1#include <linux/stat.h> 2#include <linux/sysctl.h> 3#include "../fs/xfs/linux-2.6/xfs_sysctl.h" 4#include <linux/sunrpc/debug.h> 5#include <linux/string.h> 6#include <net/ip_vs.h> 7#include <linux/syscalls.h> 8#include <linux/namei.h> 9#include <linux/mount.h> 10#include <linux/fs.h> 11#include <linux/nsproxy.h> 12#include <linux/pid_namespace.h> 13#include <linux/file.h> 14#include <linux/ctype.h> 15#include <linux/netdevice.h> 16#include <linux/slab.h> 17 18#ifdef CONFIG_SYSCTL_SYSCALL 19 20struct bin_table; 21typedef ssize_t bin_convert_t(struct file *file, 22 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen); 23 24static bin_convert_t bin_dir; 25static bin_convert_t bin_string; 26static bin_convert_t bin_intvec; 27static bin_convert_t bin_ulongvec; 28static bin_convert_t bin_uuid; 29static bin_convert_t bin_dn_node_address; 30 31#define CTL_DIR bin_dir 32#define CTL_STR bin_string 33#define CTL_INT bin_intvec 34#define CTL_ULONG bin_ulongvec 35#define CTL_UUID bin_uuid 36#define CTL_DNADR bin_dn_node_address 37 38#define BUFSZ 256 39 40struct bin_table { 41 bin_convert_t *convert; 42 int ctl_name; 43 const char *procname; 44 const struct bin_table *child; 45}; 46 47static const struct bin_table bin_random_table[] = { 48 { CTL_INT, RANDOM_POOLSIZE, "poolsize" }, 49 { CTL_INT, RANDOM_ENTROPY_COUNT, "entropy_avail" }, 50 { CTL_INT, RANDOM_READ_THRESH, "read_wakeup_threshold" }, 51 { CTL_INT, RANDOM_WRITE_THRESH, "write_wakeup_threshold" }, 52 { CTL_UUID, RANDOM_BOOT_ID, "boot_id" }, 53 { CTL_UUID, RANDOM_UUID, "uuid" }, 54 {} 55}; 56 57static const struct bin_table bin_pty_table[] = { 58 { CTL_INT, PTY_MAX, "max" }, 59 { CTL_INT, PTY_NR, "nr" }, 60 {} 61}; 62 63static const struct bin_table bin_kern_table[] = { 64 { CTL_STR, KERN_OSTYPE, "ostype" }, 65 { CTL_STR, KERN_OSRELEASE, "osrelease" }, 66 /* KERN_OSREV not used */ 67 { CTL_STR, KERN_VERSION, "version" }, 68 /* KERN_SECUREMASK not used */ 69 /* KERN_PROF not used */ 70 { CTL_STR, KERN_NODENAME, "hostname" }, 71 { CTL_STR, KERN_DOMAINNAME, "domainname" }, 72 73 { CTL_INT, KERN_PANIC, "panic" }, 74 { CTL_INT, KERN_REALROOTDEV, "real-root-dev" }, 75 76 { CTL_STR, KERN_SPARC_REBOOT, "reboot-cmd" }, 77 { CTL_INT, KERN_CTLALTDEL, "ctrl-alt-del" }, 78 { CTL_INT, KERN_PRINTK, "printk" }, 79 80 /* KERN_NAMETRANS not used */ 81 /* KERN_PPC_HTABRECLAIM not used */ 82 /* KERN_PPC_ZEROPAGED not used */ 83 { CTL_INT, KERN_PPC_POWERSAVE_NAP, "powersave-nap" }, 84 85 { CTL_STR, KERN_MODPROBE, "modprobe" }, 86 { CTL_INT, KERN_SG_BIG_BUFF, "sg-big-buff" }, 87 { CTL_INT, KERN_ACCT, "acct" }, 88 /* KERN_PPC_L2CR "l2cr" no longer used */ 89 90 /* KERN_RTSIGNR not used */ 91 /* KERN_RTSIGMAX not used */ 92 93 { CTL_ULONG, KERN_SHMMAX, "shmmax" }, 94 { CTL_INT, KERN_MSGMAX, "msgmax" }, 95 { CTL_INT, KERN_MSGMNB, "msgmnb" }, 96 /* KERN_MSGPOOL not used*/ 97 { CTL_INT, KERN_SYSRQ, "sysrq" }, 98 { CTL_INT, KERN_MAX_THREADS, "threads-max" }, 99 { CTL_DIR, KERN_RANDOM, "random", bin_random_table }, 100 { CTL_ULONG, KERN_SHMALL, "shmall" }, 101 { CTL_INT, KERN_MSGMNI, "msgmni" }, 102 { CTL_INT, KERN_SEM, "sem" }, 103 { CTL_INT, KERN_SPARC_STOP_A, "stop-a" }, 104 { CTL_INT, KERN_SHMMNI, "shmmni" }, 105 106 { CTL_INT, KERN_OVERFLOWUID, "overflowuid" }, 107 { CTL_INT, KERN_OVERFLOWGID, "overflowgid" }, 108 109 { CTL_STR, KERN_HOTPLUG, "hotplug", }, 110 { CTL_INT, KERN_IEEE_EMULATION_WARNINGS, "ieee_emulation_warnings" }, 111 112 { CTL_INT, KERN_S390_USER_DEBUG_LOGGING, "userprocess_debug" }, 113 { CTL_INT, KERN_CORE_USES_PID, "core_uses_pid" }, 114 /* KERN_TAINTED "tainted" no longer used */ 115 { CTL_INT, KERN_CADPID, "cad_pid" }, 116 { CTL_INT, KERN_PIDMAX, "pid_max" }, 117 { CTL_STR, KERN_CORE_PATTERN, "core_pattern" }, 118 { CTL_INT, KERN_PANIC_ON_OOPS, "panic_on_oops" }, 119 { CTL_INT, KERN_HPPA_PWRSW, "soft-power" }, 120 { CTL_INT, KERN_HPPA_UNALIGNED, "unaligned-trap" }, 121 122 { CTL_INT, KERN_PRINTK_RATELIMIT, "printk_ratelimit" }, 123 { CTL_INT, KERN_PRINTK_RATELIMIT_BURST, "printk_ratelimit_burst" }, 124 125 { CTL_DIR, KERN_PTY, "pty", bin_pty_table }, 126 { CTL_INT, KERN_NGROUPS_MAX, "ngroups_max" }, 127 { CTL_INT, KERN_SPARC_SCONS_PWROFF, "scons-poweroff" }, 128 /* KERN_HZ_TIMER "hz_timer" no longer used */ 129 { CTL_INT, KERN_UNKNOWN_NMI_PANIC, "unknown_nmi_panic" }, 130 { CTL_INT, KERN_BOOTLOADER_TYPE, "bootloader_type" }, 131 { CTL_INT, KERN_RANDOMIZE, "randomize_va_space" }, 132 133 { CTL_INT, KERN_SPIN_RETRY, "spin_retry" }, 134 /* KERN_ACPI_VIDEO_FLAGS "acpi_video_flags" no longer used */ 135 { CTL_INT, KERN_IA64_UNALIGNED, "ignore-unaligned-usertrap" }, 136 { CTL_INT, KERN_COMPAT_LOG, "compat-log" }, 137 { CTL_INT, KERN_MAX_LOCK_DEPTH, "max_lock_depth" }, 138 { CTL_INT, KERN_NMI_WATCHDOG, "nmi_watchdog" }, 139 { CTL_INT, KERN_PANIC_ON_NMI, "panic_on_unrecovered_nmi" }, 140 {} 141}; 142 143static const struct bin_table bin_vm_table[] = { 144 { CTL_INT, VM_OVERCOMMIT_MEMORY, "overcommit_memory" }, 145 { CTL_INT, VM_PAGE_CLUSTER, "page-cluster" }, 146 { CTL_INT, VM_DIRTY_BACKGROUND, "dirty_background_ratio" }, 147 { CTL_INT, VM_DIRTY_RATIO, "dirty_ratio" }, 148 /* VM_DIRTY_WB_CS "dirty_writeback_centisecs" no longer used */ 149 /* VM_DIRTY_EXPIRE_CS "dirty_expire_centisecs" no longer used */ 150 { CTL_INT, VM_NR_PDFLUSH_THREADS, "nr_pdflush_threads" }, 151 { CTL_INT, VM_OVERCOMMIT_RATIO, "overcommit_ratio" }, 152 /* VM_PAGEBUF unused */ 153 /* VM_HUGETLB_PAGES "nr_hugepages" no longer used */ 154 { CTL_INT, VM_SWAPPINESS, "swappiness" }, 155 { CTL_INT, VM_LOWMEM_RESERVE_RATIO, "lowmem_reserve_ratio" }, 156 { CTL_INT, VM_MIN_FREE_KBYTES, "min_free_kbytes" }, 157 { CTL_INT, VM_MAX_MAP_COUNT, "max_map_count" }, 158 { CTL_INT, VM_LAPTOP_MODE, "laptop_mode" }, 159 { CTL_INT, VM_BLOCK_DUMP, "block_dump" }, 160 { CTL_INT, VM_HUGETLB_GROUP, "hugetlb_shm_group" }, 161 { CTL_INT, VM_VFS_CACHE_PRESSURE, "vfs_cache_pressure" }, 162 { CTL_INT, VM_LEGACY_VA_LAYOUT, "legacy_va_layout" }, 163 /* VM_SWAP_TOKEN_TIMEOUT unused */ 164 { CTL_INT, VM_DROP_PAGECACHE, "drop_caches" }, 165 { CTL_INT, VM_PERCPU_PAGELIST_FRACTION, "percpu_pagelist_fraction" }, 166 { CTL_INT, VM_ZONE_RECLAIM_MODE, "zone_reclaim_mode" }, 167 { CTL_INT, VM_MIN_UNMAPPED, "min_unmapped_ratio" }, 168 { CTL_INT, VM_PANIC_ON_OOM, "panic_on_oom" }, 169 { CTL_INT, VM_VDSO_ENABLED, "vdso_enabled" }, 170 { CTL_INT, VM_MIN_SLAB, "min_slab_ratio" }, 171 172 {} 173}; 174 175static const struct bin_table bin_net_core_table[] = { 176 { CTL_INT, NET_CORE_WMEM_MAX, "wmem_max" }, 177 { CTL_INT, NET_CORE_RMEM_MAX, "rmem_max" }, 178 { CTL_INT, NET_CORE_WMEM_DEFAULT, "wmem_default" }, 179 { CTL_INT, NET_CORE_RMEM_DEFAULT, "rmem_default" }, 180 /* NET_CORE_DESTROY_DELAY unused */ 181 { CTL_INT, NET_CORE_MAX_BACKLOG, "netdev_max_backlog" }, 182 /* NET_CORE_FASTROUTE unused */ 183 { CTL_INT, NET_CORE_MSG_COST, "message_cost" }, 184 { CTL_INT, NET_CORE_MSG_BURST, "message_burst" }, 185 { CTL_INT, NET_CORE_OPTMEM_MAX, "optmem_max" }, 186 /* NET_CORE_HOT_LIST_LENGTH unused */ 187 /* NET_CORE_DIVERT_VERSION unused */ 188 /* NET_CORE_NO_CONG_THRESH unused */ 189 /* NET_CORE_NO_CONG unused */ 190 /* NET_CORE_LO_CONG unused */ 191 /* NET_CORE_MOD_CONG unused */ 192 { CTL_INT, NET_CORE_DEV_WEIGHT, "dev_weight" }, 193 { CTL_INT, NET_CORE_SOMAXCONN, "somaxconn" }, 194 { CTL_INT, NET_CORE_BUDGET, "netdev_budget" }, 195 { CTL_INT, NET_CORE_AEVENT_ETIME, "xfrm_aevent_etime" }, 196 { CTL_INT, NET_CORE_AEVENT_RSEQTH, "xfrm_aevent_rseqth" }, 197 { CTL_INT, NET_CORE_WARNINGS, "warnings" }, 198 {}, 199}; 200 201static const struct bin_table bin_net_unix_table[] = { 202 /* NET_UNIX_DESTROY_DELAY unused */ 203 /* NET_UNIX_DELETE_DELAY unused */ 204 { CTL_INT, NET_UNIX_MAX_DGRAM_QLEN, "max_dgram_qlen" }, 205 {} 206}; 207 208static const struct bin_table bin_net_ipv4_route_table[] = { 209 { CTL_INT, NET_IPV4_ROUTE_FLUSH, "flush" }, 210 /* NET_IPV4_ROUTE_MIN_DELAY "min_delay" no longer used */ 211 /* NET_IPV4_ROUTE_MAX_DELAY "max_delay" no longer used */ 212 { CTL_INT, NET_IPV4_ROUTE_GC_THRESH, "gc_thresh" }, 213 { CTL_INT, NET_IPV4_ROUTE_MAX_SIZE, "max_size" }, 214 { CTL_INT, NET_IPV4_ROUTE_GC_MIN_INTERVAL, "gc_min_interval" }, 215 { CTL_INT, NET_IPV4_ROUTE_GC_MIN_INTERVAL_MS, "gc_min_interval_ms" }, 216 { CTL_INT, NET_IPV4_ROUTE_GC_TIMEOUT, "gc_timeout" }, 217 { CTL_INT, NET_IPV4_ROUTE_GC_INTERVAL, "gc_interval" }, 218 { CTL_INT, NET_IPV4_ROUTE_REDIRECT_LOAD, "redirect_load" }, 219 { CTL_INT, NET_IPV4_ROUTE_REDIRECT_NUMBER, "redirect_number" }, 220 { CTL_INT, NET_IPV4_ROUTE_REDIRECT_SILENCE, "redirect_silence" }, 221 { CTL_INT, NET_IPV4_ROUTE_ERROR_COST, "error_cost" }, 222 { CTL_INT, NET_IPV4_ROUTE_ERROR_BURST, "error_burst" }, 223 { CTL_INT, NET_IPV4_ROUTE_GC_ELASTICITY, "gc_elasticity" }, 224 { CTL_INT, NET_IPV4_ROUTE_MTU_EXPIRES, "mtu_expires" }, 225 { CTL_INT, NET_IPV4_ROUTE_MIN_PMTU, "min_pmtu" }, 226 { CTL_INT, NET_IPV4_ROUTE_MIN_ADVMSS, "min_adv_mss" }, 227 { CTL_INT, NET_IPV4_ROUTE_SECRET_INTERVAL, "secret_interval" }, 228 {} 229}; 230 231static const struct bin_table bin_net_ipv4_conf_vars_table[] = { 232 { CTL_INT, NET_IPV4_CONF_FORWARDING, "forwarding" }, 233 { CTL_INT, NET_IPV4_CONF_MC_FORWARDING, "mc_forwarding" }, 234 235 { CTL_INT, NET_IPV4_CONF_ACCEPT_REDIRECTS, "accept_redirects" }, 236 { CTL_INT, NET_IPV4_CONF_SECURE_REDIRECTS, "secure_redirects" }, 237 { CTL_INT, NET_IPV4_CONF_SEND_REDIRECTS, "send_redirects" }, 238 { CTL_INT, NET_IPV4_CONF_SHARED_MEDIA, "shared_media" }, 239 { CTL_INT, NET_IPV4_CONF_RP_FILTER, "rp_filter" }, 240 { CTL_INT, NET_IPV4_CONF_ACCEPT_SOURCE_ROUTE, "accept_source_route" }, 241 { CTL_INT, NET_IPV4_CONF_PROXY_ARP, "proxy_arp" }, 242 { CTL_INT, NET_IPV4_CONF_MEDIUM_ID, "medium_id" }, 243 { CTL_INT, NET_IPV4_CONF_BOOTP_RELAY, "bootp_relay" }, 244 { CTL_INT, NET_IPV4_CONF_LOG_MARTIANS, "log_martians" }, 245 { CTL_INT, NET_IPV4_CONF_TAG, "tag" }, 246 { CTL_INT, NET_IPV4_CONF_ARPFILTER, "arp_filter" }, 247 { CTL_INT, NET_IPV4_CONF_ARP_ANNOUNCE, "arp_announce" }, 248 { CTL_INT, NET_IPV4_CONF_ARP_IGNORE, "arp_ignore" }, 249 { CTL_INT, NET_IPV4_CONF_ARP_ACCEPT, "arp_accept" }, 250 { CTL_INT, NET_IPV4_CONF_ARP_NOTIFY, "arp_notify" }, 251 252 { CTL_INT, NET_IPV4_CONF_NOXFRM, "disable_xfrm" }, 253 { CTL_INT, NET_IPV4_CONF_NOPOLICY, "disable_policy" }, 254 { CTL_INT, NET_IPV4_CONF_FORCE_IGMP_VERSION, "force_igmp_version" }, 255 { CTL_INT, NET_IPV4_CONF_PROMOTE_SECONDARIES, "promote_secondaries" }, 256 {} 257}; 258 259static const struct bin_table bin_net_ipv4_conf_table[] = { 260 { CTL_DIR, NET_PROTO_CONF_ALL, "all", bin_net_ipv4_conf_vars_table }, 261 { CTL_DIR, NET_PROTO_CONF_DEFAULT, "default", bin_net_ipv4_conf_vars_table }, 262 { CTL_DIR, 0, NULL, bin_net_ipv4_conf_vars_table }, 263 {} 264}; 265 266static const struct bin_table bin_net_neigh_vars_table[] = { 267 { CTL_INT, NET_NEIGH_MCAST_SOLICIT, "mcast_solicit" }, 268 { CTL_INT, NET_NEIGH_UCAST_SOLICIT, "ucast_solicit" }, 269 { CTL_INT, NET_NEIGH_APP_SOLICIT, "app_solicit" }, 270 /* NET_NEIGH_RETRANS_TIME "retrans_time" no longer used */ 271 { CTL_INT, NET_NEIGH_REACHABLE_TIME, "base_reachable_time" }, 272 { CTL_INT, NET_NEIGH_DELAY_PROBE_TIME, "delay_first_probe_time" }, 273 { CTL_INT, NET_NEIGH_GC_STALE_TIME, "gc_stale_time" }, 274 { CTL_INT, NET_NEIGH_UNRES_QLEN, "unres_qlen" }, 275 { CTL_INT, NET_NEIGH_PROXY_QLEN, "proxy_qlen" }, 276 /* NET_NEIGH_ANYCAST_DELAY "anycast_delay" no longer used */ 277 /* NET_NEIGH_PROXY_DELAY "proxy_delay" no longer used */ 278 /* NET_NEIGH_LOCKTIME "locktime" no longer used */ 279 { CTL_INT, NET_NEIGH_GC_INTERVAL, "gc_interval" }, 280 { CTL_INT, NET_NEIGH_GC_THRESH1, "gc_thresh1" }, 281 { CTL_INT, NET_NEIGH_GC_THRESH2, "gc_thresh2" }, 282 { CTL_INT, NET_NEIGH_GC_THRESH3, "gc_thresh3" }, 283 { CTL_INT, NET_NEIGH_RETRANS_TIME_MS, "retrans_time_ms" }, 284 { CTL_INT, NET_NEIGH_REACHABLE_TIME_MS, "base_reachable_time_ms" }, 285 {} 286}; 287 288static const struct bin_table bin_net_neigh_table[] = { 289 { CTL_DIR, NET_PROTO_CONF_DEFAULT, "default", bin_net_neigh_vars_table }, 290 { CTL_DIR, 0, NULL, bin_net_neigh_vars_table }, 291 {} 292}; 293 294static const struct bin_table bin_net_ipv4_netfilter_table[] = { 295 { CTL_INT, NET_IPV4_NF_CONNTRACK_MAX, "ip_conntrack_max" }, 296 297 /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_SYN_SENT "ip_conntrack_tcp_timeout_syn_sent" no longer used */ 298 /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_SYN_RECV "ip_conntrack_tcp_timeout_syn_recv" no longer used */ 299 /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_ESTABLISHED "ip_conntrack_tcp_timeout_established" no longer used */ 300 /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_FIN_WAIT "ip_conntrack_tcp_timeout_fin_wait" no longer used */ 301 /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_CLOSE_WAIT "ip_conntrack_tcp_timeout_close_wait" no longer used */ 302 /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_LAST_ACK "ip_conntrack_tcp_timeout_last_ack" no longer used */ 303 /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_TIME_WAIT "ip_conntrack_tcp_timeout_time_wait" no longer used */ 304 /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_CLOSE "ip_conntrack_tcp_timeout_close" no longer used */ 305 306 /* NET_IPV4_NF_CONNTRACK_UDP_TIMEOUT "ip_conntrack_udp_timeout" no longer used */ 307 /* NET_IPV4_NF_CONNTRACK_UDP_TIMEOUT_STREAM "ip_conntrack_udp_timeout_stream" no longer used */ 308 /* NET_IPV4_NF_CONNTRACK_ICMP_TIMEOUT "ip_conntrack_icmp_timeout" no longer used */ 309 /* NET_IPV4_NF_CONNTRACK_GENERIC_TIMEOUT "ip_conntrack_generic_timeout" no longer used */ 310 311 { CTL_INT, NET_IPV4_NF_CONNTRACK_BUCKETS, "ip_conntrack_buckets" }, 312 { CTL_INT, NET_IPV4_NF_CONNTRACK_LOG_INVALID, "ip_conntrack_log_invalid" }, 313 /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_MAX_RETRANS "ip_conntrack_tcp_timeout_max_retrans" no longer used */ 314 { CTL_INT, NET_IPV4_NF_CONNTRACK_TCP_LOOSE, "ip_conntrack_tcp_loose" }, 315 { CTL_INT, NET_IPV4_NF_CONNTRACK_TCP_BE_LIBERAL, "ip_conntrack_tcp_be_liberal" }, 316 { CTL_INT, NET_IPV4_NF_CONNTRACK_TCP_MAX_RETRANS, "ip_conntrack_tcp_max_retrans" }, 317 318 /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_CLOSED "ip_conntrack_sctp_timeout_closed" no longer used */ 319 /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_COOKIE_WAIT "ip_conntrack_sctp_timeout_cookie_wait" no longer used */ 320 /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_COOKIE_ECHOED "ip_conntrack_sctp_timeout_cookie_echoed" no longer used */ 321 /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_ESTABLISHED "ip_conntrack_sctp_timeout_established" no longer used */ 322 /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_SENT "ip_conntrack_sctp_timeout_shutdown_sent" no longer used */ 323 /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_RECD "ip_conntrack_sctp_timeout_shutdown_recd" no longer used */ 324 /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_ACK_SENT "ip_conntrack_sctp_timeout_shutdown_ack_sent" no longer used */ 325 326 { CTL_INT, NET_IPV4_NF_CONNTRACK_COUNT, "ip_conntrack_count" }, 327 { CTL_INT, NET_IPV4_NF_CONNTRACK_CHECKSUM, "ip_conntrack_checksum" }, 328 {} 329}; 330 331static const struct bin_table bin_net_ipv4_table[] = { 332 {CTL_INT, NET_IPV4_FORWARD, "ip_forward" }, 333 334 { CTL_DIR, NET_IPV4_CONF, "conf", bin_net_ipv4_conf_table }, 335 { CTL_DIR, NET_IPV4_NEIGH, "neigh", bin_net_neigh_table }, 336 { CTL_DIR, NET_IPV4_ROUTE, "route", bin_net_ipv4_route_table }, 337 /* NET_IPV4_FIB_HASH unused */ 338 { CTL_DIR, NET_IPV4_NETFILTER, "netfilter", bin_net_ipv4_netfilter_table }, 339 340 { CTL_INT, NET_IPV4_TCP_TIMESTAMPS, "tcp_timestamps" }, 341 { CTL_INT, NET_IPV4_TCP_WINDOW_SCALING, "tcp_window_scaling" }, 342 { CTL_INT, NET_IPV4_TCP_SACK, "tcp_sack" }, 343 { CTL_INT, NET_IPV4_TCP_RETRANS_COLLAPSE, "tcp_retrans_collapse" }, 344 { CTL_INT, NET_IPV4_DEFAULT_TTL, "ip_default_ttl" }, 345 /* NET_IPV4_AUTOCONFIG unused */ 346 { CTL_INT, NET_IPV4_NO_PMTU_DISC, "ip_no_pmtu_disc" }, 347 { CTL_INT, NET_IPV4_NONLOCAL_BIND, "ip_nonlocal_bind" }, 348 { CTL_INT, NET_IPV4_TCP_SYN_RETRIES, "tcp_syn_retries" }, 349 { CTL_INT, NET_TCP_SYNACK_RETRIES, "tcp_synack_retries" }, 350 { CTL_INT, NET_TCP_MAX_ORPHANS, "tcp_max_orphans" }, 351 { CTL_INT, NET_TCP_MAX_TW_BUCKETS, "tcp_max_tw_buckets" }, 352 { CTL_INT, NET_IPV4_DYNADDR, "ip_dynaddr" }, 353 { CTL_INT, NET_IPV4_TCP_KEEPALIVE_TIME, "tcp_keepalive_time" }, 354 { CTL_INT, NET_IPV4_TCP_KEEPALIVE_PROBES, "tcp_keepalive_probes" }, 355 { CTL_INT, NET_IPV4_TCP_KEEPALIVE_INTVL, "tcp_keepalive_intvl" }, 356 { CTL_INT, NET_IPV4_TCP_RETRIES1, "tcp_retries1" }, 357 { CTL_INT, NET_IPV4_TCP_RETRIES2, "tcp_retries2" }, 358 { CTL_INT, NET_IPV4_TCP_FIN_TIMEOUT, "tcp_fin_timeout" }, 359 { CTL_INT, NET_TCP_SYNCOOKIES, "tcp_syncookies" }, 360 { CTL_INT, NET_TCP_TW_RECYCLE, "tcp_tw_recycle" }, 361 { CTL_INT, NET_TCP_ABORT_ON_OVERFLOW, "tcp_abort_on_overflow" }, 362 { CTL_INT, NET_TCP_STDURG, "tcp_stdurg" }, 363 { CTL_INT, NET_TCP_RFC1337, "tcp_rfc1337" }, 364 { CTL_INT, NET_TCP_MAX_SYN_BACKLOG, "tcp_max_syn_backlog" }, 365 { CTL_INT, NET_IPV4_LOCAL_PORT_RANGE, "ip_local_port_range" }, 366 { CTL_INT, NET_IPV4_IGMP_MAX_MEMBERSHIPS, "igmp_max_memberships" }, 367 { CTL_INT, NET_IPV4_IGMP_MAX_MSF, "igmp_max_msf" }, 368 { CTL_INT, NET_IPV4_INET_PEER_THRESHOLD, "inet_peer_threshold" }, 369 { CTL_INT, NET_IPV4_INET_PEER_MINTTL, "inet_peer_minttl" }, 370 { CTL_INT, NET_IPV4_INET_PEER_MAXTTL, "inet_peer_maxttl" }, 371 { CTL_INT, NET_IPV4_INET_PEER_GC_MINTIME, "inet_peer_gc_mintime" }, 372 { CTL_INT, NET_IPV4_INET_PEER_GC_MAXTIME, "inet_peer_gc_maxtime" }, 373 { CTL_INT, NET_TCP_ORPHAN_RETRIES, "tcp_orphan_retries" }, 374 { CTL_INT, NET_TCP_FACK, "tcp_fack" }, 375 { CTL_INT, NET_TCP_REORDERING, "tcp_reordering" }, 376 { CTL_INT, NET_TCP_ECN, "tcp_ecn" }, 377 { CTL_INT, NET_TCP_DSACK, "tcp_dsack" }, 378 { CTL_INT, NET_TCP_MEM, "tcp_mem" }, 379 { CTL_INT, NET_TCP_WMEM, "tcp_wmem" }, 380 { CTL_INT, NET_TCP_RMEM, "tcp_rmem" }, 381 { CTL_INT, NET_TCP_APP_WIN, "tcp_app_win" }, 382 { CTL_INT, NET_TCP_ADV_WIN_SCALE, "tcp_adv_win_scale" }, 383 { CTL_INT, NET_TCP_TW_REUSE, "tcp_tw_reuse" }, 384 { CTL_INT, NET_TCP_FRTO, "tcp_frto" }, 385 { CTL_INT, NET_TCP_FRTO_RESPONSE, "tcp_frto_response" }, 386 { CTL_INT, NET_TCP_LOW_LATENCY, "tcp_low_latency" }, 387 { CTL_INT, NET_TCP_NO_METRICS_SAVE, "tcp_no_metrics_save" }, 388 { CTL_INT, NET_TCP_MODERATE_RCVBUF, "tcp_moderate_rcvbuf" }, 389 { CTL_INT, NET_TCP_TSO_WIN_DIVISOR, "tcp_tso_win_divisor" }, 390 { CTL_STR, NET_TCP_CONG_CONTROL, "tcp_congestion_control" }, 391 { CTL_INT, NET_TCP_ABC, "tcp_abc" }, 392 { CTL_INT, NET_TCP_MTU_PROBING, "tcp_mtu_probing" }, 393 { CTL_INT, NET_TCP_BASE_MSS, "tcp_base_mss" }, 394 { CTL_INT, NET_IPV4_TCP_WORKAROUND_SIGNED_WINDOWS, "tcp_workaround_signed_windows" }, 395 { CTL_INT, NET_TCP_DMA_COPYBREAK, "tcp_dma_copybreak" }, 396 { CTL_INT, NET_TCP_SLOW_START_AFTER_IDLE, "tcp_slow_start_after_idle" }, 397 { CTL_INT, NET_CIPSOV4_CACHE_ENABLE, "cipso_cache_enable" }, 398 { CTL_INT, NET_CIPSOV4_CACHE_BUCKET_SIZE, "cipso_cache_bucket_size" }, 399 { CTL_INT, NET_CIPSOV4_RBM_OPTFMT, "cipso_rbm_optfmt" }, 400 { CTL_INT, NET_CIPSOV4_RBM_STRICTVALID, "cipso_rbm_strictvalid" }, 401 /* NET_TCP_AVAIL_CONG_CONTROL "tcp_available_congestion_control" no longer used */ 402 { CTL_STR, NET_TCP_ALLOWED_CONG_CONTROL, "tcp_allowed_congestion_control" }, 403 { CTL_INT, NET_TCP_MAX_SSTHRESH, "tcp_max_ssthresh" }, 404 405 { CTL_INT, NET_IPV4_ICMP_ECHO_IGNORE_ALL, "icmp_echo_ignore_all" }, 406 { CTL_INT, NET_IPV4_ICMP_ECHO_IGNORE_BROADCASTS, "icmp_echo_ignore_broadcasts" }, 407 { CTL_INT, NET_IPV4_ICMP_IGNORE_BOGUS_ERROR_RESPONSES, "icmp_ignore_bogus_error_responses" }, 408 { CTL_INT, NET_IPV4_ICMP_ERRORS_USE_INBOUND_IFADDR, "icmp_errors_use_inbound_ifaddr" }, 409 { CTL_INT, NET_IPV4_ICMP_RATELIMIT, "icmp_ratelimit" }, 410 { CTL_INT, NET_IPV4_ICMP_RATEMASK, "icmp_ratemask" }, 411 412 { CTL_INT, NET_IPV4_IPFRAG_HIGH_THRESH, "ipfrag_high_thresh" }, 413 { CTL_INT, NET_IPV4_IPFRAG_LOW_THRESH, "ipfrag_low_thresh" }, 414 { CTL_INT, NET_IPV4_IPFRAG_TIME, "ipfrag_time" }, 415 416 { CTL_INT, NET_IPV4_IPFRAG_SECRET_INTERVAL, "ipfrag_secret_interval" }, 417 /* NET_IPV4_IPFRAG_MAX_DIST "ipfrag_max_dist" no longer used */ 418 419 { CTL_INT, 2088 /* NET_IPQ_QMAX */, "ip_queue_maxlen" }, 420 421 /* NET_TCP_DEFAULT_WIN_SCALE unused */ 422 /* NET_TCP_BIC_BETA unused */ 423 /* NET_IPV4_TCP_MAX_KA_PROBES unused */ 424 /* NET_IPV4_IP_MASQ_DEBUG unused */ 425 /* NET_TCP_SYN_TAILDROP unused */ 426 /* NET_IPV4_ICMP_SOURCEQUENCH_RATE unused */ 427 /* NET_IPV4_ICMP_DESTUNREACH_RATE unused */ 428 /* NET_IPV4_ICMP_TIMEEXCEED_RATE unused */ 429 /* NET_IPV4_ICMP_PARAMPROB_RATE unused */ 430 /* NET_IPV4_ICMP_ECHOREPLY_RATE unused */ 431 /* NET_IPV4_ALWAYS_DEFRAG unused */ 432 {} 433}; 434 435static const struct bin_table bin_net_ipx_table[] = { 436 { CTL_INT, NET_IPX_PPROP_BROADCASTING, "ipx_pprop_broadcasting" }, 437 /* NET_IPX_FORWARDING unused */ 438 {} 439}; 440 441static const struct bin_table bin_net_atalk_table[] = { 442 { CTL_INT, NET_ATALK_AARP_EXPIRY_TIME, "aarp-expiry-time" }, 443 { CTL_INT, NET_ATALK_AARP_TICK_TIME, "aarp-tick-time" }, 444 { CTL_INT, NET_ATALK_AARP_RETRANSMIT_LIMIT, "aarp-retransmit-limit" }, 445 { CTL_INT, NET_ATALK_AARP_RESOLVE_TIME, "aarp-resolve-time" }, 446 {}, 447}; 448 449static const struct bin_table bin_net_netrom_table[] = { 450 { CTL_INT, NET_NETROM_DEFAULT_PATH_QUALITY, "default_path_quality" }, 451 { CTL_INT, NET_NETROM_OBSOLESCENCE_COUNT_INITIALISER, "obsolescence_count_initialiser" }, 452 { CTL_INT, NET_NETROM_NETWORK_TTL_INITIALISER, "network_ttl_initialiser" }, 