2 * sysctl_net_ipv4.c: sysctl interface to net IPV4 subsystem.
4 * Begun April 1, 1996, Mike Shaver.
5 * Added /proc/sys/net/ipv4 directory entry (empty =) ). [MS]
9 #include <linux/module.h>
10 #include <linux/sysctl.h>
11 #include <linux/igmp.h>
12 #include <linux/inetdevice.h>
13 #include <linux/seqlock.h>
14 #include <linux/init.h>
15 #include <linux/slab.h>
16 #include <linux/nsproxy.h>
17 #include <linux/swap.h>
21 #include <net/route.h>
24 #include <net/cipso_ipv4.h>
25 #include <net/inet_frag.h>
27 #include <net/tcp_memcontrol.h>
32 static int tcp_retr1_max
= 255;
33 static int ip_local_port_range_min
[] = { 1, 1 };
34 static int ip_local_port_range_max
[] = { 65535, 65535 };
35 static int tcp_adv_win_scale_min
= -31;
36 static int tcp_adv_win_scale_max
= 31;
37 static int ip_ttl_min
= 1;
38 static int ip_ttl_max
= 255;
39 static int tcp_syn_retries_min
= 1;
40 static int tcp_syn_retries_max
= MAX_TCP_SYNCNT
;
41 static int ip_ping_group_range_min
[] = { 0, 0 };
42 static int ip_ping_group_range_max
[] = { GID_T_MAX
, GID_T_MAX
};
44 /* Update system visible IP port range */
45 static void set_local_port_range(int range
[2])
47 write_seqlock(&sysctl_local_ports
.lock
);
48 sysctl_local_ports
.range
[0] = range
[0];
49 sysctl_local_ports
.range
[1] = range
[1];
50 write_sequnlock(&sysctl_local_ports
.lock
);
53 /* Validate changes from /proc interface. */
54 static int ipv4_local_port_range(struct ctl_table
*table
, int write
,
56 size_t *lenp
, loff_t
*ppos
)
60 struct ctl_table tmp
= {
62 .maxlen
= sizeof(range
),
64 .extra1
= &ip_local_port_range_min
,
65 .extra2
= &ip_local_port_range_max
,
68 inet_get_local_port_range(range
, range
+ 1);
69 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
71 if (write
&& ret
== 0) {
72 if (range
[1] < range
[0])
75 set_local_port_range(range
);
82 static void inet_get_ping_group_range_table(struct ctl_table
*table
, kgid_t
*low
, kgid_t
*high
)
84 kgid_t
*data
= table
->data
;
87 seq
= read_seqbegin(&sysctl_local_ports
.lock
);
91 } while (read_seqretry(&sysctl_local_ports
.lock
, seq
));
94 /* Update system visible IP port range */
95 static void set_ping_group_range(struct ctl_table
*table
, kgid_t low
, kgid_t high
)
97 kgid_t
*data
= table
->data
;
98 write_seqlock(&sysctl_local_ports
.lock
);
101 write_sequnlock(&sysctl_local_ports
.lock
);
104 /* Validate changes from /proc interface. */
105 static int ipv4_ping_group_range(struct ctl_table
*table
, int write
,
107 size_t *lenp
, loff_t
*ppos
)
109 struct user_namespace
*user_ns
= current_user_ns();
113 struct ctl_table tmp
= {
115 .maxlen
= sizeof(urange
),
117 .extra1
= &ip_ping_group_range_min
,
118 .extra2
= &ip_ping_group_range_max
,
121 inet_get_ping_group_range_table(table
, &low
, &high
);
122 urange
[0] = from_kgid_munged(user_ns
, low
);
123 urange
