[linux.git] / net / ipv6 / sysctl_net_ipv6.c

// SPDX-License-Identifier: GPL-2.0
/*
 * sysctl_net_ipv6.c: sysctl interface to net IPV6 subsystem.
 *
 * Changes:
 * YOSHIFUJI Hideaki @USAGI:	added icmp sysctl table.
 */

#include <linux/mm.h>
#include <linux/sysctl.h>
#include <linux/in6.h>
#include <linux/ipv6.h>
#include <linux/slab.h>
#include <linux/export.h>
#include <net/ndisc.h>
#include <net/ipv6.h>
#include <net/addrconf.h>
#include <net/inet_frag.h>
#include <net/netevent.h>
#ifdef CONFIG_NETLABEL
#include <net/calipso.h>
#endif

static int two = 2;
static int flowlabel_reflect_max = 0x7;
static int auto_flowlabels_min;
static int auto_flowlabels_max = IP6_AUTO_FLOW_LABEL_MAX;

static int proc_rt6_multipath_hash_policy(struct ctl_table *table, int write,
					  void *buffer, size_t *lenp, loff_t *ppos)
{
	struct net *net;
	int ret;

	net = container_of(table->data, struct net,
			   ipv6.sysctl.multipath_hash_policy);
	ret = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
	if (write && ret == 0)
		call_netevent_notifiers(NETEVENT_IPV6_MPATH_HASH_UPDATE, net);

	return ret;
}

static struct ctl_table ipv6_table_template[] = {
	{
		.procname	= "bindv6only",
		.data		= &init_net.ipv6.sysctl.bindv6only,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "anycast_src_echo_reply",
		.data		= &init_net.ipv6.sysctl.anycast_src_echo_reply,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "flowlabel_consistency",
		.data		= &init_net.ipv6.sysctl.flowlabel_consistency,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "auto_flowlabels",
		.data		= &init_net.ipv6.sysctl.auto_flowlabels,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= &auto_flowlabels_min,
		.extra2		= &auto_flowlabels_max
	},
	{
		.procname	= "fwmark_reflect",
		.data		= &init_net.ipv6.sysctl.fwmark_reflect,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "idgen_retries",
		.data		= &init_net.ipv6.sysctl.idgen_retries,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec,
	},
	{
		.procname	= "idgen_delay",
		.data		= &init_net.ipv6.sysctl.idgen_delay,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec_jiffies,
	},
	{
		.procname	= "flowlabel_state_ranges",
		.data		= &init_net.ipv6.sysctl.flowlabel_state_ranges,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "ip_nonlocal_bind",
		.data		= &init_net.ipv6.sysctl.ip_nonlocal_bind,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "flowlabel_reflect",
		.data		= &init_net.ipv6.sysctl.flowlabel_reflect,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= SYSCTL_ZERO,
		.extra2		= &flowlabel_reflect_max,
	},
	{
		.procname	= "max_dst_opts_number",
		.data		= &init_net.ipv6.sysctl.max_dst_opts_cnt,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "max_hbh_opts_number",
		.data		= &init_net.ipv6.sysctl.max_hbh_opts_cnt,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "max_dst_opts_length",
		.data		= &init_net.ipv6.sysctl.max_dst_opts_len,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "max_hbh_length",
		.data		= &init_net.ipv6.sysctl.max_hbh_opts_len,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "fib_multipath_hash_policy",
		.data		= &init_net.ipv6.sysctl.multipath_hash_policy,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler   = proc_rt6_multipath_hash_policy,
		.extra1		= SYSCTL_ZERO,
		.extra2		= &two,
	},
	{
		.procname	= "seg6_flowlabel",
		.data		= &init_net.ipv6.sysctl.seg6_flowlabel,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "fib_notify_on_flag_change",
		.data		= &init_net.ipv6.sysctl.fib_notify_on_flag_change,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec_minmax,
		.extra1         = SYSCTL_ZERO,
		.extra2         = &two,
	},
	{ }
};

static struct ctl_table ipv6_rotable[] = {
	{
		.procname	= "mld_max_msf",
		.data		= &sysctl_mld_max_msf,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec
	},
	{
		.procname	= "mld_qrv",
		.data		= &sysctl_mld_qrv,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= SYSCTL_ONE
	},
#ifdef CONFIG_NETLABEL
	{
		.procname	= "calipso_cache_enable",
		.data		= &calipso_cache_enabled,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec,
	},
	{
		.procname	= "calipso_cache_bucket_size",
		.data		= &calipso_cache_bucketsize,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_dointvec,
	},
#endif /* CONFIG_NETLABEL */
	{ }
};

