]>
Commit | Line | Data |
---|---|---|
3c12afe7 DM |
1 | /* |
2 | * linux/fs/proc/net.c | |
3 | * | |
4 | * Copyright (C) 2007 | |
5 | * | |
6 | * Author: Eric Biederman <[email protected]> | |
7 | * | |
8 | * proc net directory handling functions | |
9 | */ | |
10 | ||
7c0f6ba6 | 11 | #include <linux/uaccess.h> |
3c12afe7 DM |
12 | |
13 | #include <linux/errno.h> | |
14 | #include <linux/time.h> | |
15 | #include <linux/proc_fs.h> | |
16 | #include <linux/stat.h> | |
5a0e3ad6 | 17 | #include <linux/slab.h> |
3c12afe7 DM |
18 | #include <linux/init.h> |
19 | #include <linux/sched.h> | |
f719ff9b | 20 | #include <linux/sched/task.h> |
3c12afe7 DM |
21 | #include <linux/module.h> |
22 | #include <linux/bitops.h> | |
3c12afe7 DM |
23 | #include <linux/mount.h> |
24 | #include <linux/nsproxy.h> | |
c110486f | 25 | #include <linux/uidgid.h> |
3c12afe7 | 26 | #include <net/net_namespace.h> |
e372c414 | 27 | #include <linux/seq_file.h> |
3c12afe7 DM |
28 | |
29 | #include "internal.h" | |
30 | ||
4abfd029 DH |
31 | static inline struct net *PDE_NET(struct proc_dir_entry *pde) |
32 | { | |
33 | return pde->parent->data; | |
34 | } | |
3c12afe7 | 35 | |
8086cd45 AB |
36 | static struct net *get_proc_net(const struct inode *inode) |
37 | { | |
38 | return maybe_get_net(PDE_NET(PDE(inode))); | |
39 | } | |
40 | ||
c3506372 | 41 | static int seq_open_net(struct inode *inode, struct file *file) |
e372c414 | 42 | { |
c3506372 | 43 | unsigned int state_size = PDE(inode)->state_size; |
e372c414 | 44 | struct seq_net_private *p; |
c3506372 | 45 | struct net *net; |
e372c414 | 46 | |
c3506372 | 47 | WARN_ON_ONCE(state_size < sizeof(*p)); |
e372c414 | 48 | |
564def71 DH |
49 | if (file->f_mode & FMODE_WRITE && !PDE(inode)->write) |
50 | return -EACCES; | |
51 | ||
c3506372 CH |
52 | net = get_proc_net(inode); |
53 | if (!net) | |
e372c414 DL |
54 | return -ENXIO; |
55 | ||
c3506372 CH |
56 | p = __seq_open_private(file, PDE(inode)->seq_ops, state_size); |
57 | if (!p) { | |
e372c414 DL |
58 | put_net(net); |
59 | return -ENOMEM; | |
60 | } | |
1218854a | 61 | #ifdef CONFIG_NET_NS |
e372c414 | 62 | p->net = net; |
1218854a | 63 | #endif |
e372c414 DL |
64 | return 0; |
65 | } | |
c3506372 CH |
66 | |
67 | static int seq_release_net(struct inode *ino, struct file *f) | |
68 | { | |
69 | struct seq_file *seq = f->private_data; | |
70 | ||
71 | put_net(seq_file_net(seq)); | |
72 | seq_release_private(ino, f); | |
73 | return 0; | |
74 | } | |
75 | ||
76 | static const struct file_operations proc_net_seq_fops = { | |
77 | .open = seq_open_net, | |
78 | .read = seq_read, | |
564def71 | 79 | .write = proc_simple_write, |
c3506372 CH |
80 | .llseek = seq_lseek, |
81 | .release = seq_release_net, | |
82 | }; | |
83 | ||
84 | struct proc_dir_entry *proc_create_net_data(const char *name, umode_t mode, | |
85 | struct proc_dir_entry *parent, const struct seq_operations *ops, | |
86 | unsigned int state_size, void *data) | |
87 | { | |
88 | struct proc_dir_entry *p; | |
89 | ||
90 | p = proc_create_reg(name, mode, &parent, data); | |
91 | if (!p) | |
92 | return NULL; | |
93 | p->proc_fops = &proc_net_seq_fops; | |
94 | p->seq_ops = ops; | |
95 | p->state_size = state_size; | |
96 | return proc_register(parent, p); | |
97 | } | |
98 | EXPORT_SYMBOL_GPL(proc_create_net_data); | |
e372c414 | 99 | |
564def71 DH |
100 | /** |
101 | * proc_create_net_data_write - Create a writable net_ns-specific proc file | |