[1] = from_kgid_munged(user_ns
, high
);
124 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
126 if (write
&& ret
== 0) {
127 low
= make_kgid(user_ns
, urange
[0]);
128 high
= make_kgid(user_ns
, urange
[1]);
129 if (!gid_valid(low
) || !gid_valid(high
) ||
130 (urange
[1] < urange
[0]) || gid_lt(high
, low
)) {
131 low
= make_kgid(&init_user_ns
, 1);
132 high
= make_kgid(&init_user_ns
, 0);
134 set_ping_group_range(table
, low
, high
);
140 static int proc_tcp_congestion_control(struct ctl_table
*ctl
, int write
,
141 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
143 char val
[TCP_CA_NAME_MAX
];
144 struct ctl_table tbl
= {
146 .maxlen
= TCP_CA_NAME_MAX
,
150 tcp_get_default_congestion_control(val
);
152 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
153 if (write
&& ret
== 0)
154 ret
= tcp_set_default_congestion_control(val
);
158 static int proc_tcp_available_congestion_control(struct ctl_table
*ctl
,
160 void __user
*buffer
, size_t *lenp
,
163 struct ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
, };
166 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
169 tcp_get_available_congestion_control(tbl
.data
, TCP_CA_BUF_MAX
);
170 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
175 static int proc_allowed_congestion_control(struct ctl_table
*ctl
,
177 void __user
*buffer
, size_t *lenp
,
180 struct ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
};
183 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
187 tcp_get_allowed_congestion_control(tbl
.data
, tbl
.maxlen
);
188 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
189 if (write
&& ret
== 0)
190 ret
= tcp_set_allowed_congestion_control(tbl
.data
);
195 static int ipv4_tcp_mem(struct ctl_table
*ctl
, int write
,
196 void __user
*buffer
, size_t *lenp
,
200 unsigned long vec
[3];
201 struct net
*net
= current
->nsproxy
->net_ns
;
202 #ifdef CONFIG_MEMCG_KMEM
203 struct mem_cgroup
*memcg
;
206 struct ctl_table tmp
= {
208 .maxlen
= sizeof(vec
),
213 ctl
->data
= &net
->ipv4
.sysctl_tcp_mem
;
214 return proc_doulongvec_minmax(ctl
, write
, buffer
, lenp
, ppos
);
217 ret
= proc_doulongvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
221 #ifdef CONFIG_MEMCG_KMEM
223 memcg
= mem_cgroup_from_task(current
);
225 tcp_prot_mem(memcg
, vec
[0], 0);
226 tcp_prot_mem(memcg
, vec
[1], 1);
227 tcp_prot_mem(memcg
, vec
[2], 2);
231 net
->ipv4
.sysctl_tcp_mem
[0] = vec
[0];
232 net
->ipv4
.sysctl_tcp_mem
[1] = vec
[1];
233 net
->ipv4
.sysctl_tcp_mem
[2] = vec
[2];
238 static int proc_tcp_fastopen_key(struct ctl_table
*ctl
, int write
,
239 void __user
*buffer
, size_t *lenp
,
242 struct ctl_table tbl
= { .maxlen
= (TCP_FASTOPEN_KEY_LENGTH
* 2 + 10) };
243 struct tcp_fastopen_context
*ctxt
;
245 u32 user_key
[4]; /* 16 bytes, matching TCP_FASTOPEN_KEY_LENGTH */