static int __net_init ipv6_sysctl_net_init(struct net *net)
{
	struct ctl_table *ipv6_table;
	struct ctl_table *ipv6_route_table;
	struct ctl_table *ipv6_icmp_table;
	int err, i;

	err = -ENOMEM;
	ipv6_table = kmemdup(ipv6_table_template, sizeof(ipv6_table_template),
			     GFP_KERNEL);
	if (!ipv6_table)
		goto out;
	/* Update the variables to point into the current struct net */
	for (i = 0; i < ARRAY_SIZE(ipv6_table_template) - 1; i++)
		ipv6_table[i].data += (void *)net - (void *)&init_net;

	ipv6_route_table = ipv6_route_sysctl_init(net);
	if (!ipv6_route_table)
		goto out_ipv6_table;

	ipv6_icmp_table = ipv6_icmp_sysctl_init(net);
	if (!ipv6_icmp_table)
		goto out_ipv6_route_table;

	net->ipv6.sysctl.hdr = register_net_sysctl(net, "net/ipv6", ipv6_table);
	if (!net->ipv6.sysctl.hdr)
		goto out_ipv6_icmp_table;

	net->ipv6.sysctl.route_hdr =
		register_net_sysctl(net, "net/ipv6/route", ipv6_route_table);
	if (!net->ipv6.sysctl.route_hdr)
		goto out_unregister_ipv6_table;

	net->ipv6.sysctl.icmp_hdr =
		register_net_sysctl(net, "net/ipv6/icmp", ipv6_icmp_table);
	if (!net->ipv6.sysctl.icmp_hdr)
		goto out_unregister_route_table;

	err = 0;
out:
	return err;
out_unregister_route_table:
	unregister_net_sysctl_table(net->ipv6.sysctl.route_hdr);
out_unregister_ipv6_table:
	unregister_net_sysctl_table(net->ipv6.sysctl.hdr);
out_ipv6_icmp_table:
	kfree(ipv6_icmp_table);
out_ipv6_route_table:
	kfree(ipv6_route_table);
out_ipv6_table:
	kfree(ipv6_table);
	goto out;
}

static void __net_exit ipv6_sysctl_net_exit(struct net *net)
{
	struct ctl_table *ipv6_table;
	struct ctl_table *ipv6_route_table;
	struct ctl_table *ipv6_icmp_table;

	ipv6_table = net->ipv6.sysctl.hdr->ctl_table_arg;
	ipv6_route_table = net->ipv6.sysctl.route_hdr->ctl_table_arg;
	ipv6_icmp_table = net->ipv6.sysctl.icmp_hdr->ctl_table_arg;

	unregister_net_sysctl_table(net->ipv6.sysctl.icmp_hdr);
	unregister_net_sysctl_table(net->ipv6.sysctl.route_hdr);
	unregister_net_sysctl_table(net->ipv6.sysctl.hdr);

	kfree(ipv6_table);
	kfree(ipv6_route_table);
	kfree(ipv6_icmp_table);
}

static struct pernet_operations ipv6_sysctl_net_ops = {
	.init = ipv6_sysctl_net_init,
	.exit = ipv6_sysctl_net_exit,
};

static struct ctl_table_header *ip6_header;

int ipv6_sysctl_register(void)
{
	int err = -ENOMEM;

	ip6_header = register_net_sysctl(&init_net, "net/ipv6", ipv6_rotable);
	if (!ip6_header)
		goto out;

	err = register_pernet_subsys(&ipv6_sysctl_net_ops);
	if (err)
		goto err_pernet;
out:
	return err;