102 | * @name: The name of the file. | |
103 | * @mode: The file's access mode. | |
104 | * @parent: The parent directory in which to create. | |
105 | * @ops: The seq_file ops with which to read the file. | |
106 | * @write: The write method which which to 'modify' the file. | |
107 | * @data: Data for retrieval by PDE_DATA(). | |
108 | * | |
109 | * Create a network namespaced proc file in the @parent directory with the | |
110 | * specified @name and @mode that allows reading of a file that displays a | |
111 | * series of elements and also provides for the file accepting writes that have | |
112 | * some arbitrary effect. | |
113 | * | |
114 | * The functions in the @ops table are used to iterate over items to be | |
115 | * presented and extract the readable content using the seq_file interface. | |
116 | * | |
117 | * The @write function is called with the data copied into a kernel space | |
118 | * scratch buffer and has a NUL appended for convenience. The buffer may be | |
119 | * modified by the @write function. @write should return 0 on success. | |
120 | * | |
121 | * The @data value is accessible from the @show and @write functions by calling | |
122 | * PDE_DATA() on the file inode. The network namespace must be accessed by | |
123 | * calling seq_file_net() on the seq_file struct. | |
124 | */ | |
125 | struct proc_dir_entry *proc_create_net_data_write(const char *name, umode_t mode, | |
126 | struct proc_dir_entry *parent, | |
127 | const struct seq_operations *ops, | |
128 | proc_write_t write, | |
129 | unsigned int state_size, void *data) | |
130 | { | |
131 | struct proc_dir_entry *p; | |
132 | ||
133 | p = proc_create_reg(name, mode, &parent, data); | |
134 | if (!p) | |
135 | return NULL; | |
136 | p->proc_fops = &proc_net_seq_fops; | |
137 | p->seq_ops = ops; | |
138 | p->state_size = state_size; | |
139 | p->write = write; | |
140 | return proc_register(parent, p); | |
141 | } | |
142 | EXPORT_SYMBOL_GPL(proc_create_net_data_write); | |
143 | ||
3617d949 | 144 | static int single_open_net(struct inode *inode, struct file *file) |
de05c557 | 145 | { |
3617d949 | 146 | struct proc_dir_entry *de = PDE(inode); |
de05c557 | 147 | struct net *net; |
3617d949 | 148 | int err; |
de05c557 | 149 | |
de05c557 | 150 | net = get_proc_net(inode); |
3617d949 CH |
151 | if (!net) |
152 | return -ENXIO; | |
de05c557 | 153 | |
3617d949 CH |
154 | err = single_open(file, de->single_show, net); |
155 | if (err) | |
156 | put_net(net); | |
de05c557 PE |
157 | return err; |
158 | } | |
de05c557 | 159 | |
3617d949 | 160 | static int single_release_net(struct inode *ino, struct file *f) |
b6fcbdb4 PE |
161 | { |
162 | struct seq_file *seq = f->private_data; | |
163 | put_net(seq->private); | |
164 | return single_release(ino, f); | |
165 | } | |
3617d949 CH |
166 | |
167 | static const struct file_operations proc_net_single_fops = { | |
168 | .open = single_open_net, | |
169 | .read = seq_read, | |
564def71 | 170 | .write = proc_simple_write, |
3617d949 CH |
171 | .llseek = seq_lseek, |
172 | .release = single_release_net, | |
173 | }; | |
174 | ||
175 | struct proc_dir_entry *proc_create_net_single(const char *name, umode_t mode, | |
176 | struct proc_dir_entry *parent, | |
177 | int (*show)(struct seq_file *, void *), void *data) | |
178 | { | |
179 | struct proc_dir_entry *p; | |
180 | ||
181 | p = proc_create_reg(name, mode, &parent, data); | |
182 | if (!p) | |
183 | return NULL; | |