247 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_KERNEL
);
252 ctxt
= rcu_dereference(tcp_fastopen_ctx
);
254 memcpy(user_key
, ctxt
->key
, TCP_FASTOPEN_KEY_LENGTH
);
256 memset(user_key
, 0, sizeof(user_key
));
259 snprintf(tbl
.data
, tbl
.maxlen
, "%08x-%08x-%08x-%08x",
260 user_key
[0], user_key
[1], user_key
[2], user_key
[3]);
261 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
263 if (write
&& ret
== 0) {
264 if (sscanf(tbl
.data
, "%x-%x-%x-%x", user_key
, user_key
+ 1,
265 user_key
+ 2, user_key
+ 3) != 4) {
269 tcp_fastopen_reset_cipher(user_key
, TCP_FASTOPEN_KEY_LENGTH
);
273 pr_debug("proc FO key set 0x%x-%x-%x-%x <- 0x%s: %u\n",
274 user_key
[0], user_key
[1], user_key
[2], user_key
[3],
275 (char *)tbl
.data
, ret
);
280 static struct ctl_table ipv4_table
[] = {
282 .procname
= "tcp_timestamps",
283 .data
= &sysctl_tcp_timestamps
,
284 .maxlen
= sizeof(int),
286 .proc_handler
= proc_dointvec
289 .procname
= "tcp_window_scaling",
290 .data
= &sysctl_tcp_window_scaling
,
291 .maxlen
= sizeof(int),
293 .proc_handler
= proc_dointvec
296 .procname
= "tcp_sack",
297 .data
= &sysctl_tcp_sack
,
298 .maxlen
= sizeof(int),
300 .proc_handler
= proc_dointvec
303 .procname
= "tcp_retrans_collapse",
304 .data
= &sysctl_tcp_retrans_collapse
,
305 .maxlen
= sizeof(int),
307 .proc_handler
= proc_dointvec
310 .procname
= "ip_default_ttl",
311 .data
= &sysctl_ip_default_ttl
,
312 .maxlen
= sizeof(int),
314 .proc_handler
= proc_dointvec_minmax
,
315 .extra1
= &ip_ttl_min
,
316 .extra2
= &ip_ttl_max
,
319 .procname
= "ip_no_pmtu_disc",
320 .data
= &ipv4_config
.no_pmtu_disc
,
321 .maxlen
= sizeof(int),
323 .proc_handler
= proc_dointvec
326 .procname
= "ip_nonlocal_bind",
327 .data
= &sysctl_ip_nonlocal_bind
,
328 .maxlen
= sizeof(int),
330 .proc_handler
= proc_dointvec
333 .procname
= "tcp_syn_retries",
334 .data
= &sysctl_tcp_syn_retries
,
335 .maxlen
= sizeof(int),
337 .proc_handler
= proc_dointvec_minmax
,
338 .extra1
= &tcp_syn_retries_min
,
339 .extra2
= &tcp_syn_retries_max
342 .procname
= "tcp_synack_retries",
343 .data
= &sysctl_tcp_synack_retries
,
344 .maxlen
= sizeof(int),
346 .proc_handler
= proc_dointvec
349 .procname
= "tcp_max_orphans",
350 .data
= &sysctl_tcp_max_orphans
,
351 .maxlen
= sizeof(int),
353 .proc_handler
= proc_dointvec
356 .procname
= "tcp_max_tw_buckets",
357 .data
= &tcp_death_row
.sysctl_max_tw_buckets
,
358 .maxlen
= sizeof(int),
360 .proc_handler
= proc_dointvec
363 .procname
= "ip_early_demux",
364 .data
= &sysctl_ip_early_demux
,
365 .maxlen
= sizeof(int),
367 .proc_handler
= proc_dointvec
370 .procname
= "ip_dynaddr",
371 .data
= &sysctl_ip_dynaddr
,
372 .maxlen
= sizeof(int),
374 .proc_handler
= proc_dointvec
377 .procname
= "tcp_keepalive_time",
378 .data
= &sysctl_tcp_keepalive_time
,
379 .maxlen
= sizeof(int),
381 .proc_handler
= proc_dointvec_jiffies
