[NETNS][IPV6]: Make mld_max_msf readonly in other namespaces.
[linux-2.6/linux-acpi-2.6/ibm-acpi-2.6.git] / net / ipv6 / sysctl_net_ipv6.c
blobd223159638d34a73f9c2c3c641e6d29501f05e80
1 /*
2 * sysctl_net_ipv6.c: sysctl interface to net IPV6 subsystem.
4 * Changes:
5 * YOSHIFUJI Hideaki @USAGI: added icmp sysctl table.
6 */
8 #include <linux/mm.h>
9 #include <linux/sysctl.h>
10 #include <linux/in6.h>
11 #include <linux/ipv6.h>
12 #include <net/ndisc.h>
13 #include <net/ipv6.h>
14 #include <net/addrconf.h>
15 #include <net/inet_frag.h>
17 extern struct ctl_table *ipv6_route_sysctl_init(struct net *net);
18 extern struct ctl_table *ipv6_icmp_sysctl_init(struct net *net);
20 static ctl_table ipv6_table_template[] = {
22 .ctl_name = NET_IPV6_ROUTE,
23 .procname = "route",
24 .maxlen = 0,
25 .mode = 0555,
26 .child = ipv6_route_table_template
29 .ctl_name = NET_IPV6_ICMP,
30 .procname = "icmp",
31 .maxlen = 0,
32 .mode = 0555,
33 .child = ipv6_icmp_table_template
36 .ctl_name = NET_IPV6_BINDV6ONLY,
37 .procname = "bindv6only",
38 .data = &init_net.ipv6.sysctl.bindv6only,
39 .maxlen = sizeof(int),
40 .mode = 0644,
41 .proc_handler = &proc_dointvec
44 .ctl_name = NET_IPV6_IP6FRAG_HIGH_THRESH,
45 .procname = "ip6frag_high_thresh",
46 .data = &init_net.ipv6.sysctl.frags.high_thresh,
47 .maxlen = sizeof(int),
48 .mode = 0644,
49 .proc_handler = &proc_dointvec
52 .ctl_name = NET_IPV6_IP6FRAG_LOW_THRESH,
53 .procname = "ip6frag_low_thresh",
54 .data = &init_net.ipv6.sysctl.frags.low_thresh,
55 .maxlen = sizeof(int),
56 .mode = 0644,
57 .proc_handler = &proc_dointvec
60 .ctl_name = NET_IPV6_IP6FRAG_TIME,
61 .procname = "ip6frag_time",
62 .data = &init_net.ipv6.sysctl.frags.timeout,
63 .maxlen = sizeof(int),
64 .mode = 0644,
65 .proc_handler = &proc_dointvec_jiffies,
66 .strategy = &sysctl_jiffies,
69 .ctl_name = NET_IPV6_IP6FRAG_SECRET_INTERVAL,
70 .procname = "ip6frag_secret_interval",
71 .data = &init_net.ipv6.sysctl.frags.secret_interval,
72 .maxlen = sizeof(int),
73 .mode = 0644,
74 .proc_handler = &proc_dointvec_jiffies,
75 .strategy = &sysctl_jiffies
78 .ctl_name = NET_IPV6_MLD_MAX_MSF,
79 .procname = "mld_max_msf",
80 .data = &sysctl_mld_max_msf,
81 .maxlen = sizeof(int),
82 .mode = 0644,
83 .proc_handler = &proc_dointvec
85 { .ctl_name = 0 }
88 struct ctl_path net_ipv6_ctl_path[] = {
89 { .procname = "net", .ctl_name = CTL_NET, },
90 { .procname = "ipv6", .ctl_name = NET_IPV6, },
91 { },
93 EXPORT_SYMBOL_GPL(net_ipv6_ctl_path);
95 static int ipv6_sysctl_net_init(struct net *net)
97 struct ctl_table *ipv6_table;
98 struct ctl_table *ipv6_route_table;
99 struct ctl_table *ipv6_icmp_table;
100 int err;
102 err = -ENOMEM;
103 ipv6_table = kmemdup(ipv6_table_template, sizeof(ipv6_table_template),
104 GFP_KERNEL);
105 if (!ipv6_table)
106 goto out;
108 ipv6_route_table = ipv6_route_sysctl_init(net);
109 if (!ipv6_route_table)
110 goto out_ipv6_table;
112 ipv6_icmp_table = ipv6_icmp_sysctl_init(net);
113 if (!ipv6_icmp_table)
114 goto out_ipv6_route_table;
116 ipv6_table[0].child = ipv6_route_table;
117 ipv6_table[1].child = ipv6_icmp_table;
119 ipv6_table[2].data = &net->ipv6.sysctl.bindv6only;
120 ipv6_table[3].data = &net->ipv6.sysctl.frags.high_thresh;
121 ipv6_table[4].data = &net->ipv6.sysctl.frags.low_thresh;
122 ipv6_table[5].data = &net->ipv6.sysctl.frags.timeout;
123 ipv6_table[6].data = &net->ipv6.sysctl.frags.secret_interval;
125 /* We don't want this value to be per namespace, it should be global
126 to all namespaces, so make it read-only when we are not in the
127 init network namespace */
128 if (net != &init_net)
129 ipv6_table[7].mode = 0444;
131 net->ipv6.sysctl.table = register_net_sysctl_table(net, net_ipv6_ctl_path,
132 ipv6_table);
133 if (!net->ipv6.sysctl.table)
134 return -ENOMEM;
136 if (!net->ipv6.sysctl.table)
137 goto out_ipv6_icmp_table;
139 err = 0;
140 out:
141 return err;
143 out_ipv6_icmp_table:
144 kfree(ipv6_icmp_table);
145 out_ipv6_route_table:
146 kfree(ipv6_route_table);
147 out_ipv6_table:
148 kfree(ipv6_table);
149 goto out;
152 static void ipv6_sysctl_net_exit(struct net *net)
154 struct ctl_table *ipv6_table;
155 struct ctl_table *ipv6_route_table;
156 struct ctl_table *ipv6_icmp_table;
158 ipv6_table = net->ipv6.sysctl.table->ctl_table_arg;
159 ipv6_route_table = ipv6_table[0].child;
160 ipv6_icmp_table = ipv6_table[1].child;
162 unregister_net_sysctl_table(net->ipv6.sysctl.table);
164 kfree(ipv6_table);
165 kfree(ipv6_route_table);
166 kfree(ipv6_icmp_table);
169 static struct pernet_operations ipv6_sysctl_net_ops = {
170 .init = ipv6_sysctl_net_init,
171 .exit = ipv6_sysctl_net_exit,
174 int ipv6_sysctl_register(void)
176 return register_pernet_subsys(&ipv6_sysctl_net_ops);
179 void ipv6_sysctl_unregister(void)
181 unregister_pernet_subsys(&ipv6_sysctl_net_ops);