2 * sysctl_net_ipv4.c: sysctl interface to net IPV4 subsystem.
4 * Begun April 1, 1996, Mike Shaver.
5 * Added /proc/sys/net/ipv4 directory entry (empty =) ). [MS]
9 #include <linux/module.h>
10 #include <linux/sysctl.h>
11 #include <linux/igmp.h>
12 #include <linux/inetdevice.h>
13 #include <linux/seqlock.h>
14 #include <linux/init.h>
15 #include <linux/slab.h>
16 #include <linux/nsproxy.h>
17 #include <linux/swap.h>
21 #include <net/route.h>
24 #include <net/cipso_ipv4.h>
25 #include <net/inet_frag.h>
27 #include <net/tcp_memcontrol.h>
31 static int tcp_retr1_max
= 255;
32 static int ip_local_port_range_min
[] = { 1, 1 };
33 static int ip_local_port_range_max
[] = { 65535, 65535 };
34 static int tcp_adv_win_scale_min
= -31;
35 static int tcp_adv_win_scale_max
= 31;
36 static int ip_ttl_min
= 1;
37 static int ip_ttl_max
= 255;
38 static int ip_ping_group_range_min
[] = { 0, 0 };
39 static int ip_ping_group_range_max
[] = { GID_T_MAX
, GID_T_MAX
};
41 /* Update system visible IP port range */
42 static void set_local_port_range(int range
[2])
44 write_seqlock(&sysctl_local_ports
.lock
);
45 sysctl_local_ports
.range
[0] = range
[0];
46 sysctl_local_ports
.range
[1] = range
[1];
47 write_sequnlock(&sysctl_local_ports
.lock
);
50 /* Validate changes from /proc interface. */
51 static int ipv4_local_port_range(ctl_table
*table
, int write
,
53 size_t *lenp
, loff_t
*ppos
)
59 .maxlen
= sizeof(range
),
61 .extra1
= &ip_local_port_range_min
,
62 .extra2
= &ip_local_port_range_max
,
65 inet_get_local_port_range(range
, range
+ 1);
66 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
68 if (write
&& ret
== 0) {
69 if (range
[1] < range
[0])
72 set_local_port_range(range
);
79 static void inet_get_ping_group_range_table(struct ctl_table
*table
, kgid_t
*low
, kgid_t
*high
)
81 kgid_t
*data
= table
->data
;
84 seq
= read_seqbegin(&sysctl_local_ports
.lock
);
88 } while (read_seqretry(&sysctl_local_ports
.lock
, seq
));
91 /* Update system visible IP port range */
92 static void set_ping_group_range(struct ctl_table
*table
, kgid_t low
, kgid_t high
)
94 kgid_t
*data
= table
->data
;
95 write_seqlock(&sysctl_local_ports
.lock
);
98 write_sequnlock(&sysctl_local_ports
.lock
);
101 /* Validate changes from /proc interface. */
102 static int ipv4_ping_group_range(ctl_table
*table
, int write
,
104 size_t *lenp
, loff_t
*ppos
)
106 struct user_namespace
*user_ns
= current_user_ns();
112 .maxlen
= sizeof(urange
),
114 .extra1
= &ip_ping_group_range_min
,
115 .extra2
= &ip_ping_group_range_max
,
118 inet_get_ping_group_range_table(table
, &low
, &high
);
119 urange
[0] = from_kgid_munged(user_ns
, low
);
120 urange
[1] = from_kgid_munged(user_ns
, high
);
121 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
123 if (write
&& ret
== 0) {
124 low