err_pernet:
	unregister_net_sysctl_table(ip6_header);
	goto out;
}

void ipv6_sysctl_unregister(void)
{
	unregister_net_sysctl_table(ip6_header);
	unregister_pernet_subsys(&ipv6_sysctl_net_ops);
}
Commit	Line	Data
b2441318	1	// SPDX-License-Identifier: GPL-2.0
1da177e4 LT	2	/*
	3	* sysctl_net_ipv6.c: sysctl interface to net IPV6 subsystem.
	4	*
	5	* Changes:
	6	* YOSHIFUJI Hideaki @USAGI: added icmp sysctl table.
	7	*/
	8
	9	#include <linux/mm.h>
	10	#include <linux/sysctl.h>
1da177e4 LT	11	#include <linux/in6.h>
1da177e4 LT	12	#include <linux/ipv6.h>
5a0e3ad6	13	#include <linux/slab.h>
bc3b2d7f	14	#include <linux/export.h>
1da177e4 LT	15	#include <net/ndisc.h>
	16	#include <net/ipv6.h>
	17	#include <net/addrconf.h>
04128f23	18	#include <net/inet_frag.h>
b4bac172	19	#include <net/netevent.h>
4fee5242 HD	20	#ifdef CONFIG_NETLABEL
	21	#include <net/calipso.h>
	22	#endif
1da177e4	23
05d44871	24	static int two = 2;
a346abe0	25	static int flowlabel_reflect_max = 0x7;
42240901 TH	26	static int auto_flowlabels_min;
	27	static int auto_flowlabels_max = IP6_AUTO_FLOW_LABEL_MAX;
	28
b4bac172	29	static int proc_rt6_multipath_hash_policy(struct ctl_table *table, int write,
32927393	30	void buffer, size_t lenp, loff_t *ppos)
b4bac172 DA	31	{
	32	struct net *net;
	33	int ret;
	34
	35	net = container_of(table->data, struct net,
	36	ipv6.sysctl.multipath_hash_policy);
	37	ret = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
	38	if (write && ret == 0)
	39	call_netevent_notifiers(NETEVENT_IPV6_MPATH_HASH_UPDATE, net);
	40
	41	return ret;
	42	}
2f711939	43
fe2c6338	44	static struct ctl_table ipv6_table_template[] = {
1da177e4	45	{
1da177e4	46	.procname = "bindv6only",
99bc9c4e	47	.data = &init_net.ipv6.sysctl.bindv6only,
1da177e4 LT	48	.maxlen = sizeof(int),
1da177e4 LT	49	.mode = 0644,
6d9f239a	50	.proc_handler = proc_dointvec
1da177e4	51	},
509aba3b FLB	52	{
509aba3b FLB	53	.procname = "anycast_src_echo_reply",
ec35b61e	54	.data = &init_net.ipv6.sysctl.anycast_src_echo_reply,
509aba3b FLB	55	.maxlen = sizeof(int),
	56	.mode = 0644,
	57	.proc_handler = proc_dointvec
	58	},
6444f72b FF	59	{
	60	.procname = "flowlabel_consistency",
	61	.data = &init_net.ipv6.sysctl.flowlabel_consistency,
	62	.maxlen = sizeof(int),
	63	.mode = 0644,
	64	.proc_handler = proc_dointvec
	65	},
cb1ce2ef TH	66	{
	67	.procname = "auto_flowlabels",
	68	.data = &init_net.ipv6.sysctl.auto_flowlabels,
	69	.maxlen = sizeof(int),
	70	.mode = 0644,
42240901 TH	71	.proc_handler = proc_dointvec_minmax,
	72	.extra1 = &auto_flowlabels_min,
	73	.extra2 = &auto_flowlabels_max
cb1ce2ef	74	},
e110861f LC	75	{
	76	.procname = "fwmark_reflect",
	77	.data = &init_net.ipv6.sysctl.fwmark_reflect,
	78	.maxlen = sizeof(int),
	79	.mode = 0644,
	80	.proc_handler = proc_dointvec
	81	},
1855b7c3 HFS	82	{
	83	.procname = "idgen_retries",
	84	.data = &init_net.ipv6.sysctl.idgen_retries,
	85	.maxlen = sizeof(int),
	86	.mode = 0644,
	87	.proc_handler = proc_dointvec,
	88	},
	89	{
	90	.procname = "idgen_delay",
	91	.data = &init_net.ipv6.sysctl.idgen_delay,
	92	.maxlen = sizeof(int),
	93	.mode = 0644,
	94	.proc_handler = proc_dointvec_jiffies,
	95	},
82a584b7 TH	96	{
	97	.procname = "flowlabel_state_ranges",
	98	.data = &init_net.ipv6.sysctl.flowlabel_state_ranges,
	99	.maxlen = sizeof(int),
	100	.mode = 0644,