453 { CTL_INT, NET_NETROM_TRANSPORT_TIMEOUT, "transport_timeout" }, 454 { CTL_INT, NET_NETROM_TRANSPORT_MAXIMUM_TRIES, "transport_maximum_tries" }, 455 { CTL_INT, NET_NETROM_TRANSPORT_ACKNOWLEDGE_DELAY, "transport_acknowledge_delay" }, 456 { CTL_INT, NET_NETROM_TRANSPORT_BUSY_DELAY, "transport_busy_delay" }, 457 { CTL_INT, NET_NETROM_TRANSPORT_REQUESTED_WINDOW_SIZE, "transport_requested_window_size" }, 458 { CTL_INT, NET_NETROM_TRANSPORT_NO_ACTIVITY_TIMEOUT, "transport_no_activity_timeout" }, 459 { CTL_INT, NET_NETROM_ROUTING_CONTROL, "routing_control" }, 460 { CTL_INT, NET_NETROM_LINK_FAILS_COUNT, "link_fails_count" }, 461 { CTL_INT, NET_NETROM_RESET, "reset" }, 462 {} 463}; 464 465static const struct bin_table bin_net_ax25_param_table[] = { 466 { CTL_INT, NET_AX25_IP_DEFAULT_MODE, "ip_default_mode" }, 467 { CTL_INT, NET_AX25_DEFAULT_MODE, "ax25_default_mode" }, 468 { CTL_INT, NET_AX25_BACKOFF_TYPE, "backoff_type" }, 469 { CTL_INT, NET_AX25_CONNECT_MODE, "connect_mode" }, 470 { CTL_INT, NET_AX25_STANDARD_WINDOW, "standard_window_size" }, 471 { CTL_INT, NET_AX25_EXTENDED_WINDOW, "extended_window_size" }, 472 { CTL_INT, NET_AX25_T1_TIMEOUT, "t1_timeout" }, 473 { CTL_INT, NET_AX25_T2_TIMEOUT, "t2_timeout" }, 474 { CTL_INT, NET_AX25_T3_TIMEOUT, "t3_timeout" }, 475 { CTL_INT, NET_AX25_IDLE_TIMEOUT, "idle_timeout" }, 476 { CTL_INT, NET_AX25_N2, "maximum_retry_count" }, 477 { CTL_INT, NET_AX25_PACLEN, "maximum_packet_length" }, 478 { CTL_INT, NET_AX25_PROTOCOL, "protocol" }, 479 { CTL_INT, NET_AX25_DAMA_SLAVE_TIMEOUT, "dama_slave_timeout" }, 480 {} 481}; 482 483static const struct bin_table bin_net_ax25_table[] = { 484 { CTL_DIR, 0, NULL, bin_net_ax25_param_table }, 485 {} 486}; 487 488static const struct bin_table bin_net_rose_table[] = { 489 { CTL_INT, NET_ROSE_RESTART_REQUEST_TIMEOUT, "restart_request_timeout" }, 490 { CTL_INT, NET_ROSE_CALL_REQUEST_TIMEOUT, "call_request_timeout" }, 491 { CTL_INT, NET_ROSE_RESET_REQUEST_TIMEOUT, "reset_request_timeout" }, 492 { CTL_INT, NET_ROSE_CLEAR_REQUEST_TIMEOUT, "clear_request_timeout" }, 493 { CTL_INT, NET_ROSE_ACK_HOLD_BACK_TIMEOUT, "acknowledge_hold_back_timeout" }, 494 { CTL_INT, NET_ROSE_ROUTING_CONTROL, "routing_control" }, 495 { CTL_INT, NET_ROSE_LINK_FAIL_TIMEOUT, "link_fail_timeout" }, 496 { CTL_INT, NET_ROSE_MAX_VCS, "maximum_virtual_circuits" }, 497 { CTL_INT, NET_ROSE_WINDOW_SIZE, "window_size" }, 498 { CTL_INT, NET_ROSE_NO_ACTIVITY_TIMEOUT, "no_activity_timeout" }, 499 {} 500}; 501 502static const struct bin_table bin_net_ipv6_conf_var_table[] = { 503 { CTL_INT, NET_IPV6_FORWARDING, "forwarding" }, 504 { CTL_INT, NET_IPV6_HOP_LIMIT, "hop_limit" }, 505 { CTL_INT, NET_IPV6_MTU, "mtu" }, 506 { CTL_INT, NET_IPV6_ACCEPT_RA, "accept_ra" }, 507 { CTL_INT, NET_IPV6_ACCEPT_REDIRECTS, "accept_redirects" }, 508 { CTL_INT, NET_IPV6_AUTOCONF, "autoconf" }, 509 { CTL_INT, NET_IPV6_DAD_TRANSMITS, "dad_transmits" }, 510 { CTL_INT, NET_IPV6_RTR_SOLICITS, "router_solicitations" }, 511 { CTL_INT, NET_IPV6_RTR_SOLICIT_INTERVAL, "router_solicitation_interval" }, 512 { CTL_INT, NET_IPV6_RTR_SOLICIT_DELAY, "router_solicitation_delay" }, 513 { CTL_INT, NET_IPV6_USE_TEMPADDR, "use_tempaddr" }, 514 { CTL_INT, NET_IPV6_TEMP_VALID_LFT, "temp_valid_lft" }, 515 { CTL_INT, NET_IPV6_TEMP_PREFERED_LFT, "temp_prefered_lft" }, 516 { CTL_INT, NET_IPV6_REGEN_MAX_RETRY, "regen_max_retry" }, 517 { CTL_INT, NET_IPV6_MAX_DESYNC_FACTOR, "max_desync_factor" }, 518 { CTL_INT, NET_IPV6_MAX_ADDRESSES, "max_addresses" }, 519 { CTL_INT, NET_IPV6_FORCE_MLD_VERSION, "force_mld_version" }, 520 { CTL_INT, NET_IPV6_ACCEPT_RA_DEFRTR, "accept_ra_defrtr" }, 521 { CTL_INT, NET_IPV6_ACCEPT_RA_PINFO, "accept_ra_pinfo" }, 522 { CTL_INT, NET_IPV6_ACCEPT_RA_RTR_PREF, "accept_ra_rtr_pref" }, 523 { CTL_INT, NET_IPV6_RTR_PROBE_INTERVAL, "router_probe_interval" }, 524 { CTL_INT, NET_IPV6_ACCEPT_RA_RT_INFO_MAX_PLEN, "accept_ra_rt_info_max_plen" }, 525 { CTL_INT, NET_IPV6_PROXY_NDP, "proxy_ndp" }, 526 { CTL_INT, NET_IPV6_ACCEPT_SOURCE_ROUTE, "accept_source_route" }, 527 {} 528}; 529 530static const struct bin_table bin_net_ipv6_conf_table[] = { 531 { CTL_DIR, NET_PROTO_CONF_ALL, "all", bin_net_ipv6_conf_var_table }, 532 { CTL_DIR, NET_PROTO_CONF_DEFAULT, "default", bin_net_ipv6_conf_var_table }, 533 { CTL_DIR, 0, NULL, bin_net_ipv6_conf_var_table }, 534 {} 535}; 536 537static const struct bin_table bin_net_ipv6_route_table[] = { 538 /* NET_IPV6_ROUTE_FLUSH "flush" no longer used */ 539 { CTL_INT, NET_IPV6_ROUTE_GC_THRESH, "gc_thresh" }, 540 { CTL_INT, NET_IPV6_ROUTE_MAX_SIZE, "max_size" }, 541 { CTL_INT, NET_IPV6_ROUTE_GC_MIN_INTERVAL, "gc_min_interval" }, 542 { CTL_INT, NET_IPV6_ROUTE_GC_TIMEOUT, "gc_timeout" }, 543 { CTL_INT, NET_IPV6_ROUTE_GC_INTERVAL, "gc_interval" }, 544 { CTL_INT, NET_IPV6_ROUTE_GC_ELASTICITY, "gc_elasticity" }, 545 { CTL_INT, NET_IPV6_ROUTE_MTU_EXPIRES, "mtu_expires" }, 546 { CTL_INT, NET_IPV6_ROUTE_MIN_ADVMSS, "min_adv_mss" }, 547 { CTL_INT, NET_IPV6_ROUTE_GC_MIN_INTERVAL_MS, "gc_min_interval_ms" }, 548 {} 549}; 550 551static const struct bin_table bin_net_ipv6_icmp_table[] = { 552 { CTL_INT, NET_IPV6_ICMP_RATELIMIT, "ratelimit" }, 553 {} 554}; 555 556static const struct bin_table bin_net_ipv6_table[] = { 557 { CTL_DIR, NET_IPV6_CONF, "conf", bin_net_ipv6_conf_table }, 558 { CTL_DIR, NET_IPV6_NEIGH, "neigh", bin_net_neigh_table }, 559 { CTL_DIR, NET_IPV6_ROUTE, "route", bin_net_ipv6_route_table }, 560 { CTL_DIR, NET_IPV6_ICMP, "icmp", bin_net_ipv6_icmp_table }, 561 { CTL_INT, NET_IPV6_BINDV6ONLY, "bindv6only" }, 562 { CTL_INT, NET_IPV6_IP6FRAG_HIGH_THRESH, "ip6frag_high_thresh" }, 563 { CTL_INT, NET_IPV6_IP6FRAG_LOW_THRESH, "ip6frag_low_thresh" }, 564 { CTL_INT, NET_IPV6_IP6FRAG_TIME, "ip6frag_time" }, 565 { CTL_INT, NET_IPV6_IP6FRAG_SECRET_INTERVAL, "ip6frag_secret_interval" }, 566 { CTL_INT, NET_IPV6_MLD_MAX_MSF, "mld_max_msf" }, 567 { CTL_INT, 2088 /* IPQ_QMAX */, "ip6_queue_maxlen" }, 568 {} 569}; 570 571static const struct bin_table bin_net_x25_table[] = { 572 { CTL_INT, NET_X25_RESTART_REQUEST_TIMEOUT, "restart_request_timeout" }, 573 { CTL_INT, NET_X25_CALL_REQUEST_TIMEOUT, "call_request_timeout" }, 574 { CTL_INT, NET_X25_RESET_REQUEST_TIMEOUT, "reset_request_timeout" }, 575 { CTL_INT, NET_X25_CLEAR_REQUEST_TIMEOUT, "clear_request_timeout" }, 576 { CTL_INT, NET_X25_ACK_HOLD_BACK_TIMEOUT, "acknowledgement_hold_back_timeout" }, 577 { CTL_INT, NET_X25_FORWARD, "x25_forward" }, 578 {} 579}; 580 581static const struct bin_table bin_net_tr_table[] = { 582 { CTL_INT, NET_TR_RIF_TIMEOUT, "rif_timeout" }, 583 {} 584}; 585 586 587static const struct bin_table bin_net_decnet_conf_vars[] = { 588 { CTL_INT, NET_DECNET_CONF_DEV_FORWARDING, "forwarding" }, 589 { CTL_INT, NET_DECNET_CONF_DEV_PRIORITY, "priority" }, 590 { CTL_INT, NET_DECNET_CONF_DEV_T2, "t2" }, 591 { CTL_INT, NET_DECNET_CONF_DEV_T3, "t3" }, 592 {} 593}; 594 595static const struct bin_table bin_net_decnet_conf[] = { 596 { CTL_DIR, NET_DECNET_CONF_ETHER, "ethernet", bin_net_decnet_conf_vars }, 597 { CTL_DIR, NET_DECNET_CONF_GRE, "ipgre", bin_net_decnet_conf_vars }, 598 { CTL_DIR, NET_DECNET_CONF_X25, "x25", bin_net_decnet_conf_vars }, 599 { CTL_DIR, NET_DECNET_CONF_PPP, "ppp", bin_net_decnet_conf_vars }, 600 { CTL_DIR, NET_DECNET_CONF_DDCMP, "ddcmp", bin_net_decnet_conf_vars }, 601 { CTL_DIR, NET_DECNET_CONF_LOOPBACK, "loopback", bin_net_decnet_conf_vars }, 602 { CTL_DIR, 0, NULL, bin_net_decnet_conf_vars }, 603 {} 604}; 605 606static const struct bin_table bin_net_decnet_table[] = { 607 { CTL_DIR, NET_DECNET_CONF, "conf", bin_net_decnet_conf }, 608 { CTL_DNADR, NET_DECNET_NODE_ADDRESS, "node_address" }, 609 { CTL_STR, NET_DECNET_NODE_NAME, "node_name" }, 610 { CTL_STR, NET_DECNET_DEFAULT_DEVICE, "default_device" }, 611 { CTL_INT, NET_DECNET_TIME_WAIT, "time_wait" }, 612 { CTL_INT, NET_DECNET_DN_COUNT, "dn_count" }, 613 { CTL_INT, NET_DECNET_DI_COUNT, "di_count" }, 614 { CTL_INT, NET_DECNET_DR_COUNT, "dr_count" }, 615 { CTL_INT, NET_DECNET_DST_GC_INTERVAL, "dst_gc_interval" }, 616 { CTL_INT, NET_DECNET_NO_FC_MAX_CWND, "no_fc_max_cwnd" }, 617 { CTL_INT, NET_DECNET_MEM, "decnet_mem" }, 618 { CTL_INT, NET_DECNET_RMEM, "decnet_rmem" }, 619 { CTL_INT, NET_DECNET_WMEM, "decnet_wmem" }, 620 { CTL_INT, NET_DECNET_DEBUG_LEVEL, "debug" }, 621 {} 622}; 623 624static const struct bin_table bin_net_sctp_table[] = { 625 { CTL_INT, NET_SCTP_RTO_INITIAL, "rto_initial" }, 626 { CTL_INT, NET_SCTP_RTO_MIN, "rto_min" }, 627 { CTL_INT, NET_SCTP_RTO_MAX, "rto_max" }, 628 { CTL_INT, NET_SCTP_RTO_ALPHA, "rto_alpha_exp_divisor" }, 629 { CTL_INT, NET_SCTP_RTO_BETA, "rto_beta_exp_divisor" }, 630 { CTL_INT, NET_SCTP_VALID_COOKIE_LIFE, "valid_cookie_life" }, 631 { CTL_INT, NET_SCTP_ASSOCIATION_MAX_RETRANS, "association_max_retrans" }, 632 { CTL_INT, NET_SCTP_PATH_MAX_RETRANS, "path_max_retrans" }, 633 { CTL_INT, NET_SCTP_MAX_INIT_RETRANSMITS, "max_init_retransmits" }, 634 { CTL_INT, NET_SCTP_HB_INTERVAL, "hb_interval" }, 635 { CTL_INT, NET_SCTP_PRESERVE_ENABLE, "cookie_preserve_enable" }, 636 { CTL_INT, NET_SCTP_MAX_BURST, "max_burst" }, 637 { CTL_INT, NET_SCTP_ADDIP_ENABLE, "addip_enable" }, 638 { CTL_INT, NET_SCTP_PRSCTP_ENABLE, "prsctp_enable" }, 639 { CTL_INT, NET_SCTP_SNDBUF_POLICY, "sndbuf_policy" }, 640 { CTL_INT, NET_SCTP_SACK_TIMEOUT, "sack_timeout" }, 641 { CTL_INT, NET_SCTP_RCVBUF_POLICY, "rcvbuf_policy" }, 642 {} 643}; 644 645static const struct bin_table bin_net_llc_llc2_timeout_table[] = { 646 { CTL_INT, NET_LLC2_ACK_TIMEOUT, "ack" }, 647 { CTL_INT, NET_LLC2_P_TIMEOUT, "p" }, 648 { CTL_INT, NET_LLC2_REJ_TIMEOUT, "rej" }, 649 { CTL_INT, NET_LLC2_BUSY_TIMEOUT, "busy" }, 650 {} 651}; 652 653static const struct bin_table bin_net_llc_station_table[] = { 654 { CTL_INT, NET_LLC_STATION_ACK_TIMEOUT, "ack_timeout" }, 655 {} 656}; 657 658static const struct bin_table bin_net_llc_llc2_table[] = { 659 { CTL_DIR, NET_LLC2, "timeout", bin_net_llc_llc2_timeout_table }, 660 {} 661}; 662 663static const struct bin_table bin_net_llc_table[] = { 664 { CTL_DIR, NET_LLC2, "llc2", bin_net_llc_llc2_table }, 665 { CTL_DIR, NET_LLC_STATION, "station", bin_net_llc_station_table }, 666 {} 667}; 668 669static const struct bin_table bin_net_netfilter_table[] = { 670 { CTL_INT, NET_NF_CONNTRACK_MAX, "nf_conntrack_max" }, 671 /* NET_NF_CONNTRACK_TCP_TIMEOUT_SYN_SENT "nf_conntrack_tcp_timeout_syn_sent" no longer used */ 672 /* NET_NF_CONNTRACK_TCP_TIMEOUT_SYN_RECV "nf_conntrack_tcp_timeout_syn_recv" no longer used */ 673 /* NET_NF_CONNTRACK_TCP_TIMEOUT_ESTABLISHED "nf_conntrack_tcp_timeout_established" no longer used */ 674 /* NET_NF_CONNTRACK_TCP_TIMEOUT_FIN_WAIT "nf_conntrack_tcp_timeout_fin_wait" no longer used */ 675 /* NET_NF_CONNTRACK_TCP_TIMEOUT_CLOSE_WAIT "nf_conntrack_tcp_timeout_close_wait" no longer used */ 676 /* NET_NF_CONNTRACK_TCP_TIMEOUT_LAST_ACK "nf_conntrack_tcp_timeout_last_ack" no longer used */ 677 /* NET_NF_CONNTRACK_TCP_TIMEOUT_TIME_WAIT "nf_conntrack_tcp_timeout_time_wait" no longer used */ 678 /* NET_NF_CONNTRACK_TCP_TIMEOUT_CLOSE "nf_conntrack_tcp_timeout_close" no longer used */ 679 /* NET_NF_CONNTRACK_UDP_TIMEOUT "nf_conntrack_udp_timeout" no longer used */ 680 /* NET_NF_CONNTRACK_UDP_TIMEOUT_STREAM "nf_conntrack_udp_timeout_stream" no longer used */ 681 /* NET_NF_CONNTRACK_ICMP_TIMEOUT "nf_conntrack_icmp_timeout" no longer used */ 682 /* NET_NF_CONNTRACK_GENERIC_TIMEOUT "nf_conntrack_generic_timeout" no longer used */ 683 { CTL_INT, NET_NF_CONNTRACK_BUCKETS, "nf_conntrack_buckets" }, 684 { CTL_INT, NET_NF_CONNTRACK_LOG_INVALID, "nf_conntrack_log_invalid" }, 685 /* NET_NF_CONNTRACK_TCP_TIMEOUT_MAX_RETRANS "nf_conntrack_tcp_timeout_max_retrans" no longer used */ 686 { CTL_INT, NET_NF_CONNTRACK_TCP_LOOSE, "nf_conntrack_tcp_loose" }, 687 { CTL_INT, NET_NF_CONNTRACK_TCP_BE_LIBERAL, "nf_conntrack_tcp_be_liberal" }, 688 { CTL_INT, NET_NF_CONNTRACK_TCP_MAX_RETRANS, "nf_conntrack_tcp_max_retrans" }, 689 /* NET_NF_CONNTRACK_SCTP_TIMEOUT_CLOSED "nf_conntrack_sctp_timeout_closed" no longer used */ 690 /* NET_NF_CONNTRACK_SCTP_TIMEOUT_COOKIE_WAIT "nf_conntrack_sctp_timeout_cookie_wait" no longer used */ 691 /* NET_NF_CONNTRACK_SCTP_TIMEOUT_COOKIE_ECHOED "nf_conntrack_sctp_timeout_cookie_echoed" no longer used */ 692 /* NET_NF_CONNTRACK_SCTP_TIMEOUT_ESTABLISHED "nf_conntrack_sctp_timeout_established" no longer used */ 693 /* NET_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_SENT "nf_conntrack_sctp_timeout_shutdown_sent" no longer used */ 694 /* NET_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_RECD "nf_conntrack_sctp_timeout_shutdown_recd" no longer used */ 695 /* NET_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_ACK_SENT "nf_conntrack_sctp_timeout_shutdown_ack_sent" no longer used */ 696 { CTL_INT, NET_NF_CONNTRACK_COUNT, "nf_conntrack_count" }, 697 /* NET_NF_CONNTRACK_ICMPV6_TIMEOUT "nf_conntrack_icmpv6_timeout" no longer used */ 698 /* NET_NF_CONNTRACK_FRAG6_TIMEOUT "nf_conntrack_frag6_timeout" no longer used */ 699 { CTL_INT, NET_NF_CONNTRACK_FRAG6_LOW_THRESH, "nf_conntrack_frag6_low_thresh" }, 700 { CTL_INT, NET_NF_CONNTRACK_FRAG6_HIGH_THRESH, "nf_conntrack_frag6_high_thresh" }, 701 { CTL_INT, NET_NF_CONNTRACK_CHECKSUM, "nf_conntrack_checksum" }, 702 703 {} 704}; 705 706static const struct bin_table bin_net_irda_table[] = { 707 { CTL_INT, NET_IRDA_DISCOVERY, "discovery" }, 708 { CTL_STR, NET_IRDA_DEVNAME, "devname" }, 709 { CTL_INT, NET_IRDA_DEBUG, "debug" }, 710 { CTL_INT, NET_IRDA_FAST_POLL, "fast_poll_increase" }, 711 { CTL_INT, NET_IRDA_DISCOVERY_SLOTS, "discovery_slots" }, 712 { CTL_INT, NET_IRDA_DISCOVERY_TIMEOUT, "discovery_timeout" }, 713 { CTL_INT, NET_IRDA_SLOT_TIMEOUT, "slot_timeout" }, 714 { CTL_INT, NET_IRDA_MAX_BAUD_RATE, "max_baud_rate" }, 715 { CTL_INT, NET_IRDA_MIN_TX_TURN_TIME, "min_tx_turn_time" }, 716 { CTL_INT, NET_IRDA_MAX_TX_DATA_SIZE, "max_tx_data_size" }, 717 { CTL_INT, NET_IRDA_MAX_TX_WINDOW, "max_tx_window" }, 718 { CTL_INT, NET_IRDA_MAX_NOREPLY_TIME, "max_noreply_time" }, 719 { CTL_INT, NET_IRDA_WARN_NOREPLY_TIME, "warn_noreply_time" }, 720 { CTL_INT, NET_IRDA_LAP_KEEPALIVE_TIME, "lap_keepalive_time" }, 721 {} 722}; 723 724static const struct bin_table bin_net_table[] = { 725 { CTL_DIR, NET_CORE, "core", bin_net_core_table }, 726 /* NET_ETHER not used */ 727 /* NET_802 not used */ 728 { CTL_DIR, NET_UNIX, "unix", bin_net_unix_table }, 729 { CTL_DIR, NET_IPV4, "ipv4", bin_net_ipv4_table }, 730 { CTL_DIR, NET_IPX, "ipx", bin_net_ipx_table }, 731 { CTL_DIR, NET_ATALK, "appletalk", bin_net_atalk_table }, 732 { CTL_DIR, NET_NETROM, "netrom", bin_net_netrom_table }, 733 { CTL_DIR, NET_AX25, "ax25", bin_net_ax25_table }, 734 /* NET_BRIDGE "bridge" no longer used */ 735 { CTL_DIR, NET_ROSE, "rose", bin_net_rose_table }, 736 { CTL_DIR, NET_IPV6, "ipv6", bin_net_ipv6_table }, 737 { CTL_DIR, NET_X25, "x25", bin_net_x25_table }, 738 { CTL_DIR, NET_TR, "token-ring", bin_net_tr_table }, 739 { CTL_DIR, NET_DECNET, "decnet", bin_net_decnet_table }, 740 /* NET_ECONET not used */ 741 { CTL_DIR, NET_SCTP, "sctp", bin_net_sctp_table }, 742 { CTL_DIR, NET_LLC, "llc", bin_net_llc_table }, 743 { CTL_DIR, NET_NETFILTER, "netfilter", bin_net_netfilter_table }, 744 /* NET_DCCP "dccp" no longer used */ 745 { CTL_DIR, NET_IRDA, "irda", bin_net_irda_table }, 746 { CTL_INT, 2089, "nf_conntrack_max" }, 747 {} 748}; 749 750static const struct bin_table bin_fs_quota_table[] = { 751 { CTL_INT, FS_DQ_LOOKUPS, "lookups" }, 752 { CTL_INT, FS_DQ_DROPS, "drops" }, 753 { CTL_INT, FS_DQ_READS, "reads" }, 754 { CTL_INT, FS_DQ_WRITES, "writes" }, 755 { CTL_INT, FS_DQ_CACHE_HITS, "cache_hits" }, 756 { CTL_INT, FS_DQ_ALLOCATED, "allocated_dquots" }, 757 { CTL_INT, FS_DQ_FREE, "free_dquots" }, 758 { CTL_INT, FS_DQ_SYNCS, "syncs" }, 759 { CTL_INT, FS_DQ_WARNINGS, "warnings" }, 760 {} 761}; 762 763static const struct bin_table bin_fs_xfs_table[] = { 764 { CTL_INT, XFS_SGID_INHERIT, "irix_sgid_inherit" }, 765 { CTL_INT, XFS_SYMLINK_MODE, "irix_symlink_mode" }, 766 { CTL_INT, XFS_PANIC_MASK, "panic_mask" }, 767 768 { CTL_INT, XFS_ERRLEVEL, "error_level" }, 769 { CTL_INT, XFS_SYNCD_TIMER, "xfssyncd_centisecs" }, 770 { CTL_INT, XFS_INHERIT_SYNC, "inherit_sync" }, 771 { CTL_INT, XFS_INHERIT_NODUMP, "inherit_nodump" }, 772 { CTL_INT, XFS_INHERIT_NOATIME, "inherit_noatime" }, 773 { CTL_INT, XFS_BUF_TIMER, "xfsbufd_centisecs" }, 774 { CTL_INT, XFS_BUF_AGE, "age_buffer_centisecs" }, 775 { CTL_INT, XFS_INHERIT_NOSYM, "inherit_nosymlinks" }, 776 { CTL_INT, XFS_ROTORSTEP, "rotorstep" }, 777 { CTL_INT, XFS_INHERIT_NODFRG, "inherit_nodefrag" }, 778 { CTL_INT, XFS_FILESTREAM_TIMER, "filestream_centisecs" }, 779 { CTL_INT, XFS_STATS_CLEAR, "stats_clear" }, 780 {} 781}; 782 783static const struct bin_table bin_fs_ocfs2_nm_table[] = { 784 { CTL_STR, 1, "hb_ctl_path" }, 785 {} 786}; 787 788static const struct bin_table bin_fs_ocfs2_table[] = { 789 { CTL_DIR, 1, "nm", bin_fs_ocfs2_nm_table }, 790 {} 791}; 792 793static const struct bin_table bin_inotify_table[] = { 794 { CTL_INT, INOTIFY_MAX_USER_INSTANCES, "max_user_instances" }, 795 { CTL_INT, INOTIFY_MAX_USER_WATCHES, "max_user_watches" }, 796 { CTL_INT, INOTIFY_MAX_QUEUED_EVENTS, "max_queued_events" }, 797 {} 798}; 799 800static const struct bin_table bin_fs_table[] = { 801 { CTL_INT, FS_NRINODE, "inode-nr" }, 802 { CTL_INT, FS_STATINODE, "inode-state" }, 803 /* FS_MAXINODE unused */ 804 /* FS_NRDQUOT unused */ 805 /* FS_MAXDQUOT unused */ 806 /* FS_NRFILE "file-nr" no longer used */ 807 { CTL_INT, FS_MAXFILE, "file-max" }, 808 { CTL_INT, FS_DENTRY, "dentry-state" }, 809 /* FS_NRSUPER unused */ 810 /* FS_MAXUPSER unused */ 811 { CTL_INT, FS_OVERFLOWUID, "overflowuid" }, 812 { CTL_INT, FS_OVERFLOWGID, "overflowgid" }, 813 { CTL_INT, FS_LEASES, "leases-enable" }, 814 { CTL_INT, FS_DIR_NOTIFY, "dir-notify-enable" }, 815 { CTL_INT, FS_LEASE_TIME, "lease-break-time" }, 816 { CTL_DIR, FS_DQSTATS, "quota", bin_fs_quota_table }, 817 { CTL_DIR, FS_XFS, "xfs", bin_fs_xfs_table }, 818 { CTL_ULONG, FS_AIO_NR, "aio-nr" }, 819 { CTL_ULONG, FS_AIO_MAX_NR, "aio-max-nr" }, 820 { CTL_DIR, FS_INOTIFY, "inotify", bin_inotify_table }, 821 { CTL_DIR, FS_OCFS2, "ocfs2", bin_fs_ocfs2_table }, 822 { CTL_INT, KERN_SETUID_DUMPABLE, "suid_dumpable" }, 823 {} 824}; 825 826static const struct bin_table bin_ipmi_table[] = { 827 { CTL_INT, DEV_IPMI_POWEROFF_POWERCYCLE, "poweroff_powercycle" }, 828 {} 829}; 830 831static const struct bin_table bin_mac_hid_files[] = { 832 /* DEV_MAC_HID_KEYBOARD_SENDS_LINUX_KEYCODES unused */ 833 /* DEV_MAC_HID_KEYBOARD_LOCK_KEYCODES unused */ 834 { CTL_INT, DEV_MAC_HID_MOUSE_BUTTON_EMULATION, "mouse_button_emulation" }, 835 { CTL_INT, DEV_MAC_HID_MOUSE_BUTTON2_KEYCODE, "mouse_button2_keycode" }, 836 { CTL_INT, DEV_MAC_HID_MOUSE_BUTTON3_KEYCODE, "mouse_button3_keycode" }, 837 /* DEV_MAC_HID_ADB_MOUSE_SENDS_KEYCODES unused */ 838 {} 839}; 840 841static const struct bin_table bin_raid_table[] = { 842 { CTL_INT, DEV_RAID_SPEED_LIMIT_MIN, "speed_limit_min" }, 843 { CTL_INT, DEV_RAID_SPEED_LIMIT_MAX, "speed_limit_max" }, 844 {} 845}; 846 847static const struct bin_table bin_scsi_table[] = { 848 { CTL_INT, DEV_SCSI_LOGGING_LEVEL, "logging_level" }, 849 {} 850}; 851 852static const struct bin_table bin_dev_table[] = { 853 /* DEV_CDROM "cdrom" no longer used */ 854 /* DEV_HWMON unused */ 855 /* DEV_PARPORT "parport" no longer used */ 856 { CTL_DIR, DEV_RAID, "raid", bin_raid_table }, 857 { CTL_DIR, DEV_MAC_HID, "mac_hid", bin_mac_hid_files }, 858 { CTL_DIR, DEV_SCSI, "scsi", bin_scsi_table }, 859 { CTL_DIR, DEV_IPMI, "ipmi", bin_ipmi_table }, 860 {} 861}; 862 863static const struct bin_table bin_bus_isa_table[] = { 864 { CTL_INT, BUS_ISA_MEM_BASE, "membase" }, 865 { CTL_INT, BUS_ISA_PORT_BASE, "portbase" }, 866 { CTL_INT, BUS_ISA_PORT_SHIFT, "portshift" }, 867 {} 868}; 869 870static const struct bin_table bin_bus_table[] = { 871 { CTL_DIR, CTL_BUS_ISA, "isa", bin_bus_isa_table }, 872 {} 873}; 874 875 876static const struct bin_table bin_s390dbf_table[] = { 877 { CTL_INT, 5678 /* CTL_S390DBF_STOPPABLE */, "debug_stoppable" }, 878 { CTL_INT, 5679 /* CTL_S390DBF_ACTIVE */, "debug_active" }, 879 {} 880}; 881 882static const struct bin_table bin_sunrpc_table[] = { 883 /* CTL_RPCDEBUG "rpc_debug" no longer used */ 884 /* CTL_NFSDEBUG "nfs_debug" no longer used */ 885 /* CTL_NFSDDEBUG "nfsd_debug" no longer used */ 886 /* CTL_NLMDEBUG "nlm_debug" no longer used */ 887 888 { CTL_INT, CTL_SLOTTABLE_UDP, "udp_slot_table_entries" }, 889 { CTL_INT, CTL_SLOTTABLE_TCP, "tcp_slot_table_entries" }, 890 { CTL_INT, CTL_MIN_RESVPORT, "min_resvport" }, 891 { CTL_INT, CTL_MAX_RESVPORT, "max_resvport" }, 892 {} 893}; 894 895static const struct bin_table bin_pm_table[] = { 896 /* frv specific */ 897 /* 1 == CTL_PM_SUSPEND "suspend" no longer used" */ 898 { CTL_INT, 2 /* CTL_PM_CMODE */, "cmode" }, 899 { CTL_INT, 3 /* CTL_PM_P0 */, "p0" }, 900 { CTL_INT, 4 /* CTL_PM_CM */, "cm" }, 901 {} 902}; 903 904static const struct bin_table bin_root_table[] = { 905 { CTL_DIR, CTL_KERN, "kernel", bin_kern_table }, 906 { CTL_DIR, CTL_VM, "vm", bin_vm_table }, 907 { CTL_DIR, CTL_NET, "net", bin_net_table }, 908 /* CTL_PROC not used */ 909 { CTL_DIR, CTL_FS, "fs", bin_fs_table }, 910 /* CTL_DEBUG "debug" no longer used */ 911 { CTL_DIR, CTL_DEV, "dev", bin_dev_table }, 912 { CTL_DIR, CTL_BUS, "bus", bin_bus_table }, 913 { CTL_DIR, CTL_ABI, "abi" }, 914 /* CTL_CPU not used */ 915 /* CTL_ARLAN "arlan" no longer used */ 916 { CTL_DIR, CTL_S390DBF, "s390dbf", bin_s390dbf_table }, 917 { CTL_DIR, CTL_SUNRPC, "sunrpc", bin_sunrpc_table }, 918 { CTL_DIR, CTL_PM, "pm", bin_pm_table }, 919 {} 920}; 921 922static ssize_t bin_dir(struct file *file, 923 