= make_kgid(user_ns
, urange
[0]);
125 high
= make_kgid(user_ns
, urange
[1]);
126 if (!gid_valid(low
) || !gid_valid(high
) ||
127 (urange
[1] < urange
[0]) || gid_lt(high
, low
)) {
128 low
= make_kgid(&init_user_ns
, 1);
129 high
= make_kgid(&init_user_ns
, 0);
131 set_ping_group_range(table
, low
, high
);
137 static int proc_tcp_congestion_control(ctl_table
*ctl
, int write
,
138 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
140 char val
[TCP_CA_NAME_MAX
];
143 .maxlen
= TCP_CA_NAME_MAX
,
147 tcp_get_default_congestion_control(val
);
149 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
150 if (write
&& ret
== 0)
151 ret
= tcp_set_default_congestion_control(val
);
155 static int proc_tcp_available_congestion_control(ctl_table
*ctl
,
157 void __user
*buffer
, size_t *lenp
,
160 ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
, };
163 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
166 tcp_get_available_congestion_control(tbl
.data
, TCP_CA_BUF_MAX
);
167 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
172 static int proc_allowed_congestion_control(ctl_table
*ctl
,
174 void __user
*buffer
, size_t *lenp
,
177 ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
};
180 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
184 tcp_get_allowed_congestion_control(tbl
.data
, tbl
.maxlen
);
185 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
186 if (write
&& ret
== 0)
187 ret
= tcp_set_allowed_congestion_control(tbl
.data
);
192 static int ipv4_tcp_mem(ctl_table
*ctl
, int write
,
193 void __user
*buffer
, size_t *lenp
,
197 unsigned long vec
[3];
198 struct net
*net
= current
->nsproxy
->net_ns
;
199 #ifdef CONFIG_MEMCG_KMEM
200 struct mem_cgroup
*memcg
;
205 .maxlen
= sizeof(vec
),
210 ctl
->data
= &net
->ipv4
.sysctl_tcp_mem
;
211 return proc_doulongvec_minmax(ctl
, write
, buffer
, lenp
, ppos
);
214 ret
= proc_doulongvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
218 #ifdef CONFIG_MEMCG_KMEM
220 memcg
= mem_cgroup_from_task(current
);
222 tcp_prot_mem(memcg
, vec
[0], 0);
223 tcp_prot_mem(memcg
, vec
[1], 1);
224 tcp_prot_mem(memcg
, vec
[2], 2);
228 net
->ipv4
.sysctl_tcp_mem
[0] = vec
[0];
229 net
->ipv4
.sysctl_tcp_mem
[1] = vec
[1];
230 net
->ipv4
.sysctl_tcp_mem
[2] = vec
[2];
235 int proc_tcp_fastopen_key(ctl_table
*ctl
, int write
, void __user
*buffer
,
236 size_t *lenp
, loff_t
*ppos
)
238 ctl_table tbl
= { .maxlen
= (TCP_FASTOPEN_KEY_LENGTH
* 2 + 10) };
239 struct tcp_fastopen_context
*ctxt
;
241 u32 user_key
[4]; /* 16 bytes, matching TCP_FASTOPEN_KEY_LENGTH */
243 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_KERNEL
);
248 ctxt
= rcu_dereference(tcp_fastopen_ctx
);
250 memcpy(user_key
, ctxt
->key
, TCP_FASTOPEN_KEY_LENGTH
);
253 snprintf(tbl
.data
, tbl
.maxlen
, "%08x-%08x-%08x-%08x",