,
384 .procname
= "tcp_keepalive_probes",
385 .data
= &sysctl_tcp_keepalive_probes
,
386 .maxlen
= sizeof(int),
388 .proc_handler
= proc_dointvec
391 .procname
= "tcp_keepalive_intvl",
392 .data
= &sysctl_tcp_keepalive_intvl
,
393 .maxlen
= sizeof(int),
395 .proc_handler
= proc_dointvec_jiffies
,
398 .procname
= "tcp_retries1",
399 .data
= &sysctl_tcp_retries1
,
400 .maxlen
= sizeof(int),
402 .proc_handler
= proc_dointvec_minmax
,
403 .extra2
= &tcp_retr1_max
406 .procname
= "tcp_retries2",
407 .data
= &sysctl_tcp_retries2
,
408 .maxlen
= sizeof(int),
410 .proc_handler
= proc_dointvec
413 .procname
= "tcp_fin_timeout",
414 .data
= &sysctl_tcp_fin_timeout
,
415 .maxlen
= sizeof(int),
417 .proc_handler
= proc_dointvec_jiffies
,
419 #ifdef CONFIG_SYN_COOKIES
421 .procname
= "tcp_syncookies",
422 .data
= &sysctl_tcp_syncookies
,
423 .maxlen
= sizeof(int),
425 .proc_handler
= proc_dointvec
429 .procname
= "tcp_fastopen",
430 .data
= &sysctl_tcp_fastopen
,
431 .maxlen
= sizeof(int),
433 .proc_handler
= proc_dointvec
,
436 .procname
= "tcp_fastopen_key",
438 .maxlen
= ((TCP_FASTOPEN_KEY_LENGTH
* 2) + 10),
439 .proc_handler
= proc_tcp_fastopen_key
,
442 .procname
= "tcp_tw_recycle",
443 .data
= &tcp_death_row
.sysctl_tw_recycle
,
444 .maxlen
= sizeof(int),
446 .proc_handler
= proc_dointvec
449 .procname
= "tcp_abort_on_overflow",
450 .data
= &sysctl_tcp_abort_on_overflow
,
451 .maxlen
= sizeof(int),
453 .proc_handler
= proc_dointvec
456 .procname
= "tcp_stdurg",
457 .data
= &sysctl_tcp_stdurg
,
458 .maxlen
= sizeof(int),
460 .proc_handler
= proc_dointvec
463 .procname
= "tcp_rfc1337",
464 .data
= &sysctl_tcp_rfc1337
,
465 .maxlen
= sizeof(int),
467 .proc_handler
= proc_dointvec
470 .procname
= "tcp_max_syn_backlog",
471 .data
= &sysctl_max_syn_backlog
,
472 .maxlen
= sizeof(int),
474 .proc_handler
= proc_dointvec
477 .procname
= "ip_local_port_range",
478 .data
= &sysctl_local_ports
.range
,
479 .maxlen
= sizeof(sysctl_local_ports
.range
),
481 .proc_handler
= ipv4_local_port_range
,
484 .procname
= "ip_local_reserved_ports",
485 .data
= NULL
, /* initialized in sysctl_ipv4_init */
488 .proc_handler
= proc_do_large_bitmap
,
491 .procname
= "igmp_max_memberships",
492 .data
= &sysctl_igmp_max_memberships
,
493 .maxlen
= sizeof(int),
495 .proc_handler
= proc_dointvec
498 .procname
= "igmp_max_msf",
499 .data
= &sysctl_igmp_max_msf
,
500 .maxlen
= sizeof(int),
502 .proc_handler
= proc_dointvec
505 .procname
= "inet_peer_threshold",
506 .data
= &inet_peer_threshold
,
507 .maxlen
= sizeof(int),
509 .proc_handler
= proc_dointvec
512 .procname
= "inet_peer_minttl",
513 .data
= &inet_peer_minttl
,
514 .maxlen
= sizeof(int),
516 .proc_handler
= proc_dointvec_jiffies
,
519 .procname
= "inet_peer_maxttl",
520 .data
= &inet_peer_maxttl
,
521 .maxlen
= sizeof(int),
523 .proc_handler