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen) 924{ 925 return -ENOTDIR; 926} 927 928 929static ssize_t bin_string(struct file *file, 930 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen) 931{ 932 ssize_t result, copied = 0; 933 934 if (oldval && oldlen) { 935 char __user *lastp; 936 loff_t pos = 0; 937 int ch; 938 939 result = vfs_read(file, oldval, oldlen, &pos); 940 if (result < 0) 941 goto out; 942 943 copied = result; 944 lastp = oldval + copied - 1; 945 946 result = -EFAULT; 947 if (get_user(ch, lastp)) 948 goto out; 949 950 /* Trim off the trailing newline */ 951 if (ch == '\n') { 952 result = -EFAULT; 953 if (put_user('\0', lastp)) 954 goto out; 955 copied -= 1; 956 } 957 } 958 959 if (newval && newlen) { 960 loff_t pos = 0; 961 962 result = vfs_write(file, newval, newlen, &pos); 963 if (result < 0) 964 goto out; 965 } 966 967 result = copied; 968out: 969 return result; 970} 971 972static ssize_t bin_intvec(struct file *file, 973 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen) 974{ 975 mm_segment_t old_fs = get_fs(); 976 ssize_t copied = 0; 977 char *buffer; 978 ssize_t result; 979 980 result = -ENOMEM; 981 buffer = kmalloc(BUFSZ, GFP_KERNEL); 982 if (!buffer) 983 goto out; 984 985 if (oldval && oldlen) { 986 unsigned __user *vec = oldval; 987 size_t length = oldlen / sizeof(*vec); 988 loff_t pos = 0; 989 char *str, *end; 990 int i; 991 992 set_fs(KERNEL_DS); 993 result = vfs_read(file, buffer, BUFSZ - 1, &pos); 994 set_fs(old_fs); 995 if (result < 0) 996 goto out_kfree; 997 998 str = buffer; 999 end = str + result; 1000 *end++ = '\0'; 1001 for (i = 0; i < length; i++) { 1002 unsigned long value; 1003 1004 value = simple_strtoul(str, &str, 10); 1005 while (isspace(*str)) 1006 str++; 1007 1008 result = -EFAULT; 1009 if (put_user(value, vec + i)) 1010 goto out_kfree; 1011 1012 copied += sizeof(*vec); 1013 if (!isdigit(*str)) 1014 break; 1015 } 1016 } 1017 1018 if (newval && newlen) { 1019 unsigned __user *vec = newval; 1020 size_t length = newlen / sizeof(*vec); 1021 loff_t pos = 0; 1022 char *str, *end; 1023 int i; 1024 1025 str = buffer; 1026 end = str + BUFSZ; 1027 for (i = 0; i < length; i++) { 1028 unsigned long value; 1029 1030 result = -EFAULT; 1031 if (get_user(value, vec + i)) 1032 goto out_kfree; 1033 1034 str += snprintf(str, end - str, "%lu\t", value); 1035 } 1036 1037 set_fs(KERNEL_DS); 1038 result = vfs_write(file, buffer, str - buffer, &pos); 1039 set_fs(old_fs); 1040 if (result < 0) 1041 goto out_kfree; 1042 } 1043 result = copied; 1044out_kfree: 1045 kfree(buffer); 1046out: 1047 return result; 1048} 1049 1050static ssize_t bin_ulongvec(struct file *file, 1051 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen) 1052{ 1053 mm_segment_t old_fs = get_fs(); 1054 ssize_t copied = 0; 1055 char *buffer; 1056 ssize_t result; 1057 1058 result = -ENOMEM; 1059 buffer = kmalloc(BUFSZ, GFP_KERNEL); 1060 if (!buffer) 1061 goto out; 1062 1063 if (oldval && oldlen) { 1064 unsigned long __user *vec = oldval; 1065 size_t length = oldlen / sizeof(*vec); 1066 loff_t pos = 0; 1067 char *str, *end; 1068 int i; 1069 1070 set_fs(KERNEL_DS); 1071 result = vfs_read(file, buffer, BUFSZ - 1, &pos); 1072 set_fs(old_fs); 1073 if (result < 0) 1074 goto out_kfree; 1075 1076 str = buffer; 1077 end = str + result; 1078 *end++ = '\0'; 1079 for (i = 0; i < length; i++) { 1080 unsigned long value; 1081 1082 value = simple_strtoul(str, &str, 10); 1083 while (isspace(*str)) 1084 str++; 1085 1086 result = -EFAULT; 1087 if (put_user(value, vec + i)) 1088 goto out_kfree; 1089 1090 copied += sizeof(*vec); 1091 if (!isdigit(*str)) 1092 break; 1093 } 1094 } 1095 1096 if (newval && newlen) { 1097 unsigned long __user *vec = newval; 1098 size_t length = newlen / sizeof(*vec); 1099 loff_t pos = 0; 1100 char *str, *end; 1101 int i; 1102 1103 str = buffer; 1104 end = str + BUFSZ; 1105 for (i = 0; i < length; i++) { 1106 unsigned long value; 1107 1108 result = -EFAULT; 1109 if (get_user(value, vec + i)) 1110 goto out_kfree; 1111 1112 str += snprintf(str, end - str, "%lu\t", value); 1113 } 1114 1115 set_fs(KERNEL_DS); 1116 result = vfs_write(file, buffer, str - buffer, &pos); 1117 set_fs(old_fs); 1118 if (result < 0) 1119 goto out_kfree; 1120 } 1121 result = copied; 1122out_kfree: 1123 kfree(buffer); 1124out: 1125 return result; 1126} 1127 1128static unsigned hex_value(int ch) 1129{ 1130 return isdigit(ch) ? ch - '0' : ((ch | 0x20) - 'a') + 10; 1131} 1132 1133static ssize_t bin_uuid(struct file *file, 1134 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen) 1135{ 1136 mm_segment_t old_fs = get_fs(); 1137 ssize_t result, copied = 0; 1138 1139 /* Only supports reads */ 1140 if (oldval && oldlen) { 1141 loff_t pos = 0; 1142 char buf[40], *str = buf; 1143 unsigned char uuid[16]; 1144 int i; 1145 1146 set_fs(KERNEL_DS); 1147 result = vfs_read(file, buf, sizeof(buf) - 1, &pos); 1148 set_fs(old_fs); 1149 if (result < 0) 1150 goto out; 1151 1152 buf[result] = '\0'; 1153 1154 /* Convert the uuid to from a string to binary */ 1155 for (i = 0; i < 16; i++) { 1156 result = -EIO; 1157 if (!isxdigit(str[0]) || !isxdigit(str[1])) 1158 goto out; 1159 1160 uuid[i] = (hex_value(str[0]) << 4) | hex_value(str[1]); 1161 str += 2; 1162 if (*str == '-') 1163 str++; 1164 } 1165 1166 if (oldlen > 16) 1167 oldlen = 16; 1168 1169 result = -EFAULT; 1170 if (copy_to_user(oldval, uuid, oldlen)) 1171 goto out; 1172 1173 copied = oldlen; 1174 } 1175 result = copied; 1176out: 1177 return result; 1178} 1179 1180static ssize_t bin_dn_node_address(struct file *file, 1181 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen) 1182{ 1183 mm_segment_t old_fs = get_fs(); 1184 ssize_t result, copied = 0; 1185 1186 if (oldval && oldlen) { 1187 loff_t pos = 0; 1188 char buf[15], *nodep; 1189 unsigned long area, node; 1190 __le16 dnaddr; 1191 1192 set_fs(KERNEL_DS); 1193 result = vfs_read(file, buf, sizeof(buf) - 1, &pos); 1194 set_fs(old_fs); 1195 if (result < 0) 1196 goto out; 1197 1198 buf[result] = '\0'; 1199 1200 /* Convert the decnet addresss to binary */ 1201 result = -EIO; 1202 nodep = strchr(buf, '.') + 1; 1203 if (!nodep) 1204 goto out; 1205 1206 area = simple_strtoul(buf, NULL, 10); 1207 node = simple_strtoul(nodep, NULL, 10); 1208 1209 result = -EIO; 1210 if ((area > 63)||(node > 1023)) 1211 goto out; 1212 1213 dnaddr = cpu_to_le16((area << 10) | node); 1214 1215 result = -EFAULT; 1216 if (put_user(dnaddr, (__le16 __user *)oldval)) 1217 goto out; 1218 1219 copied = sizeof(dnaddr); 1220 } 1221 1222 if (newval && newlen) { 1223 loff_t pos = 0; 1224 __le16 dnaddr; 1225 char buf[15]; 1226 int len; 1227 1228 result = -EINVAL; 1229 if (newlen != sizeof(dnaddr)) 1230 goto out; 1231 1232 result = -EFAULT; 1233 if (get_user(dnaddr, (__le16 __user *)newval)) 1234 goto out; 1235 1236 len = snprintf(buf, sizeof(buf), "%hu.