254 user_key
[0], user_key
[1], user_key
[2], user_key
[3]);
255 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
257 if (write
&& ret
== 0) {
258 if (sscanf(tbl
.data
, "%x-%x-%x-%x", user_key
, user_key
+ 1,
259 user_key
+ 2, user_key
+ 3) != 4) {
263 tcp_fastopen_reset_cipher(user_key
, TCP_FASTOPEN_KEY_LENGTH
);
267 pr_debug("proc FO key set 0x%x-%x-%x-%x <- 0x%s: %u\n",
268 user_key
[0], user_key
[1], user_key
[2], user_key
[3],
269 (char *)tbl
.data
, ret
);
274 static struct ctl_table ipv4_table
[] = {
276 .procname
= "tcp_timestamps",
277 .data
= &sysctl_tcp_timestamps
,
278 .maxlen
= sizeof(int),
280 .proc_handler
= proc_dointvec
283 .procname
= "tcp_window_scaling",
284 .data
= &sysctl_tcp_window_scaling
,
285 .maxlen
= sizeof(int),
287 .proc_handler
= proc_dointvec
290 .procname
= "tcp_sack",
291 .data
= &sysctl_tcp_sack
,
292 .maxlen
= sizeof(int),
294 .proc_handler
= proc_dointvec
297 .procname
= "tcp_retrans_collapse",
298 .data
= &sysctl_tcp_retrans_collapse
,
299 .maxlen
= sizeof(int),
301 .proc_handler
= proc_dointvec
304 .procname
= "ip_default_ttl",
305 .data
= &sysctl_ip_default_ttl
,
306 .maxlen
= sizeof(int),
308 .proc_handler
= proc_dointvec_minmax
,
309 .extra1
= &ip_ttl_min
,
310 .extra2
= &ip_ttl_max
,
313 .procname
= "ip_no_pmtu_disc",
314 .data
= &ipv4_config
.no_pmtu_disc
,
315 .maxlen
= sizeof(int),
317 .proc_handler
= proc_dointvec
320 .procname
= "ip_nonlocal_bind",
321 .data
= &sysctl_ip_nonlocal_bind
,
322 .maxlen
= sizeof(int),
324 .proc_handler
= proc_dointvec
327 .procname
= "tcp_syn_retries",
328 .data
= &sysctl_tcp_syn_retries
,
329 .maxlen
= sizeof(int),
331 .proc_handler
= proc_dointvec
334 .procname
= "tcp_synack_retries",
335 .data
= &sysctl_tcp_synack_retries
,
336 .maxlen
= sizeof(int),
338 .proc_handler
= proc_dointvec
341 .procname
= "tcp_max_orphans",
342 .data
= &sysctl_tcp_max_orphans
,
343 .maxlen
= sizeof(int),
345 .proc_handler
= proc_dointvec
348 .procname
= "tcp_max_tw_buckets",
349 .data
= &tcp_death_row
.sysctl_max_tw_buckets
,
350 .maxlen
= sizeof(int),
352 .proc_handler
= proc_dointvec
355 .procname
= "ip_early_demux",
356 .data
= &sysctl_ip_early_demux
,
357 .maxlen
= sizeof(int),
359 .proc_handler
= proc_dointvec
362 .procname
= "ip_dynaddr",
363 .data
= &sysctl_ip_dynaddr
,
364 .maxlen
= sizeof(int),
366 .proc_handler
= proc_dointvec
369 .procname
= "tcp_keepalive_time",
370 .data
= &sysctl_tcp_keepalive_time
,
371 .maxlen
= sizeof(int),
373 .proc_handler
= proc_dointvec_jiffies
,
376 .procname
= "tcp_keepalive_probes",
377 .data
= &sysctl_tcp_keepalive_probes
,
378 .maxlen
= sizeof(int),
380 .proc_handler
= proc_dointvec
383 .procname
= "tcp_keepalive_intvl",
384 .data
= &sysctl_tcp_keepalive_intvl
,
385 .maxlen
= sizeof(int),
387 .proc_handler
= proc_dointvec_jiffies
,
390 .procname