= proc_dointvec_jiffies
,
526 .procname
= "tcp_orphan_retries",
527 .data
= &sysctl_tcp_orphan_retries
,
528 .maxlen
= sizeof(int),
530 .proc_handler
= proc_dointvec
533 .procname
= "tcp_fack",
534 .data
= &sysctl_tcp_fack
,
535 .maxlen
= sizeof(int),
537 .proc_handler
= proc_dointvec
540 .procname
= "tcp_reordering",
541 .data
= &sysctl_tcp_reordering
,
542 .maxlen
= sizeof(int),
544 .proc_handler
= proc_dointvec
547 .procname
= "tcp_dsack",
548 .data
= &sysctl_tcp_dsack
,
549 .maxlen
= sizeof(int),
551 .proc_handler
= proc_dointvec
554 .procname
= "tcp_wmem",
555 .data
= &sysctl_tcp_wmem
,
556 .maxlen
= sizeof(sysctl_tcp_wmem
),
558 .proc_handler
= proc_dointvec_minmax
,
562 .procname
= "tcp_rmem",
563 .data
= &sysctl_tcp_rmem
,
564 .maxlen
= sizeof(sysctl_tcp_rmem
),
566 .proc_handler
= proc_dointvec_minmax
,
570 .procname
= "tcp_app_win",
571 .data
= &sysctl_tcp_app_win
,
572 .maxlen
= sizeof(int),
574 .proc_handler
= proc_dointvec
577 .procname
= "tcp_adv_win_scale",
578 .data
= &sysctl_tcp_adv_win_scale
,
579 .maxlen
= sizeof(int),
581 .proc_handler
= proc_dointvec_minmax
,
582 .extra1
= &tcp_adv_win_scale_min
,
583 .extra2
= &tcp_adv_win_scale_max
,
586 .procname
= "tcp_tw_reuse",
587 .data
= &sysctl_tcp_tw_reuse
,
588 .maxlen
= sizeof(int),
590 .proc_handler
= proc_dointvec
593 .procname
= "tcp_frto",
594 .data
= &sysctl_tcp_frto
,
595 .maxlen
= sizeof(int),
597 .proc_handler
= proc_dointvec
600 .procname
= "tcp_low_latency",
601 .data
= &sysctl_tcp_low_latency
,
602 .maxlen
= sizeof(int),
604 .proc_handler
= proc_dointvec
607 .procname
= "tcp_no_metrics_save",
608 .data
= &sysctl_tcp_nometrics_save
,
609 .maxlen
= sizeof(int),
611 .proc_handler
= proc_dointvec
,
614 .procname
= "tcp_moderate_rcvbuf",
615 .data
= &sysctl_tcp_moderate_rcvbuf
,
616 .maxlen
= sizeof(int),
618 .proc_handler
= proc_dointvec
,
621 .procname
= "tcp_tso_win_divisor",
622 .data
= &sysctl_tcp_tso_win_divisor
,
623 .maxlen
= sizeof(int),
625 .proc_handler
= proc_dointvec
,
628 .procname
= "tcp_congestion_control",
630 .maxlen
= TCP_CA_NAME_MAX
,
631 .proc_handler
= proc_tcp_congestion_control
,
634 .procname
= "tcp_mtu_probing",
635 .data
= &sysctl_tcp_mtu_probing
,
636 .maxlen
= sizeof(int),
638 .proc_handler
= proc_dointvec
,
641 .procname
= "tcp_base_mss",
642 .data
= &sysctl_tcp_base_mss
,
643 .maxlen
= sizeof(int),
645 .proc_handler
= proc_dointvec
,
648 .procname
= "tcp_workaround_signed_windows",
649 .data
= &sysctl_tcp_workaround_signed_windows
,
650 .maxlen
= sizeof(int),
652 .proc_handler
= proc_dointvec
655 .procname
= "tcp_limit_output_bytes",
656 .data
= &sysctl_tcp_limit_output_bytes
,
657 .maxlen
= sizeof(int),
659 .proc_handler
= proc_dointvec
662 .procname
= "tcp_challenge_ack_limit",
663 .data
= &sysctl_tcp_challenge_ack_limit
,
664 .maxlen
= sizeof(int),
666 .proc_handler
= proc_dointvec