%hu", 1237 le16_to_cpu(dnaddr) >> 10, 1238 le16_to_cpu(dnaddr) & 0x3ff); 1239 1240 set_fs(KERNEL_DS); 1241 result = vfs_write(file, buf, len, &pos); 1242 set_fs(old_fs); 1243 if (result < 0) 1244 goto out; 1245 } 1246 1247 result = copied; 1248out: 1249 return result; 1250} 1251 1252static const struct bin_table *get_sysctl(const int *name, int nlen, char *path) 1253{ 1254 const struct bin_table *table = &bin_root_table[0]; 1255 int ctl_name; 1256 1257 /* The binary sysctl tables have a small maximum depth so 1258 * there is no danger of overflowing our path as it PATH_MAX 1259 * bytes long. 1260 */ 1261 memcpy(path, "sys/", 4); 1262 path += 4; 1263 1264repeat: 1265 if (!nlen) 1266 return ERR_PTR(-ENOTDIR); 1267 ctl_name = *name; 1268 name++; 1269 nlen--; 1270 for ( ; table->convert; table++) { 1271 int len = 0; 1272 1273 /* 1274 * For a wild card entry map from ifindex to network 1275 * device name. 1276 */ 1277 if (!table->ctl_name) { 1278#ifdef CONFIG_NET 1279 struct net *net = current->nsproxy->net_ns; 1280 struct net_device *dev; 1281 dev = dev_get_by_index(net, ctl_name); 1282 if (dev) { 1283 len = strlen(dev->name); 1284 memcpy(path, dev->name, len); 1285 dev_put(dev); 1286 } 1287#endif 1288 /* Use the well known sysctl number to proc name mapping */ 1289 } else if (ctl_name == table->ctl_name) { 1290 len = strlen(table->procname); 1291 memcpy(path, table->procname, len); 1292 } 1293 if (len) { 1294 path += len; 1295 if (table->child) { 1296 *path++ = '/'; 1297 table = table->child; 1298 goto repeat; 1299 } 1300 *path = '\0'; 1301 return table; 1302 } 1303 } 1304 return ERR_PTR(-ENOTDIR); 1305} 1306 1307static char *sysctl_getname(const int *name, int nlen, const struct bin_table **tablep) 1308{ 1309 char *tmp, *result; 1310 1311 result = ERR_PTR(-ENOMEM); 1312 tmp = __getname(); 1313 if (tmp) { 1314 const struct bin_table *table = get_sysctl(name, nlen, tmp); 1315 result = tmp; 1316 *tablep = table; 1317 if (IS_ERR(table)) { 1318 __putname(tmp); 1319 result = ERR_CAST(table); 1320 } 1321 } 1322 return result; 1323} 1324 1325static ssize_t binary_sysctl(const int *name, int nlen, 1326 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen) 1327{ 1328 const struct bin_table *table = NULL; 1329 struct nameidata nd; 1330 struct vfsmount *mnt; 1331 struct file *file; 1332 ssize_t result; 1333 char *pathname; 1334 int flags; 1335 int acc_mode; 1336 1337 pathname = sysctl_getname(name, nlen, &table); 1338 result = PTR_ERR(pathname); 1339 if (IS_ERR(pathname)) 1340 goto out; 1341 1342 /* How should the sysctl be accessed? */ 1343 if (oldval && oldlen && newval && newlen) { 1344 flags = O_RDWR; 1345 acc_mode = MAY_READ | MAY_WRITE; 1346 } else if (newval && newlen) { 1347 flags = O_WRONLY; 1348 acc_mode = MAY_WRITE; 1349 } else if (oldval && oldlen) { 1350 flags = O_RDONLY; 1351 acc_mode = MAY_READ; 1352 } else { 1353 result = 0; 1354 goto out_putname; 1355 } 1356 1357 mnt = current->nsproxy->pid_ns->proc_mnt; 1358 result = vfs_path_lookup(mnt->mnt_root, mnt, pathname, 0, &nd); 1359 if (result) 1360 goto out_putname; 1361 1362 result = may_open(&nd.path, acc_mode, flags); 1363 if (result) 1364 goto out_putpath; 1365 1366 file = dentry_open(nd.path.dentry, nd.path.mnt, flags, current_cred()); 1367 result = PTR_ERR(file); 1368 if (IS_ERR(file)) 1369 goto out_putname; 1370 1371 result = table->convert(file, oldval, oldlen, newval, newlen); 1372 1373 fput(file); 1374out_putname: 1375 putname(pathname); 1376out: 1377 return result; 1378 1379out_putpath: 1380 path_put(&nd.path); 1381 goto out_putname; 1382} 1383 1384 1385#else /* CONFIG_SYSCTL_SYSCALL */ 1386 1387static ssize_t binary_sysctl(const int *name, int nlen, 1388 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen) 1389{ 1390 return -ENOSYS; 1391} 1392 1393#endif /* CONFIG_SYSCTL_SYSCALL */ 1394 1395 1396static void deprecated_sysctl_warning(const int *name, int nlen) 1397{ 1398 int i; 1399 1400 /* 1401 * CTL_KERN/KERN_VERSION is used by older glibc and cannot 1402 * ever go away. 1403 */ 1404 if (name[0] == CTL_KERN && name[1] == KERN_VERSION) 1405 return; 1406 1407 if (printk_ratelimit()) { 1408 printk(KERN_INFO 1409 "warning: process `%s' used the deprecated sysctl " 1410 "system call with ", current->comm); 1411 for (i = 0; i < nlen; i++) 1412 printk("%d.", name[i]); 1413 printk("\n"); 1414 } 1415 return; 1416} 1417 1418#define WARN_ONCE_HASH_BITS 8 1419#define WARN_ONCE_HASH_SIZE (1<<WARN_ONCE_HASH_BITS) 1420 1421static DECLARE_BITMAP(warn_once_bitmap, WARN_ONCE_HASH_SIZE); 1422 1423#define FNV32_OFFSET 2166136261U 1424#define FNV32_PRIME 0x01000193 1425 1426/* 1427 * Print each legacy sysctl (approximately) only once. 1428 * To avoid making the tables non-const use a external 1429 * hash-table instead. 1430 * Worst case hash collision: 6, but very rarely. 1431 * NOTE! We don't use the SMP-safe bit tests. We simply 1432 * don't care enough. 1433 */ 1434static void warn_on_bintable(const int *name, int nlen) 1435{ 1436 int i; 1437 u32 hash = FNV32_OFFSET; 1438 1439 for (i = 0; i < nlen; i++) 1440 hash = (hash ^ name[i]) * FNV32_PRIME; 1441 hash %= WARN_ONCE_HASH_SIZE; 1442 if (__test_and_set_bit(hash, warn_once_bitmap)) 1443 return; 1444 deprecated_sysctl_warning(name, nlen); 1445} 1446 1447static ssize_t do_sysctl(int __user *args_name, int nlen, 1448 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen) 1449{ 1450 int name[CTL_MAXNAME]; 1451 int i; 1452 1453 /* Check args->nlen. */ 1454 if (nlen < 0 || nlen > CTL_MAXNAME) 1455 return -ENOTDIR; 1456 /* Read in the sysctl name for simplicity */ 1457 for (i = 0; i < nlen; i++) 1458 if (get_user(name[i], args_name + i)) 1459 return -EFAULT; 1460 1461 warn_on_bintable(name, nlen); 1462 1463 return binary_sysctl(name, nlen, oldval, oldlen, newval, newlen); 1464} 1465 1466SYSCALL_DEFINE1(sysctl, struct __sysctl_args __user *, args) 1467{ 1468 struct __sysctl_args tmp; 1469 size_t oldlen = 0; 1470 ssize_t result; 1471 1472 if (copy_from_user(&tmp, args, sizeof(tmp))) 1473 return -EFAULT; 1474 1475 if (tmp.oldval && !tmp.oldlenp) 1476 return -EFAULT; 1477 1478 if (tmp.oldlenp && get_user(oldlen, tmp.oldlenp)) 1479 return -EFAULT; 1480 1481 result = do_sysctl(tmp.name, tmp.nlen, tmp.oldval, oldlen, 1482 tmp.newval, tmp.newlen); 1483 1484 if (result >= 0) { 1485 oldlen = result; 1486 result = 0; 1487 } 1488 1489 if (tmp.oldlenp && put_user(oldlen, tmp.oldlenp)) 1490 return -EFAULT; 1491 1492 return result; 1493} 1494 1495 1496#ifdef CONFIG_COMPAT 1497#include <asm/compat.h> 1498 1499struct compat_sysctl_args { 1500 compat_uptr_t name; 1501 int nlen; 1502 compat_uptr_t oldval; 1503 compat_uptr_t oldlenp; 1504 compat_uptr_t newval; 1505 compat_size_t newlen; 1506 compat_ulong_t __unused[4]; 1507}; 1508 1509asmlinkage long compat_sys_sysctl(struct compat_sysctl_args __user *args) 1510{ 1511 struct compat_sysctl_args tmp; 1512 compat_size_t __user *compat_oldlenp; 1513 size_t oldlen = 0; 1514 ssize_t result; 1515 1516 if (copy_from_user(&tmp, args, sizeof(tmp))) 1517 return -EFAULT; 1518 1519 if (tmp.oldval && !tmp.oldlenp) 1520 return -EFAULT; 1521 1522 compat_oldlenp = compat_ptr(tmp.oldlenp); 1523 if (compat_oldlenp && get_user(oldlen, compat_oldlenp)) 1524 return -EFAULT; 1525 1526 result = do_sysctl(compat_ptr(tmp.name), tmp.nlen, 1527 compat_ptr(tmp.oldval), oldlen, 1528 compat_ptr(tmp.newval), tmp.newlen); 1529 1530 if (result >= 0) { 1531 oldlen = result; 1532 result = 0; 1533 } 1534 1535 if (compat_oldlenp && put_user(oldlen, compat_oldlenp)) 1536 return -EFAULT; 1537 1538 return result; 1539} 1540 1541#endif /* CONFIG_COMPAT */