184 | p->proc_fops = &proc_net_single_fops; | |
185 | p->single_show = show; | |
186 | return proc_register(parent, p); | |
187 | } | |
188 | EXPORT_SYMBOL_GPL(proc_create_net_single); | |
b6fcbdb4 | 189 | |
564def71 DH |
190 | /** |
191 | * proc_create_net_single_write - Create a writable net_ns-specific proc file | |
192 | * @name: The name of the file. | |
193 | * @mode: The file's access mode. | |
194 | * @parent: The parent directory in which to create. | |
195 | * @show: The seqfile show method with which to read the file. | |
196 | * @write: The write method which which to 'modify' the file. | |
197 | * @data: Data for retrieval by PDE_DATA(). | |
198 | * | |
199 | * Create a network-namespaced proc file in the @parent directory with the | |
200 | * specified @name and @mode that allows reading of a file that displays a | |
201 | * single element rather than a series and also provides for the file accepting | |
202 | * writes that have some arbitrary effect. | |
203 | * | |
204 | * The @show function is called to extract the readable content via the | |
205 | * seq_file interface. | |
206 | * | |
207 | * The @write function is called with the data copied into a kernel space | |
208 | * scratch buffer and has a NUL appended for convenience. The buffer may be | |
209 | * modified by the @write function. @write should return 0 on success. | |
210 | * | |
211 | * The @data value is accessible from the @show and @write functions by calling | |
212 | * PDE_DATA() on the file inode. The network namespace must be accessed by | |
213 | * calling seq_file_single_net() on the seq_file struct. | |
214 | */ | |
215 | struct proc_dir_entry *proc_create_net_single_write(const char *name, umode_t mode, | |
216 | struct proc_dir_entry *parent, | |
217 | int (*show)(struct seq_file *, void *), | |
218 | proc_write_t write, | |
219 | void *data) | |
220 | { | |
221 | struct proc_dir_entry *p; | |
222 | ||
223 | p = proc_create_reg(name, mode, &parent, data); | |
224 | if (!p) | |
225 | return NULL; | |
226 | p->proc_fops = &proc_net_single_fops; | |
227 | p->single_show = show; | |
228 | p->write = write; | |
229 | return proc_register(parent, p); | |
230 | } | |
231 | EXPORT_SYMBOL_GPL(proc_create_net_single_write); | |
232 | ||
e9720acd PE |
233 | static struct net *get_proc_task_net(struct inode *dir) |
234 | { | |
235 | struct task_struct *task; | |
236 | struct nsproxy *ns; | |
237 | struct net *net = NULL; | |
238 | ||
239 | rcu_read_lock(); | |
240 | task = pid_task(proc_pid(dir), PIDTYPE_PID); | |
241 | if (task != NULL) { | |
728dba3a EB |
242 | task_lock(task); |
243 | ns = task->nsproxy; | |
e9720acd PE |
244 | if (ns != NULL) |
245 | net = get_net(ns->net_ns); | |
728dba3a | 246 | task_unlock(task); |
e9720acd PE |
247 | } |
248 | rcu_read_unlock(); | |
249 | ||
250 | return net; | |
251 | } | |
252 | ||
253 | static struct dentry *proc_tgid_net_lookup(struct inode *dir, | |
00cd8dd3 | 254 | struct dentry *dentry, unsigned int flags) |
e9720acd PE |
255 | { |
256 | struct dentry *de; | |
257 | struct net *net; | |
258 | ||
259 | de = ERR_PTR(-ENOENT); | |
260 | net = get_proc_task_net(dir); | |
261 | if (net != NULL) { | |
93ad5bc6 | 262 | de = proc_lookup_de(dir, dentry, net->proc_net); |
e9720acd PE |
263 | put_net(net); |
264 | } | |
265 | return de; | |
266 | } | |
267 | ||
a528d35e DH |
268 | static int proc_tgid_net_getattr(const struct path *path, struct kstat *stat, |
