1#include <linux/stat.h>
2#include <linux/sysctl.h>
3#include "../fs/xfs/xfs_sysctl.h"
4#include <linux/sunrpc/debug.h>
5#include <linux/string.h>
6#include <net/ip_vs.h>
7#include <linux/syscalls.h>
8#include <linux/namei.h>
9#include <linux/mount.h>
10#include <linux/fs.h>
11#include <linux/nsproxy.h>
12#include <linux/pid_namespace.h>
13#include <linux/file.h>
14#include <linux/ctype.h>
15#include <linux/netdevice.h>
16#include <linux/kernel.h>
17#include <linux/slab.h>
18#include <linux/compat.h>
19
20#ifdef CONFIG_SYSCTL_SYSCALL
21
22struct bin_table;
23typedef ssize_t bin_convert_t(struct file *file,
24 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen);
25
26static bin_convert_t bin_dir;
27static bin_convert_t bin_string;
28static bin_convert_t bin_intvec;
29static bin_convert_t bin_ulongvec;
30static bin_convert_t bin_uuid;
31static bin_convert_t bin_dn_node_address;
32
33#define CTL_DIR bin_dir
34#define CTL_STR bin_string
35#define CTL_INT bin_intvec
36#define CTL_ULONG bin_ulongvec
37#define CTL_UUID bin_uuid
38#define CTL_DNADR bin_dn_node_address
39
40#define BUFSZ 256
41
42struct bin_table {
43 bin_convert_t *convert;
44 int ctl_name;
45 const char *procname;
46 const struct bin_table *child;
47};
48
49static const struct bin_table bin_random_table[] = {
50 { CTL_INT, RANDOM_POOLSIZE, "poolsize" },
51 { CTL_INT, RANDOM_ENTROPY_COUNT, "entropy_avail" },
52 { CTL_INT, RANDOM_READ_THRESH, "read_wakeup_threshold" },
53 { CTL_INT, RANDOM_WRITE_THRESH, "write_wakeup_threshold" },
54 { CTL_UUID, RANDOM_BOOT_ID, "boot_id" },
55 { CTL_UUID, RANDOM_UUID, "uuid" },
56 {}
57};
58
59static const struct bin_table bin_pty_table[] = {
60 { CTL_INT, PTY_MAX, "max" },
61 { CTL_INT, PTY_NR, "nr" },
62 {}
63};
64
65static const struct bin_table bin_kern_table[] = {
66 { CTL_STR, KERN_OSTYPE, "ostype" },
67 { CTL_STR, KERN_OSRELEASE, "osrelease" },
68
69 { CTL_STR, KERN_VERSION, "version" },
70
71
72 { CTL_STR, KERN_NODENAME, "hostname" },
73 { CTL_STR, KERN_DOMAINNAME, "domainname" },
74
75 { CTL_INT, KERN_PANIC, "panic" },
76 { CTL_INT, KERN_REALROOTDEV, "real-root-dev" },
77
78 { CTL_STR, KERN_SPARC_REBOOT, "reboot-cmd" },
79 { CTL_INT, KERN_CTLALTDEL, "ctrl-alt-del" },
80 { CTL_INT, KERN_PRINTK, "printk" },
81
82
83
84
85 { CTL_INT, KERN_PPC_POWERSAVE_NAP, "powersave-nap" },
86
87 { CTL_STR, KERN_MODPROBE, "modprobe" },
88 { CTL_INT, KERN_SG_BIG_BUFF, "sg-big-buff" },
89 { CTL_INT, KERN_ACCT, "acct" },
90
91
92
93
94
95 { CTL_ULONG, KERN_SHMMAX, "shmmax" },
96 { CTL_INT, KERN_MSGMAX, "msgmax" },
97 { CTL_INT, KERN_MSGMNB, "msgmnb" },
98
99 { CTL_INT, KERN_SYSRQ, "sysrq" },
