 .maxlen
= sizeof(int),
525 .proc_handler
= proc_dointvec
528 .procname
= "tcp_fack",
529 .data
= &sysctl_tcp_fack
,
530 .maxlen
= sizeof(int),
532 .proc_handler
= proc_dointvec
535 .procname
= "tcp_reordering",
536 .data
= &sysctl_tcp_reordering
,
537 .maxlen
= sizeof(int),
539 .proc_handler
= proc_dointvec
542 .procname
= "tcp_dsack",
543 .data
= &sysctl_tcp_dsack
,
544 .maxlen
= sizeof(int),
546 .proc_handler
= proc_dointvec
549 .procname
= "tcp_wmem",
550 .data
= &sysctl_tcp_wmem
,
551 .maxlen
= sizeof(sysctl_tcp_wmem
),
553 .proc_handler
= proc_dointvec_minmax
,
557 .procname
= "tcp_rmem",
558 .data
= &sysctl_tcp_rmem
,
559 .maxlen
= sizeof(sysctl_tcp_rmem
),
561 .proc_handler
= proc_dointvec_minmax
,
565 .procname
= "tcp_app_win",
566 .data
= &sysctl_tcp_app_win
,
567 .maxlen
= sizeof(int),
569 .proc_handler
= proc_dointvec
572 .procname
= "tcp_adv_win_scale",
573 .data
= &sysctl_tcp_adv_win_scale
,
574 .maxlen
= sizeof(int),
576 .proc_handler
= proc_dointvec_minmax
,
577 .extra1
= &tcp_adv_win_scale_min
,
578 .extra2
= &tcp_adv_win_scale_max
,
581 .procname
= "tcp_tw_reuse",
582 .data
= &sysctl_tcp_tw_reuse
,
583 .maxlen
= sizeof(int),
585 .proc_handler
= proc_dointvec
588 .procname
= "tcp_frto",
589 .data
= &sysctl_tcp_frto
,
590 .maxlen
= sizeof(int),
592 .proc_handler
= proc_dointvec
595 .procname
= "tcp_low_latency",
596 .data
= &sysctl_tcp_low_latency
,
597 .maxlen
= sizeof(int),
599 .proc_handler
= proc_dointvec
602 .procname
= "tcp_no_metrics_save",
603 .data
= &sysctl_tcp_nometrics_save
,
604 .maxlen
= sizeof(int),
606 .proc_handler
= proc_dointvec
,
609 .procname
= "tcp_moderate_rcvbuf",
610 .data
= &sysctl_tcp_moderate_rcvbuf
,
611 .maxlen
= sizeof(int),
613 .proc_handler
= proc_dointvec
,
616 .procname
= "tcp_tso_win_divisor",
617 .data
= &sysctl_tcp_tso_win_divisor
,
618 .maxlen
= sizeof(int),
620 .proc_handler
= proc_dointvec
,
623 .procname
= "tcp_congestion_control",
625 .maxlen
= TCP_CA_NAME_MAX
,
626 .proc_handler
= proc_tcp_congestion_control
,
629 .procname
= "tcp_mtu_probing",
630 .data
= &sysctl_tcp_mtu_probing
,
631 .maxlen
= sizeof(int),
633 .proc_handler
= proc_dointvec
,
636 .procname
= "tcp_base_mss",
637 .data
= &sysctl_tcp_base_mss
,
638 .maxlen
= sizeof(int),
640 .proc_handler
= proc_dointvec
,
643 .procname
= "tcp_workaround_signed_windows",
644 .data
= &sysctl_tcp_workaround_signed_windows
,
645 .maxlen
= sizeof(int),
647 .proc_handler
= proc_dointvec
650 .procname
= "tcp_limit_output_bytes",
651 .data
= &sysctl_tcp_limit_output_bytes
,
652 .maxlen
= sizeof(int),
654 .proc_handler
= proc_dointvec
657 .procname
= "tcp_challenge_ack_limit",
658 .data
= &sysctl_tcp_challenge_ack_limit
,
659 .maxlen
= sizeof(int),
661 .proc_handler
= proc_dointvec
663 #ifdef CONFIG_NET_DMA
665 .procname
= "tcp_dma_copybreak",