= "tcp_retries1",
391 .data
= &sysctl_tcp_retries1
,
392 .maxlen
= sizeof(int),
394 .proc_handler
= proc_dointvec_minmax
,
395 .extra2
= &tcp_retr1_max
398 .procname
= "tcp_retries2",
399 .data
= &sysctl_tcp_retries2
,
400 .maxlen
= sizeof(int),
402 .proc_handler
= proc_dointvec
405 .procname
= "tcp_fin_timeout",
406 .data
= &sysctl_tcp_fin_timeout
,
407 .maxlen
= sizeof(int),
409 .proc_handler
= proc_dointvec_jiffies
,
411 #ifdef CONFIG_SYN_COOKIES
413 .procname
= "tcp_syncookies",
414 .data
= &sysctl_tcp_syncookies
,
415 .maxlen
= sizeof(int),
417 .proc_handler
= proc_dointvec
421 .procname
= "tcp_fastopen",
422 .data
= &sysctl_tcp_fastopen
,
423 .maxlen
= sizeof(int),
425 .proc_handler
= proc_dointvec
,
428 .procname
= "tcp_fastopen_key",
430 .maxlen
= ((TCP_FASTOPEN_KEY_LENGTH
* 2) + 10),
431 .proc_handler
= proc_tcp_fastopen_key
,
434 .procname
= "tcp_tw_recycle",
435 .data
= &tcp_death_row
.sysctl_tw_recycle
,
436 .maxlen
= sizeof(int),
438 .proc_handler
= proc_dointvec
441 .procname
= "tcp_abort_on_overflow",
442 .data
= &sysctl_tcp_abort_on_overflow
,
443 .maxlen
= sizeof(int),
445 .proc_handler
= proc_dointvec
448 .procname
= "tcp_stdurg",
449 .data
= &sysctl_tcp_stdurg
,
450 .maxlen
= sizeof(int),
452 .proc_handler
= proc_dointvec
455 .procname
= "tcp_rfc1337",
456 .data
= &sysctl_tcp_rfc1337
,
457 .maxlen
= sizeof(int),
459 .proc_handler
= proc_dointvec
462 .procname
= "tcp_max_syn_backlog",
463 .data
= &sysctl_max_syn_backlog
,
464 .maxlen
= sizeof(int),
466 .proc_handler
= proc_dointvec
469 .procname
= "ip_local_port_range",
470 .data
= &sysctl_local_ports
.range
,
471 .maxlen
= sizeof(sysctl_local_ports
.range
),
473 .proc_handler
= ipv4_local_port_range
,
476 .procname
= "ip_local_reserved_ports",
477 .data
= NULL
, /* initialized in sysctl_ipv4_init */
480 .proc_handler
= proc_do_large_bitmap
,
483 .procname
= "igmp_max_memberships",
484 .data
= &sysctl_igmp_max_memberships
,
485 .maxlen
= sizeof(int),
487 .proc_handler
= proc_dointvec
490 .procname
= "igmp_max_msf",
491 .data
= &sysctl_igmp_max_msf
,
492 .maxlen
= sizeof(int),
494 .proc_handler
= proc_dointvec
497 .procname
= "inet_peer_threshold",
498 .data
= &inet_peer_threshold
,
499 .maxlen
= sizeof(int),
501 .proc_handler
= proc_dointvec
504 .procname
= "inet_peer_minttl",
505 .data
= &inet_peer_minttl
,
506 .maxlen
= sizeof(int),
508 .proc_handler
= proc_dointvec_jiffies
,
511 .procname
= "inet_peer_maxttl",
512 .data
= &inet_peer_maxttl
,
513 .maxlen
= sizeof(int),
515 .proc_handler
= proc_dointvec_jiffies
,
518 .procname
= "tcp_orphan_retries",
519 .data
= &sysctl_tcp_orphan_retries
,
520 .maxlen
= sizeof(int),
522 .proc_handler
= proc_dointvec
525 .procname
= "tcp_fack",
526 .data
= &sysctl_tcp_fack
,
527 .maxlen
= sizeof(int),
529 .proc_handler
= proc_dointvec
532 .procname