100 { CTL_INT, KERN_MAX_THREADS, "threads-max" },
101 { CTL_DIR, KERN_RANDOM, "random", bin_random_table },
102 { CTL_ULONG, KERN_SHMALL, "shmall" },
103 { CTL_INT, KERN_MSGMNI, "msgmni" },
104 { CTL_INT, KERN_SEM, "sem" },
105 { CTL_INT, KERN_SPARC_STOP_A, "stop-a" },
106 { CTL_INT, KERN_SHMMNI, "shmmni" },
107
108 { CTL_INT, KERN_OVERFLOWUID, "overflowuid" },
109 { CTL_INT, KERN_OVERFLOWGID, "overflowgid" },
110
111 { CTL_STR, KERN_HOTPLUG, "hotplug", },
112 { CTL_INT, KERN_IEEE_EMULATION_WARNINGS, "ieee_emulation_warnings" },
113
114 { CTL_INT, KERN_S390_USER_DEBUG_LOGGING, "userprocess_debug" },
115 { CTL_INT, KERN_CORE_USES_PID, "core_uses_pid" },
116
117 { CTL_INT, KERN_CADPID, "cad_pid" },
118 { CTL_INT, KERN_PIDMAX, "pid_max" },
119 { CTL_STR, KERN_CORE_PATTERN, "core_pattern" },
120 { CTL_INT, KERN_PANIC_ON_OOPS, "panic_on_oops" },
121 { CTL_INT, KERN_HPPA_PWRSW, "soft-power" },
122 { CTL_INT, KERN_HPPA_UNALIGNED, "unaligned-trap" },
123
124 { CTL_INT, KERN_PRINTK_RATELIMIT, "printk_ratelimit" },
125 { CTL_INT, KERN_PRINTK_RATELIMIT_BURST, "printk_ratelimit_burst" },
126
127 { CTL_DIR, KERN_PTY, "pty", bin_pty_table },
128 { CTL_INT, KERN_NGROUPS_MAX, "ngroups_max" },
129 { CTL_INT, KERN_SPARC_SCONS_PWROFF, "scons-poweroff" },
130
131 { CTL_INT, KERN_UNKNOWN_NMI_PANIC, "unknown_nmi_panic" },
132 { CTL_INT, KERN_BOOTLOADER_TYPE, "bootloader_type" },
133 { CTL_INT, KERN_RANDOMIZE, "randomize_va_space" },
134
135 { CTL_INT, KERN_SPIN_RETRY, "spin_retry" },
136
137 { CTL_INT, KERN_IA64_UNALIGNED, "ignore-unaligned-usertrap" },
138 { CTL_INT, KERN_COMPAT_LOG, "compat-log" },
139 { CTL_INT, KERN_MAX_LOCK_DEPTH, "max_lock_depth" },
140 { CTL_INT, KERN_PANIC_ON_NMI, "panic_on_unrecovered_nmi" },
141 { CTL_INT, KERN_PANIC_ON_WARN, "panic_on_warn" },
142 {}
143};
144
145static const struct bin_table bin_vm_table[] = {
146 { CTL_INT, VM_OVERCOMMIT_MEMORY, "overcommit_memory" },
147 { CTL_INT, VM_PAGE_CLUSTER, "page-cluster" },
148 { CTL_INT, VM_DIRTY_BACKGROUND, "dirty_background_ratio" },
149 { CTL_INT, VM_DIRTY_RATIO, "dirty_ratio" },
150
151
152
153 { CTL_INT, VM_OVERCOMMIT_RATIO, "overcommit_ratio" },
154
155
156 { CTL_INT, VM_SWAPPINESS, "swappiness" },
157 { CTL_INT, VM_LOWMEM_RESERVE_RATIO, "lowmem_reserve_ratio" },
158 { CTL_INT, VM_MIN_FREE_KBYTES, "min_free_kbytes" },
159 { CTL_INT, VM_MAX_MAP_COUNT, "max_map_count" },
160 { CTL_INT, VM_LAPTOP_MODE, "laptop_mode" },
161 { CTL_INT, VM_BLOCK_DUMP, "block_dump" },
162 { CTL_INT, VM_HUGETLB_GROUP, "hugetlb_shm_group" },
163 { CTL_INT, VM_VFS_CACHE_PRESSURE, "vfs_cache_pressure" },