666 .data
= &sysctl_tcp_dma_copybreak
,
667 .maxlen
= sizeof(int),
669 .proc_handler
= proc_dointvec
673 .procname
= "tcp_slow_start_after_idle",
674 .data
= &sysctl_tcp_slow_start_after_idle
,
675 .maxlen
= sizeof(int),
677 .proc_handler
= proc_dointvec
679 #ifdef CONFIG_NETLABEL
681 .procname
= "cipso_cache_enable",
682 .data
= &cipso_v4_cache_enabled
,
683 .maxlen
= sizeof(int),
685 .proc_handler
= proc_dointvec
,
688 .procname
= "cipso_cache_bucket_size",
689 .data
= &cipso_v4_cache_bucketsize
,
690 .maxlen
= sizeof(int),
692 .proc_handler
= proc_dointvec
,
695 .procname
= "cipso_rbm_optfmt",
696 .data
= &cipso_v4_rbm_optfmt
,
697 .maxlen
= sizeof(int),
699 .proc_handler
= proc_dointvec
,
702 .procname
= "cipso_rbm_strictvalid",
703 .data
= &cipso_v4_rbm_strictvalid
,
704 .maxlen
= sizeof(int),
706 .proc_handler
= proc_dointvec
,
708 #endif /* CONFIG_NETLABEL */
710 .procname
= "tcp_available_congestion_control",
711 .maxlen
= TCP_CA_BUF_MAX
,
713 .proc_handler
= proc_tcp_available_congestion_control
,
716 .procname
= "tcp_allowed_congestion_control",
717 .maxlen
= TCP_CA_BUF_MAX
,
719 .proc_handler
= proc_allowed_congestion_control
,
722 .procname
= "tcp_max_ssthresh",
723 .data
= &sysctl_tcp_max_ssthresh
,
724 .maxlen
= sizeof(int),
726 .proc_handler
= proc_dointvec
,
729 .procname
= "tcp_thin_linear_timeouts",
730 .data
= &sysctl_tcp_thin_linear_timeouts
,
731 .maxlen
= sizeof(int),
733 .proc_handler
= proc_dointvec
736 .procname
= "tcp_thin_dupack",
737 .data
= &sysctl_tcp_thin_dupack
,
738 .maxlen
= sizeof(int),
740 .proc_handler
= proc_dointvec
743 .procname
= "tcp_early_retrans",
744 .data
= &sysctl_tcp_early_retrans
,
745 .maxlen
= sizeof(int),
747 .proc_handler
= proc_dointvec_minmax
,
752 .procname
= "udp_mem",
753 .data
= &sysctl_udp_mem
,
754 .maxlen
= sizeof(sysctl_udp_mem
),
756 .proc_handler
= proc_doulongvec_minmax
,
759 .procname
= "udp_rmem_min",
760 .data
= &sysctl_udp_rmem_min
,
761 .maxlen
= sizeof(sysctl_udp_rmem_min
),
763 .proc_handler
= proc_dointvec_minmax
,
767 .procname
= "udp_wmem_min",
768 .data
= &sysctl_udp_wmem_min
,
769 .maxlen
= sizeof(sysctl_udp_wmem_min
),
771 .proc_handler
= proc_dointvec_minmax
,
777 static struct ctl_table ipv4_net_table
[] = {
779 .procname
= "icmp_echo_ignore_all",
780 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_all
,
781 .maxlen
= sizeof(int),
783 .proc_handler
= proc_dointvec
786 .procname
= "icmp_echo_ignore_broadcasts",
787 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_broadcasts
,
788 .maxlen
= sizeof(int),
790 .proc_handler
= proc_dointvec
793 .procname
= "icmp_ignore_bogus_error_responses",
794 .data
= &init_net
.ipv4
.sysctl_icmp_ignore_bogus_error_responses
,
795 .maxlen
= sizeof(int),
797 .proc_handler
= proc_dointvec
800 .procname
= "icmp_errors_use_inbound_ifaddr",