= "tcp_reordering",
533 .data
= &sysctl_tcp_reordering
,
534 .maxlen
= sizeof(int),
536 .proc_handler
= proc_dointvec
539 .procname
= "tcp_ecn",
540 .data
= &sysctl_tcp_ecn
,
541 .maxlen
= sizeof(int),
543 .proc_handler
= proc_dointvec
546 .procname
= "tcp_dsack",
547 .data
= &sysctl_tcp_dsack
,
548 .maxlen
= sizeof(int),
550 .proc_handler
= proc_dointvec
553 .procname
= "tcp_wmem",
554 .data
= &sysctl_tcp_wmem
,
555 .maxlen
= sizeof(sysctl_tcp_wmem
),
557 .proc_handler
= proc_dointvec
560 .procname
= "tcp_rmem",
561 .data
= &sysctl_tcp_rmem
,
562 .maxlen
= sizeof(sysctl_tcp_rmem
),
564 .proc_handler
= proc_dointvec
567 .procname
= "tcp_app_win",
568 .data
= &sysctl_tcp_app_win
,
569 .maxlen
= sizeof(int),
571 .proc_handler
= proc_dointvec
574 .procname
= "tcp_adv_win_scale",
575 .data
= &sysctl_tcp_adv_win_scale
,
576 .maxlen
= sizeof(int),
578 .proc_handler
= proc_dointvec_minmax
,
579 .extra1
= &tcp_adv_win_scale_min
,
580 .extra2
= &tcp_adv_win_scale_max
,
583 .procname
= "tcp_tw_reuse",
584 .data
= &sysctl_tcp_tw_reuse
,
585 .maxlen
= sizeof(int),
587 .proc_handler
= proc_dointvec
590 .procname
= "tcp_frto",
591 .data
= &sysctl_tcp_frto
,
592 .maxlen
= sizeof(int),
594 .proc_handler
= proc_dointvec
597 .procname
= "tcp_frto_response",
598 .data
= &sysctl_tcp_frto_response
,
599 .maxlen
= sizeof(int),
601 .proc_handler
= proc_dointvec
604 .procname
= "tcp_low_latency",
605 .data
= &sysctl_tcp_low_latency
,
606 .maxlen
= sizeof(int),
608 .proc_handler
= proc_dointvec
611 .procname
= "tcp_no_metrics_save",
612 .data
= &sysctl_tcp_nometrics_save
,
613 .maxlen
= sizeof(int),
615 .proc_handler
= proc_dointvec
,
618 .procname
= "tcp_moderate_rcvbuf",
619 .data
= &sysctl_tcp_moderate_rcvbuf
,
620 .maxlen
= sizeof(int),
622 .proc_handler
= proc_dointvec
,
625 .procname
= "tcp_tso_win_divisor",
626 .data
= &sysctl_tcp_tso_win_divisor
,
627 .maxlen
= sizeof(int),
629 .proc_handler
= proc_dointvec
,
632 .procname
= "tcp_congestion_control",
634 .maxlen
= TCP_CA_NAME_MAX
,
635 .proc_handler
= proc_tcp_congestion_control
,
638 .procname
= "tcp_abc",
639 .data
= &sysctl_tcp_abc
,
640 .maxlen
= sizeof(int),
642 .proc_handler
= proc_dointvec
,
645 .procname
= "tcp_mtu_probing",
646 .data
= &sysctl_tcp_mtu_probing
,
647 .maxlen
= sizeof(int),
649 .proc_handler
= proc_dointvec
,
652 .procname
= "tcp_base_mss",
653 .data
= &sysctl_tcp_base_mss
,
654 .maxlen
= sizeof(int),
656 .proc_handler
= proc_dointvec
,
659 .procname
= "tcp_workaround_signed_windows",
660 .data
= &sysctl_tcp_workaround_signed_windows
,
661 .maxlen
= sizeof(int),
663 .proc_handler
= proc_dointvec
666 .procname
= "tcp_limit_output_bytes",
667 .data
= &sysctl_tcp_limit_output_bytes
,
668 .maxlen
= sizeof(int),
670 .proc_handler
= proc_dointvec
673 .procname
= "tcp_challenge_ack_limit",