269 | u32 request_mask, unsigned int query_flags) | |
e9720acd | 270 | { |
a528d35e | 271 | struct inode *inode = d_inode(path->dentry); |
e9720acd PE |
272 | struct net *net; |
273 | ||
274 | net = get_proc_task_net(inode); | |
275 | ||
276 | generic_fillattr(inode, stat); | |
277 | ||
278 | if (net != NULL) { | |
279 | stat->nlink = net->proc_net->nlink; | |
280 | put_net(net); | |
281 | } | |
282 | ||
283 | return 0; | |
284 | } | |
285 | ||
286 | const struct inode_operations proc_net_inode_operations = { | |
287 | .lookup = proc_tgid_net_lookup, | |
288 | .getattr = proc_tgid_net_getattr, | |
289 | }; | |
290 | ||
f0c3b509 | 291 | static int proc_tgid_net_readdir(struct file *file, struct dir_context *ctx) |
e9720acd PE |
292 | { |
293 | int ret; | |
294 | struct net *net; | |
295 | ||
296 | ret = -EINVAL; | |
f0c3b509 | 297 | net = get_proc_task_net(file_inode(file)); |
e9720acd | 298 | if (net != NULL) { |
93ad5bc6 | 299 | ret = proc_readdir_de(file, ctx, net->proc_net); |
e9720acd PE |
300 | put_net(net); |
301 | } | |
302 | return ret; | |
303 | } | |
304 | ||
305 | const struct file_operations proc_net_operations = { | |
b4df2b92 | 306 | .llseek = generic_file_llseek, |
e9720acd | 307 | .read = generic_read_dir, |
f50752ea | 308 | .iterate_shared = proc_tgid_net_readdir, |
e9720acd PE |
309 | }; |
310 | ||
4665079c | 311 | static __net_init int proc_net_ns_init(struct net *net) |
3c12afe7 | 312 | { |
e9720acd | 313 | struct proc_dir_entry *netd, *net_statd; |
c110486f DT |
314 | kuid_t uid; |
315 | kgid_t gid; | |
3c12afe7 DM |
316 | int err; |
317 | ||
318 | err = -ENOMEM; | |
b4884f23 | 319 | netd = kmem_cache_zalloc(proc_dir_entry_cache, GFP_KERNEL); |
e9720acd | 320 | if (!netd) |
3c12afe7 DM |
321 | goto out; |
322 | ||
4f113437 | 323 | netd->subdir = RB_ROOT; |
e9720acd PE |
324 | netd->data = net; |
325 | netd->nlink = 2; | |
e9720acd PE |
326 | netd->namelen = 3; |
327 | netd->parent = &proc_root; | |
b4884f23 | 328 | netd->name = netd->inline_name; |
09570f91 | 329 | memcpy(netd->name, "net", 4); |
3c12afe7 | 330 | |
c110486f DT |
331 | uid = make_kuid(net->user_ns, 0); |
332 | if (!uid_valid(uid)) | |
333 | uid = netd->uid; | |
334 | ||
335 | gid = make_kgid(net->user_ns, 0); | |
336 | if (!gid_valid(gid)) | |
337 | gid = netd->gid; | |
338 | ||
339 | proc_set_user(netd, uid, gid); | |
340 | ||
3c12afe7 | 341 | err = -EEXIST; |
e5d69b9f | 342 | net_statd = proc_net_mkdir(net, "stat", netd); |
3c12afe7 DM |
343 | if (!net_statd) |
344 | goto free_net; | |
345 | ||
3c12afe7 DM |
346 | net->proc_net = netd; |
347 | net->proc_net_stat = net_statd; | |
e9720acd | 348 | return 0; |
3c12afe7 | 349 | |
e9720acd | 350 | free_net: |
b4884f23 | 351 | pde_free(netd); |
3c12afe7 DM |
352 | out: |
353 | return err; | |
3c12afe7 DM |
354 | } |
355 | ||
4665079c | 356 | static __net_exit void proc_net_ns_exit(struct net *net) |
3c12afe7 DM |
357 | { |
358 | remove_proc_entry("stat", net->proc_net); | |
b4884f23 | 359 | pde_free(net->proc_net); |
3c12afe7 DM |
360 | } |
361 | ||
022cbae6 | 362 | static struct pernet_operations __net_initdata proc_net_ns_ops = { |
3c12afe7 DM |
363 | .init = proc_net_ns_init, |
364 | .exit = proc_net_ns_exit, | |
365 | }; | |
366 | ||
4665079c | 367 | int __init proc_net_init(void) |
3c12afe7 | 368 | { |
155134fe | 369 | proc_symlink("net", NULL, "self/net"); |
3c12afe7 DM |
370 | |
371 | return register_pernet_subsys(&proc_net_ns_ops); | |
372 | } |