164 { CTL_INT, VM_LEGACY_VA_LAYOUT, "legacy_va_layout" },
165
166 { CTL_INT, VM_DROP_PAGECACHE, "drop_caches" },
167 { CTL_INT, VM_PERCPU_PAGELIST_FRACTION, "percpu_pagelist_fraction" },
168 { CTL_INT, VM_ZONE_RECLAIM_MODE, "zone_reclaim_mode" },
169 { CTL_INT, VM_MIN_UNMAPPED, "min_unmapped_ratio" },
170 { CTL_INT, VM_PANIC_ON_OOM, "panic_on_oom" },
171 { CTL_INT, VM_VDSO_ENABLED, "vdso_enabled" },
172 { CTL_INT, VM_MIN_SLAB, "min_slab_ratio" },
173
174 {}
175};
176
177static const struct bin_table bin_net_core_table[] = {
178 { CTL_INT, NET_CORE_WMEM_MAX, "wmem_max" },
179 { CTL_INT, NET_CORE_RMEM_MAX, "rmem_max" },
180 { CTL_INT, NET_CORE_WMEM_DEFAULT, "wmem_default" },
181 { CTL_INT, NET_CORE_RMEM_DEFAULT, "rmem_default" },
182
183 { CTL_INT, NET_CORE_MAX_BACKLOG, "netdev_max_backlog" },
184
185 { CTL_INT, NET_CORE_MSG_COST, "message_cost" },
186 { CTL_INT, NET_CORE_MSG_BURST, "message_burst" },
187 { CTL_INT, NET_CORE_OPTMEM_MAX, "optmem_max" },
188
189
190
191
192
193
194 { CTL_INT, NET_CORE_DEV_WEIGHT, "dev_weight" },
195 { CTL_INT, NET_CORE_SOMAXCONN, "somaxconn" },
196 { CTL_INT, NET_CORE_BUDGET, "netdev_budget" },
197 { CTL_INT, NET_CORE_AEVENT_ETIME, "xfrm_aevent_etime" },
198 { CTL_INT, NET_CORE_AEVENT_RSEQTH, "xfrm_aevent_rseqth" },
199 { CTL_INT, NET_CORE_WARNINGS, "warnings" },
200 {},
201};
202
203static const struct bin_table bin_net_unix_table[] = {
204
205
206 { CTL_INT, NET_UNIX_MAX_DGRAM_QLEN, "max_dgram_qlen" },
207 {}
208};
209
210static const struct bin_table bin_net_ipv4_route_table[] = {
211 { CTL_INT, NET_IPV4_ROUTE_FLUSH, "flush" },
212
213
214 { CTL_INT, NET_IPV4_ROUTE_GC_THRESH, "gc_thresh" },
215 { CTL_INT, NET_IPV4_ROUTE_MAX_SIZE, "max_size" },
216 { CTL_INT, NET_IPV4_ROUTE_GC_MIN_INTERVAL, "gc_min_interval" },
217 { CTL_INT, NET_IPV4_ROUTE_GC_MIN_INTERVAL_MS, "gc_min_interval_ms" },
218 { CTL_INT, NET_IPV4_ROUTE_GC_TIMEOUT, "gc_timeout" },
219
220 { CTL_INT, NET_IPV4_ROUTE_REDIRECT_LOAD, "redirect_load" },
221 { CTL_INT, NET_IPV4_ROUTE_REDIRECT_NUMBER, "redirect_number" },
222 { CTL_INT, NET_IPV4_ROUTE_REDIRECT_SILENCE, "redirect_silence" },
223 { CTL_INT, NET_IPV4_ROUTE_ERROR_COST, "error_cost" },
224 { CTL_INT, NET_IPV4_ROUTE_ERROR_BURST, "error_burst" },
225 { CTL_INT, NET_IPV4_ROUTE_GC_ELASTICITY, "gc_elasticity" },
226 { CTL_INT, NET_IPV4_ROUTE_MTU_EXPIRES, "mtu_expires" },
227 { CTL_INT, NET_IPV4_ROUTE_MIN_PMTU, "min_pmtu" },
228 { CTL_INT, NET_IPV4_ROUTE_MIN_ADVMSS, "min_adv_mss" },
229 {}
230};
231
232static const struct bin_table bin_net_ipv4_conf_vars_table[] = {
233 { CTL_INT, NET_IPV4_CONF_FORWARDING, "forwarding" },
234 { CTL_INT, NET_IPV4_CONF_MC_FORWARDING, "mc_forwarding" },
