Commit | Line | Data |
---|---|---|
b27aeadb | 1 | #include <linux/sysctl.h> |
5a0e3ad6 | 2 | #include <linux/slab.h> |
b27aeadb AD |
3 | #include <net/net_namespace.h> |
4 | #include <net/xfrm.h> | |
5 | ||
2c8c1e72 | 6 | static void __net_init __xfrm_sysctl_init(struct net *net) |
b27aeadb AD |
7 | { |
8 | net->xfrm.sysctl_aevent_etime = XFRM_AE_ETIME; | |
9 | net->xfrm.sysctl_aevent_rseqth = XFRM_AE_SEQT_SIZE; | |
10 | net->xfrm.sysctl_larval_drop = 1; | |
11 | net->xfrm.sysctl_acq_expires = 30; | |
12 | } | |
13 | ||
14 | #ifdef CONFIG_SYSCTL | |
15 | static struct ctl_table xfrm_table[] = { | |
16 | { | |
b27aeadb AD |
17 | .procname = "xfrm_aevent_etime", |
18 | .maxlen = sizeof(u32), | |
19 | .mode = 0644, | |
20 | .proc_handler = proc_dointvec | |
21 | }, | |
22 | { | |
b27aeadb AD |
23 | .procname = "xfrm_aevent_rseqth", |
24 | .maxlen = sizeof(u32), | |
25 | .mode = 0644, | |
26 | .proc_handler = proc_dointvec | |
27 | }, | |
28 | { | |
b27aeadb AD |
29 | .procname = "xfrm_larval_drop", |
30 | .maxlen = sizeof(int), | |
31 | .mode = 0644, | |
32 | .proc_handler = proc_dointvec | |
33 | }, | |
34 | { | |
b27aeadb AD |
35 | .procname = "xfrm_acq_expires", |
36 | .maxlen = sizeof(int), | |
37 | .mode = 0644, | |
38 | .proc_handler = proc_dointvec | |
39 | }, | |
40 | {} | |
41 | }; | |
42 | ||
43 | int __net_init xfrm_sysctl_init(struct net *net) | |
44 | { | |
45 | struct ctl_table *table; | |
46 | ||
47 | __xfrm_sysctl_init(net); | |
48 | ||
49 | table = kmemdup(xfrm_table, sizeof(xfrm_table), GFP_KERNEL); | |
50 | if (!table) | |
51 | goto out_kmemdup; | |
52 | table[0].data = &net->xfrm.sysctl_aevent_etime; | |
53 | table[1].data = &net->xfrm.sysctl_aevent_rseqth; | |
54 | table[2].data = &net->xfrm.sysctl_larval_drop; | |
55 | table[3].data = &net->xfrm.sysctl_acq_expires; | |
56 | ||
464dc801 EB |
57 | /* Don't export sysctls to unprivileged users */ |
58 | if (net->user_ns != &init_user_ns) | |
59 | table[0].procname = NULL; | |
60 | ||
ec8f23ce | 61 | net->xfrm.sysctl_hdr = register_net_sysctl(net, "net/core", table); |
b27aeadb AD |
62 | if (!net->xfrm.sysctl_hdr) |
63 | goto out_register; | |
64 | return 0; | |
65 | ||
66 | out_register: | |
67 | kfree(table); | |
68 | out_kmemdup: | |
69 | return -ENOMEM; | |
70 | } | |
71 | ||
2c8c1e72 | 72 | void __net_exit xfrm_sysctl_fini(struct net *net) |
b27aeadb AD |
73 | { |
74 | struct ctl_table *table; | |
75 | ||
76 | table = net->xfrm.sysctl_hdr->ctl_table_arg; | |
77 | unregister_net_sysctl_table(net->xfrm.sysctl_hdr); | |
78 | kfree(table); | |
79 | } | |
80 | #else | |
81 | int __net_init xfrm_sysctl_init(struct net *net) | |
82 | { | |
83 | __xfrm_sysctl_init(net); | |
84 | return 0; | |
85 | } | |
86 | #endif |