	101	.proc_handler = proc_dointvec
	102	},
35a256fe TH	103	{
	104	.procname = "ip_nonlocal_bind",
	105	.data = &init_net.ipv6.sysctl.ip_nonlocal_bind,
	106	.maxlen = sizeof(int),
	107	.mode = 0644,
	108	.proc_handler = proc_dointvec
	109	},
22b6722b JS	110	{
	111	.procname = "flowlabel_reflect",
	112	.data = &init_net.ipv6.sysctl.flowlabel_reflect,
	113	.maxlen = sizeof(int),
	114	.mode = 0644,
00dc3307	115	.proc_handler = proc_dointvec_minmax,
eec4844f	116	.extra1 = SYSCTL_ZERO,
a346abe0	117	.extra2 = &flowlabel_reflect_max,
22b6722b	118	},
47d3d7ac TH	119	{
	120	.procname = "max_dst_opts_number",
	121	.data = &init_net.ipv6.sysctl.max_dst_opts_cnt,
	122	.maxlen = sizeof(int),
	123	.mode = 0644,
	124	.proc_handler = proc_dointvec
	125	},
	126	{
	127	.procname = "max_hbh_opts_number",
	128	.data = &init_net.ipv6.sysctl.max_hbh_opts_cnt,
	129	.maxlen = sizeof(int),
	130	.mode = 0644,
	131	.proc_handler = proc_dointvec
	132	},
	133	{
	134	.procname = "max_dst_opts_length",
	135	.data = &init_net.ipv6.sysctl.max_dst_opts_len,
	136	.maxlen = sizeof(int),
	137	.mode = 0644,
	138	.proc_handler = proc_dointvec
	139	},
	140	{
	141	.procname = "max_hbh_length",
	142	.data = &init_net.ipv6.sysctl.max_hbh_opts_len,
	143	.maxlen = sizeof(int),
	144	.mode = 0644,
	145	.proc_handler = proc_dointvec
	146	},
b4bac172 DA	147	{
	148	.procname = "fib_multipath_hash_policy",
	149	.data = &init_net.ipv6.sysctl.multipath_hash_policy,
	150	.maxlen = sizeof(int),
	151	.mode = 0644,
	152	.proc_handler = proc_rt6_multipath_hash_policy,
eec4844f	153	.extra1 = SYSCTL_ZERO,
05d44871	154	.extra2 = &two,
b4bac172	155	},
b5facfdb AA	156	{
	157	.procname = "seg6_flowlabel",
	158	.data = &init_net.ipv6.sysctl.seg6_flowlabel,
	159	.maxlen = sizeof(int),
	160	.mode = 0644,
	161	.proc_handler = proc_dointvec
	162	},
907eea48 AC	163	{
	164	.procname = "fib_notify_on_flag_change",
	165	.data = &init_net.ipv6.sysctl.fib_notify_on_flag_change,
	166	.maxlen = sizeof(int),
	167	.mode = 0644,
	168	.proc_handler = proc_dointvec_minmax,
	169	.extra1 = SYSCTL_ZERO,
6fad361a	170	.extra2 = &two,
907eea48	171	},
f8572d8f	172	{ }
34ac2573 PE	173	};
34ac2573 PE	174
fe2c6338	175	static struct ctl_table ipv6_rotable[] = {
1da177e4	176	{
1da177e4 LT	177	.procname = "mld_max_msf",
	178	.data = &sysctl_mld_max_msf,
	179	.maxlen = sizeof(int),
	180	.mode = 0644,
6d9f239a	181	.proc_handler = proc_dointvec
1da177e4	182	},
2f711939 HFS	183	{
	184	.procname = "mld_qrv",
	185	.data = &sysctl_mld_qrv,
	186	.maxlen = sizeof(int),
	187	.mode = 0644,
	188	.proc_handler = proc_dointvec_minmax,
eec4844f	189	.extra1 = SYSCTL_ONE
2f711939	190	},
4fee5242 HD	191	#ifdef CONFIG_NETLABEL
	192	{
	193	.procname = "calipso_cache_enable",
	194	.data = &calipso_cache_enabled,
	195	.maxlen = sizeof(int),
	196	.mode = 0644,
	197	.proc_handler = proc_dointvec,
	198	},
	199	{
	200	.procname = "calipso_cache_bucket_size",
	201	.data = &calipso_cache_bucketsize,
	202	.maxlen = sizeof(int),
	203	.mode = 0644,
	204	.proc_handler = proc_dointvec,
	205	},
	206	#endif /* CONFIG_NETLABEL */
f8572d8f	207	{ }
1da177e4 LT	208	};
1da177e4 LT	209
2c8c1e72	210	static int __net_init ipv6_sysctl_net_init(struct net *net)
1da177e4	211	{
760f2d01 DL	212	struct ctl_table *ipv6_table;
	213	struct ctl_table *ipv6_route_table;
	214	struct ctl_table *ipv6_icmp_table;