674 .data
= &sysctl_tcp_challenge_ack_limit
,
675 .maxlen
= sizeof(int),
677 .proc_handler
= proc_dointvec
679 #ifdef CONFIG_NET_DMA
681 .procname
= "tcp_dma_copybreak",
682 .data
= &sysctl_tcp_dma_copybreak
,
683 .maxlen
= sizeof(int),
685 .proc_handler
= proc_dointvec
689 .procname
= "tcp_slow_start_after_idle",
690 .data
= &sysctl_tcp_slow_start_after_idle
,
691 .maxlen
= sizeof(int),
693 .proc_handler
= proc_dointvec
695 #ifdef CONFIG_NETLABEL
697 .procname
= "cipso_cache_enable",
698 .data
= &cipso_v4_cache_enabled
,
699 .maxlen
= sizeof(int),
701 .proc_handler
= proc_dointvec
,
704 .procname
= "cipso_cache_bucket_size",
705 .data
= &cipso_v4_cache_bucketsize
,
706 .maxlen
= sizeof(int),
708 .proc_handler
= proc_dointvec
,
711 .procname
= "cipso_rbm_optfmt",
712 .data
= &cipso_v4_rbm_optfmt
,
713 .maxlen
= sizeof(int),
715 .proc_handler
= proc_dointvec
,
718 .procname
= "cipso_rbm_strictvalid",
719 .data
= &cipso_v4_rbm_strictvalid
,
720 .maxlen
= sizeof(int),
722 .proc_handler
= proc_dointvec
,
724 #endif /* CONFIG_NETLABEL */
726 .procname
= "tcp_available_congestion_control",
727 .maxlen
= TCP_CA_BUF_MAX
,
729 .proc_handler
= proc_tcp_available_congestion_control
,
732 .procname
= "tcp_allowed_congestion_control",
733 .maxlen
= TCP_CA_BUF_MAX
,
735 .proc_handler
= proc_allowed_congestion_control
,
738 .procname
= "tcp_max_ssthresh",
739 .data
= &sysctl_tcp_max_ssthresh
,
740 .maxlen
= sizeof(int),
742 .proc_handler
= proc_dointvec
,
745 .procname
= "tcp_cookie_size",
746 .data
= &sysctl_tcp_cookie_size
,
747 .maxlen
= sizeof(int),
749 .proc_handler
= proc_dointvec
752 .procname
= "tcp_thin_linear_timeouts",
753 .data
= &sysctl_tcp_thin_linear_timeouts
,
754 .maxlen
= sizeof(int),
756 .proc_handler
= proc_dointvec
759 .procname
= "tcp_thin_dupack",
760 .data
= &sysctl_tcp_thin_dupack
,
761 .maxlen
= sizeof(int),
763 .proc_handler
= proc_dointvec
766 .procname
= "tcp_early_retrans",
767 .data
= &sysctl_tcp_early_retrans
,
768 .maxlen
= sizeof(int),
770 .proc_handler
= proc_dointvec_minmax
,
775 .procname
= "udp_mem",
776 .data
= &sysctl_udp_mem
,
777 .maxlen
= sizeof(sysctl_udp_mem
),
779 .proc_handler
= proc_doulongvec_minmax
,
782 .procname
= "udp_rmem_min",
783 .data
= &sysctl_udp_rmem_min
,
784 .maxlen
= sizeof(sysctl_udp_rmem_min
),
786 .proc_handler
= proc_dointvec_minmax
,
790 .procname
= "udp_wmem_min",
791 .data
= &sysctl_udp_wmem_min
,
792 .maxlen
= sizeof(sysctl_udp_wmem_min
),
794 .proc_handler
= proc_dointvec_minmax
,
800 static struct ctl_table ipv4_net_table
[] = {
802 .procname
= "icmp_echo_ignore_all",
803 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_all
,
804 .maxlen
= sizeof(int),
806 .proc_handler
= proc_dointvec
809 .procname
= "icmp_echo_ignore_broadcasts",
810 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_broadcasts