235
236 { CTL_INT, NET_IPV4_CONF_ACCEPT_REDIRECTS, "accept_redirects" },
237 { CTL_INT, NET_IPV4_CONF_SECURE_REDIRECTS, "secure_redirects" },
238 { CTL_INT, NET_IPV4_CONF_SEND_REDIRECTS, "send_redirects" },
239 { CTL_INT, NET_IPV4_CONF_SHARED_MEDIA, "shared_media" },
240 { CTL_INT, NET_IPV4_CONF_RP_FILTER, "rp_filter" },
241 { CTL_INT, NET_IPV4_CONF_ACCEPT_SOURCE_ROUTE, "accept_source_route" },
242 { CTL_INT, NET_IPV4_CONF_PROXY_ARP, "proxy_arp" },
243 { CTL_INT, NET_IPV4_CONF_MEDIUM_ID, "medium_id" },
244 { CTL_INT, NET_IPV4_CONF_BOOTP_RELAY, "bootp_relay" },
245 { CTL_INT, NET_IPV4_CONF_LOG_MARTIANS, "log_martians" },
246 { CTL_INT, NET_IPV4_CONF_TAG, "tag" },
247 { CTL_INT, NET_IPV4_CONF_ARPFILTER, "arp_filter" },
248 { CTL_INT, NET_IPV4_CONF_ARP_ANNOUNCE, "arp_announce" },
249 { CTL_INT, NET_IPV4_CONF_ARP_IGNORE, "arp_ignore" },
250 { CTL_INT, NET_IPV4_CONF_ARP_ACCEPT, "arp_accept" },
251 { CTL_INT, NET_IPV4_CONF_ARP_NOTIFY, "arp_notify" },
252
253 { CTL_INT, NET_IPV4_CONF_NOXFRM, "disable_xfrm" },
254 { CTL_INT, NET_IPV4_CONF_NOPOLICY, "disable_policy" },
255 { CTL_INT, NET_IPV4_CONF_FORCE_IGMP_VERSION, "force_igmp_version" },
256 { CTL_INT, NET_IPV4_CONF_PROMOTE_SECONDARIES, "promote_secondaries" },
257 {}
258};
259
260static const struct bin_table bin_net_ipv4_conf_table[] = {
261 { CTL_DIR, NET_PROTO_CONF_ALL, "all", bin_net_ipv4_conf_vars_table },
262 { CTL_DIR, NET_PROTO_CONF_DEFAULT, "default", bin_net_ipv4_conf_vars_table },
263 { CTL_DIR, 0, NULL, bin_net_ipv4_conf_vars_table },
264 {}
265};
266
267static const struct bin_table bin_net_neigh_vars_table[] = {
268 { CTL_INT, NET_NEIGH_MCAST_SOLICIT, "mcast_solicit" },
269 { CTL_INT, NET_NEIGH_UCAST_SOLICIT, "ucast_solicit" },
270 { CTL_INT, NET_NEIGH_APP_SOLICIT, "app_solicit" },
271
272 { CTL_INT, NET_NEIGH_REACHABLE_TIME, "base_reachable_time" },
273 { CTL_INT, NET_NEIGH_DELAY_PROBE_TIME, "delay_first_probe_time" },
274 { CTL_INT, NET_NEIGH_GC_STALE_TIME, "gc_stale_time" },
275 { CTL_INT, NET_NEIGH_UNRES_QLEN, "unres_qlen" },
276 { CTL_INT, NET_NEIGH_PROXY_QLEN, "proxy_qlen" },
277
278
279
280 { CTL_INT, NET_NEIGH_GC_INTERVAL, "gc_interval" },
281 { CTL_INT, NET_NEIGH_GC_THRESH1, "gc_thresh1" },
282 { CTL_INT, NET_NEIGH_GC_THRESH2, "gc_thresh2" },
283 { CTL_INT, NET_NEIGH_GC_THRESH3, "gc_thresh3" },
284 { CTL_INT, NET_NEIGH_RETRANS_TIME_MS, "retrans_time_ms" },
285 { CTL_INT, NET_NEIGH_REACHABLE_TIME_MS, "base_reachable_time_ms" },
286 {}
287};
288
289static const struct bin_table bin_net_neigh_table[] = {
290 { CTL_DIR, NET_PROTO_CONF_DEFAULT, "default", bin_net_neigh_vars_table },