668 #ifdef CONFIG_NET_DMA
670 .procname
= "tcp_dma_copybreak",
671 .data
= &sysctl_tcp_dma_copybreak
,
672 .maxlen
= sizeof(int),
674 .proc_handler
= proc_dointvec
678 .procname
= "tcp_slow_start_after_idle",
679 .data
= &sysctl_tcp_slow_start_after_idle
,
680 .maxlen
= sizeof(int),
682 .proc_handler
= proc_dointvec
684 #ifdef CONFIG_NETLABEL
686 .procname
= "cipso_cache_enable",
687 .data
= &cipso_v4_cache_enabled
,
688 .maxlen
= sizeof(int),
690 .proc_handler
= proc_dointvec
,
693 .procname
= "cipso_cache_bucket_size",
694 .data
= &cipso_v4_cache_bucketsize
,
695 .maxlen
= sizeof(int),
697 .proc_handler
= proc_dointvec
,
700 .procname
= "cipso_rbm_optfmt",
701 .data
= &cipso_v4_rbm_optfmt
,
702 .maxlen
= sizeof(int),
704 .proc_handler
= proc_dointvec
,
707 .procname
= "cipso_rbm_strictvalid",
708 .data
= &cipso_v4_rbm_strictvalid
,
709 .maxlen
= sizeof(int),
711 .proc_handler
= proc_dointvec
,
713 #endif /* CONFIG_NETLABEL */
715 .procname
= "tcp_available_congestion_control",
716 .maxlen
= TCP_CA_BUF_MAX
,
718 .proc_handler
= proc_tcp_available_congestion_control
,
721 .procname
= "tcp_allowed_congestion_control",
722 .maxlen
= TCP_CA_BUF_MAX
,
724 .proc_handler
= proc_allowed_congestion_control
,
727 .procname
= "tcp_max_ssthresh",
728 .data
= &sysctl_tcp_max_ssthresh
,
729 .maxlen
= sizeof(int),
731 .proc_handler
= proc_dointvec
,
734 .procname
= "tcp_thin_linear_timeouts",
735 .data
= &sysctl_tcp_thin_linear_timeouts
,
736 .maxlen
= sizeof(int),
738 .proc_handler
= proc_dointvec
741 .procname
= "tcp_thin_dupack",
742 .data
= &sysctl_tcp_thin_dupack
,
743 .maxlen
= sizeof(int),
745 .proc_handler
= proc_dointvec
748 .procname
= "tcp_early_retrans",
749 .data
= &sysctl_tcp_early_retrans
,
750 .maxlen
= sizeof(int),
752 .proc_handler
= proc_dointvec_minmax
,
757 .procname
= "udp_mem",
758 .data
= &sysctl_udp_mem
,
759 .maxlen
= sizeof(sysctl_udp_mem
),
761 .proc_handler
= proc_doulongvec_minmax
,
764 .procname
= "udp_rmem_min",
765 .data
= &sysctl_udp_rmem_min
,
766 .maxlen
= sizeof(sysctl_udp_rmem_min
),
768 .proc_handler
= proc_dointvec_minmax
,
772 .procname
= "udp_wmem_min",
773 .data
= &sysctl_udp_wmem_min
,
774 .maxlen
= sizeof(sysctl_udp_wmem_min
),
776 .proc_handler
= proc_dointvec_minmax
,
782 static struct ctl_table ipv4_net_table
[] = {
784 .procname
= "icmp_echo_ignore_all",
785 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_all
,
786 .maxlen
= sizeof(int),
788 .proc_handler
= proc_dointvec
791 .procname
= "icmp_echo_ignore_broadcasts",
792 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_broadcasts
,
793 .maxlen
= sizeof(int),
795 .proc_handler
= proc_dointvec
798 .procname
= "icmp_ignore_bogus_error_responses",
799 .data
= &init_net
.ipv4
.sysctl_icmp_ignore_bogus_error_responses
,
800 .maxlen
= sizeof(int),
802 .proc_handler
= proc_dointvec