801 .data
= &init_net
.ipv4
.sysctl_icmp_errors_use_inbound_ifaddr
,
802 .maxlen
= sizeof(int),
804 .proc_handler
= proc_dointvec
807 .procname
= "icmp_ratelimit",
808 .data
= &init_net
.ipv4
.sysctl_icmp_ratelimit
,
809 .maxlen
= sizeof(int),
811 .proc_handler
= proc_dointvec_ms_jiffies
,
814 .procname
= "icmp_ratemask",
815 .data
= &init_net
.ipv4
.sysctl_icmp_ratemask
,
816 .maxlen
= sizeof(int),
818 .proc_handler
= proc_dointvec
821 .procname
= "ping_group_range",
822 .data
= &init_net
.ipv4
.sysctl_ping_group_range
,
823 .maxlen
= sizeof(gid_t
)*2,
825 .proc_handler
= ipv4_ping_group_range
,
828 .procname
= "tcp_ecn",
829 .data
= &init_net
.ipv4
.sysctl_tcp_ecn
,
830 .maxlen
= sizeof(int),
832 .proc_handler
= proc_dointvec
835 .procname
= "tcp_mem",
836 .maxlen
= sizeof(init_net
.ipv4
.sysctl_tcp_mem
),
838 .proc_handler
= ipv4_tcp_mem
,
843 static __net_init
int ipv4_sysctl_init_net(struct net
*net
)
845 struct ctl_table
*table
;
847 table
= ipv4_net_table
;
848 if (!net_eq(net
, &init_net
)) {
849 table
= kmemdup(table
, sizeof(ipv4_net_table
), GFP_KERNEL
);
854 &net
->ipv4
.sysctl_icmp_echo_ignore_all
;
856 &net
->ipv4
.sysctl_icmp_echo_ignore_broadcasts
;
858 &net
->ipv4
.sysctl_icmp_ignore_bogus_error_responses
;
860 &net
->ipv4
.sysctl_icmp_errors_use_inbound_ifaddr
;
862 &net
->ipv4
.sysctl_icmp_ratelimit
;
864 &net
->ipv4
.sysctl_icmp_ratemask
;
866 &net
->ipv4
.sysctl_ping_group_range
;
868 &net
->ipv4
.sysctl_tcp_ecn
;
870 /* Don't export sysctls to unprivileged users */
871 if (net
->user_ns
!= &init_user_ns
)
872 table
[0].procname
= NULL
;
876 * Sane defaults - nobody may create ping sockets.
877 * Boot scripts should set this to distro-specific group.
879 net
->ipv4
.sysctl_ping_group_range
[0] = make_kgid(&init_user_ns
, 1);
880 net
->ipv4
.sysctl_ping_group_range
[1] = make_kgid(&init_user_ns
, 0);
884 net
->ipv4
.ipv4_hdr
= register_net_sysctl(net
, "net/ipv4", table
);
885 if (net
->ipv4
.ipv4_hdr
== NULL
)
891 if (!net_eq(net
, &init_net
))
897 static __net_exit
void ipv4_sysctl_exit_net(struct net
*net
)
899 struct ctl_table
*table
;
901 table
= net
->ipv4
.ipv4_hdr
->ctl_table_arg
;
902 unregister_net_sysctl_table(net
->ipv4
.ipv4_hdr
);
906 static __net_initdata
struct pernet_operations ipv4_sysctl_ops
= {
907 .init
= ipv4_sysctl_init_net
,
908 .exit
= ipv4_sysctl_exit_net
,
911 static __init
int sysctl_ipv4_init(void)
913 struct ctl_table_header
*hdr
;
916 for (i
= ipv4_table
; i
->procname
; i
++) {
917 if (strcmp(i
->procname
, "ip_local_reserved_ports") == 0) {
918 i
->data
= sysctl_local_reserved_ports
;
925 hdr
= register_net_sysctl(&init_net
, "net/ipv4", ipv4_table
);
929 if (register_pernet_subsys(&ipv4_sysctl_ops
)) {
930 unregister_net_sysctl_table(hdr
);
937 __initcall(sysctl_ipv4_init
);