d2f7e56d	215	int err, i;
760f2d01 DL	216
	217	err = -ENOMEM;
	218	ipv6_table = kmemdup(ipv6_table_template, sizeof(ipv6_table_template),
	219	GFP_KERNEL);
	220	if (!ipv6_table)
	221	goto out;
d2f7e56d CZ	222	/* Update the variables to point into the current struct net */
	223	for (i = 0; i < ARRAY_SIZE(ipv6_table_template) - 1; i++)
	224	ipv6_table[i].data += (void )net - (void )&init_net;
760f2d01 DL	225
	226	ipv6_route_table = ipv6_route_sysctl_init(net);
	227	if (!ipv6_route_table)
	228	goto out_ipv6_table;
	229
	230	ipv6_icmp_table = ipv6_icmp_sysctl_init(net);
	231	if (!ipv6_icmp_table)
	232	goto out_ipv6_route_table;
760f2d01	233
6dceb036 EB	234	net->ipv6.sysctl.hdr = register_net_sysctl(net, "net/ipv6", ipv6_table);
6dceb036 EB	235	if (!net->ipv6.sysctl.hdr)
760f2d01 DL	236	goto out_ipv6_icmp_table;
760f2d01 DL	237
6dceb036 EB	238	net->ipv6.sysctl.route_hdr =
	239	register_net_sysctl(net, "net/ipv6/route", ipv6_route_table);
	240	if (!net->ipv6.sysctl.route_hdr)
	241	goto out_unregister_ipv6_table;
	242
	243	net->ipv6.sysctl.icmp_hdr =
	244	register_net_sysctl(net, "net/ipv6/icmp", ipv6_icmp_table);
	245	if (!net->ipv6.sysctl.icmp_hdr)
	246	goto out_unregister_route_table;
	247
760f2d01 DL	248	err = 0;
	249	out:
	250	return err;
6dceb036 EB	251	out_unregister_route_table:
	252	unregister_net_sysctl_table(net->ipv6.sysctl.route_hdr);
	253	out_unregister_ipv6_table:
	254	unregister_net_sysctl_table(net->ipv6.sysctl.hdr);
760f2d01 DL	255	out_ipv6_icmp_table:
	256	kfree(ipv6_icmp_table);
	257	out_ipv6_route_table:
	258	kfree(ipv6_route_table);
	259	out_ipv6_table:
	260	kfree(ipv6_table);
	261	goto out;
1da177e4 LT	262	}
1da177e4 LT	263
2c8c1e72	264	static void __net_exit ipv6_sysctl_net_exit(struct net *net)
89918fc2	265	{
760f2d01 DL	266	struct ctl_table *ipv6_table;
	267	struct ctl_table *ipv6_route_table;
	268	struct ctl_table *ipv6_icmp_table;
	269
6dceb036 EB	270	ipv6_table = net->ipv6.sysctl.hdr->ctl_table_arg;
	271	ipv6_route_table = net->ipv6.sysctl.route_hdr->ctl_table_arg;
	272	ipv6_icmp_table = net->ipv6.sysctl.icmp_hdr->ctl_table_arg;
760f2d01	273
6dceb036 EB	274	unregister_net_sysctl_table(net->ipv6.sysctl.icmp_hdr);
	275	unregister_net_sysctl_table(net->ipv6.sysctl.route_hdr);
	276	unregister_net_sysctl_table(net->ipv6.sysctl.hdr);
760f2d01 DL	277
	278	kfree(ipv6_table);
	279	kfree(ipv6_route_table);
	280	kfree(ipv6_icmp_table);
89918fc2 DL	281	}
	282
	283	static struct pernet_operations ipv6_sysctl_net_ops = {
	284	.init = ipv6_sysctl_net_init,
	285	.exit = ipv6_sysctl_net_exit,
	286	};
	287
34ac2573 PE	288	static struct ctl_table_header *ip6_header;
34ac2573 PE	289
89918fc2 DL	290	int ipv6_sysctl_register(void)
89918fc2 DL	291	{
c19a28e1	292	int err = -ENOMEM;
34ac2573	293
43444757	294	ip6_header = register_net_sysctl(&init_net, "net/ipv6", ipv6_rotable);
63159f29	295	if (!ip6_header)
34ac2573 PE	296	goto out;
	297
	298	err = register_pernet_subsys(&ipv6_sysctl_net_ops);
	299	if (err)
	300	goto err_pernet;
	301	out:
	302	return err;
	303
	304	err_pernet:
	305	unregister_net_sysctl_table(ip6_header);
	306	goto out;
89918fc2 DL	307	}
89918fc2 DL	308
1da177e4 LT	309	void ipv6_sysctl_unregister(void)
1da177e4 LT	310	{
34ac2573	311	unregister_net_sysctl_table(ip6_header);
89918fc2	312	unregister_pernet_subsys(&ipv6_sysctl_net_ops);
1da177e4	313	}