805 .procname
= "icmp_errors_use_inbound_ifaddr",
806 .data
= &init_net
.ipv4
.sysctl_icmp_errors_use_inbound_ifaddr
,
807 .maxlen
= sizeof(int),
809 .proc_handler
= proc_dointvec
812 .procname
= "icmp_ratelimit",
813 .data
= &init_net
.ipv4
.sysctl_icmp_ratelimit
,
814 .maxlen
= sizeof(int),
816 .proc_handler
= proc_dointvec_ms_jiffies
,
819 .procname
= "icmp_ratemask",
820 .data
= &init_net
.ipv4
.sysctl_icmp_ratemask
,
821 .maxlen
= sizeof(int),
823 .proc_handler
= proc_dointvec
826 .procname
= "ping_group_range",
827 .data
= &init_net
.ipv4
.sysctl_ping_group_range
,
828 .maxlen
= sizeof(gid_t
)*2,
830 .proc_handler
= ipv4_ping_group_range
,
833 .procname
= "tcp_ecn",
834 .data
= &init_net
.ipv4
.sysctl_tcp_ecn
,
835 .maxlen
= sizeof(int),
837 .proc_handler
= proc_dointvec
840 .procname
= "tcp_mem",
841 .maxlen
= sizeof(init_net
.ipv4
.sysctl_tcp_mem
),
843 .proc_handler
= ipv4_tcp_mem
,
848 static __net_init
int ipv4_sysctl_init_net(struct net
*net
)
850 struct ctl_table
*table
;
852 table
= ipv4_net_table
;
853 if (!net_eq(net
, &init_net
)) {
854 table
= kmemdup(table
, sizeof(ipv4_net_table
), GFP_KERNEL
);
859 &net
->ipv4
.sysctl_icmp_echo_ignore_all
;
861 &net
->ipv4
.sysctl_icmp_echo_ignore_broadcasts
;
863 &net
->ipv4
.sysctl_icmp_ignore_bogus_error_responses
;
865 &net
->ipv4
.sysctl_icmp_errors_use_inbound_ifaddr
;
867 &net
->ipv4
.sysctl_icmp_ratelimit
;
869 &net
->ipv4
.sysctl_icmp_ratemask
;
871 &net
->ipv4
.sysctl_ping_group_range
;
873 &net
->ipv4
.sysctl_tcp_ecn
;
875 /* Don't export sysctls to unprivileged users */
876 if (net
->user_ns
!= &init_user_ns
)
877 table
[0].procname
= NULL
;
881 * Sane defaults - nobody may create ping sockets.
882 * Boot scripts should set this to distro-specific group.
884 net
->ipv4
.sysctl_ping_group_range
[0] = make_kgid(&init_user_ns
, 1);
885 net
->ipv4
.sysctl_ping_group_range
[1] = make_kgid(&init_user_ns
, 0);
889 net
->ipv4
.ipv4_hdr
= register_net_sysctl(net
, "net/ipv4", table
);
890 if (net
->ipv4
.ipv4_hdr
== NULL
)
896 if (!net_eq(net
, &init_net
))
902 static __net_exit
void ipv4_sysctl_exit_net(struct net
*net
)
904 struct ctl_table
*table
;
906 table
= net
->ipv4
.ipv4_hdr
->ctl_table_arg
;
907 unregister_net_sysctl_table(net
->ipv4
.ipv4_hdr
);
911 static __net_initdata
struct pernet_operations ipv4_sysctl_ops
= {
912 .init
= ipv4_sysctl_init_net
,
913 .exit
= ipv4_sysctl_exit_net
,
916 static __init
int sysctl_ipv4_init(void)
918 struct ctl_table_header
*hdr
;
921 for (i
= ipv4_table
; i
->procname
; i
++) {
922 if (strcmp(i
->procname
, "ip_local_reserved_ports") == 0) {
923 i
->data
= sysctl_local_reserved_ports
;
930 hdr
= register_net_sysctl(&init_net
, "net/ipv4", ipv4_table
);
934 if (register_pernet_subsys(&ipv4_sysctl_ops
)) {
935 unregister_net_sysctl_table(hdr
);
942 __initcall(sysctl_ipv4_init
);