,
811 .maxlen
= sizeof(int),
813 .proc_handler
= proc_dointvec
816 .procname
= "icmp_ignore_bogus_error_responses",
817 .data
= &init_net
.ipv4
.sysctl_icmp_ignore_bogus_error_responses
,
818 .maxlen
= sizeof(int),
820 .proc_handler
= proc_dointvec
823 .procname
= "icmp_errors_use_inbound_ifaddr",
824 .data
= &init_net
.ipv4
.sysctl_icmp_errors_use_inbound_ifaddr
,
825 .maxlen
= sizeof(int),
827 .proc_handler
= proc_dointvec
830 .procname
= "icmp_ratelimit",
831 .data
= &init_net
.ipv4
.sysctl_icmp_ratelimit
,
832 .maxlen
= sizeof(int),
834 .proc_handler
= proc_dointvec_ms_jiffies
,
837 .procname
= "icmp_ratemask",
838 .data
= &init_net
.ipv4
.sysctl_icmp_ratemask
,
839 .maxlen
= sizeof(int),
841 .proc_handler
= proc_dointvec
844 .procname
= "ping_group_range",
845 .data
= &init_net
.ipv4
.sysctl_ping_group_range
,
846 .maxlen
= sizeof(gid_t
)*2,
848 .proc_handler
= ipv4_ping_group_range
,
851 .procname
= "tcp_mem",
852 .maxlen
= sizeof(init_net
.ipv4
.sysctl_tcp_mem
),
854 .proc_handler
= ipv4_tcp_mem
,
859 static __net_init
int ipv4_sysctl_init_net(struct net
*net
)
861 struct ctl_table
*table
;
863 table
= ipv4_net_table
;
864 if (!net_eq(net
, &init_net
)) {
865 table
= kmemdup(table
, sizeof(ipv4_net_table
), GFP_KERNEL
);
870 &net
->ipv4
.sysctl_icmp_echo_ignore_all
;
872 &net
->ipv4
.sysctl_icmp_echo_ignore_broadcasts
;
874 &net
->ipv4
.sysctl_icmp_ignore_bogus_error_responses
;
876 &net
->ipv4
.sysctl_icmp_errors_use_inbound_ifaddr
;
878 &net
->ipv4
.sysctl_icmp_ratelimit
;
880 &net
->ipv4
.sysctl_icmp_ratemask
;
882 &net
->ipv4
.sysctl_ping_group_range
;
887 * Sane defaults - nobody may create ping sockets.
888 * Boot scripts should set this to distro-specific group.
890 net
->ipv4
.sysctl_ping_group_range
[0] = make_kgid(&init_user_ns
, 1);
891 net
->ipv4
.sysctl_ping_group_range
[1] = make_kgid(&init_user_ns
, 0);
895 net
->ipv4
.ipv4_hdr
= register_net_sysctl(net
, "net/ipv4", table
);
896 if (net
->ipv4
.ipv4_hdr
== NULL
)
902 if (!net_eq(net
, &init_net
))
908 static __net_exit
void ipv4_sysctl_exit_net(struct net
*net
)
910 struct ctl_table
*table
;
912 table
= net
->ipv4
.ipv4_hdr
->ctl_table_arg
;
913 unregister_net_sysctl_table(net
->ipv4
.ipv4_hdr
);
917 static __net_initdata
struct pernet_operations ipv4_sysctl_ops
= {
918 .init
= ipv4_sysctl_init_net
,
919 .exit
= ipv4_sysctl_exit_net
,
922 static __init
int sysctl_ipv4_init(void)
924 struct ctl_table_header
*hdr
;
927 for (i
= ipv4_table
; i
->procname
; i
++) {
928 if (strcmp(i
->procname
, "ip_local_reserved_ports") == 0) {
929 i
->data
= sysctl_local_reserved_ports
;
936 hdr
= register_net_sysctl(&init_net
, "net/ipv4", ipv4_table
);
940 if (register_pernet_subsys(&ipv4_sysctl_ops
)) {
941 unregister_net_sysctl_table(hdr
);
948 __initcall(sysctl_ipv4_init
);