291 { CTL_DIR, 0, NULL, bin_net_neigh_vars_table },
292 {}
293};
294
295static const struct bin_table bin_net_ipv4_netfilter_table[] = {
296 { CTL_INT, NET_IPV4_NF_CONNTRACK_MAX, "ip_conntrack_max" },
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312 { CTL_INT, NET_IPV4_NF_CONNTRACK_BUCKETS, "ip_conntrack_buckets" },
313 { CTL_INT, NET_IPV4_NF_CONNTRACK_LOG_INVALID, "ip_conntrack_log_invalid" },
314
315 { CTL_INT, NET_IPV4_NF_CONNTRACK_TCP_LOOSE, "ip_conntrack_tcp_loose" },
316 { CTL_INT, NET_IPV4_NF_CONNTRACK_TCP_BE_LIBERAL, "ip_conntrack_tcp_be_liberal" },
317 { CTL_INT, NET_IPV4_NF_CONNTRACK_TCP_MAX_RETRANS, "ip_conntrack_tcp_max_retrans" },
318
319
320
321
322
323
324
325
326
327 { CTL_INT, NET_IPV4_NF_CONNTRACK_COUNT, "ip_conntrack_count" },
328 { CTL_INT, NET_IPV4_NF_CONNTRACK_CHECKSUM, "ip_conntrack_checksum" },
329 {}
330};
331
332static const struct bin_table bin_net_ipv4_table[] = {
333 {CTL_INT, NET_IPV4_FORWARD, "ip_forward" },
334
335 { CTL_DIR, NET_IPV4_CONF, "conf", bin_net_ipv4_conf_table },
336 { CTL_DIR, NET_IPV4_NEIGH, "neigh", bin_net_neigh_table },
337 { CTL_DIR, NET_IPV4_ROUTE, "route", bin_net_ipv4_route_table },
338
339 { CTL_DIR, NET_IPV4_NETFILTER, "netfilter", bin_net_ipv4_netfilter_table },
340
341 { CTL_INT, NET_IPV4_TCP_TIMESTAMPS, "tcp_timestamps" },
342 { CTL_INT, NET_IPV4_TCP_WINDOW_SCALING, "tcp_window_scaling" },
343 { CTL_INT, NET_IPV4_TCP_SACK, "tcp_sack" },
344 { CTL_INT, NET_IPV4_TCP_RETRANS_COLLAPSE, "tcp_retrans_collapse" },
345 { CTL_INT, NET_IPV4_DEFAULT_TTL, "ip_default_ttl" },
346
347 { CTL_INT, NET_IPV4_NO_PMTU_DISC, "ip_no_pmtu_disc" },
348 { CTL_INT, NET_IPV4_NONLOCAL_BIND, "ip_nonlocal_bind" },
349 { CTL_INT, NET_IPV4_TCP_SYN_RETRIES, "tcp_syn_retries" },
350 { CTL_INT, NET_TCP_SYNACK_RETRIES, "tcp_synack_retries" },
351 { CTL_INT, NET_TCP_MAX_ORPHANS, "tcp_max_orphans" },
352 { CTL_INT, NET_TCP_MAX_TW_BUCKETS, "tcp_max_tw_buckets" },
353 { CTL_INT, NET_IPV4_DYNADDR, "ip_dynaddr" },
354 { CTL_INT, NET_IPV4_TCP_KEEPALIVE_TIME, "tcp_keepalive_time" },
355 { CTL_INT, NET_IPV4_TCP_KEEPALIVE_PROBES, "tcp_keepalive_probes" },
356 { CTL_INT, NET_IPV4_TCP_KEEPALIVE_INTVL, "tcp_keepalive_intvl" },
357 { CTL_INT, NET_IPV4_TCP_RETRIES1, "tcp_retries1" },
358 { CTL_INT, NET_IPV4_TCP_RETRIES2, "tcp_retries2" },
359 { CTL_INT, NET_IPV4_TCP_FIN_TIMEOUT, "tcp_fin_timeout" },
360 { CTL_INT, NET_TCP_SYNCOOKIES, "tcp_syncookies" },
361 { CTL_INT, NET_TCP_TW_RECYCLE, "tcp_tw_recycle" },
362 { CTL_INT, NET_TCP_ABORT_ON_OVERFLOW, "tcp_abort_on_overflow" },
363 { CTL_INT, NET_TCP_STDURG, "tcp_stdurg" },
364 { CTL_INT, NET_TCP_RFC1337, "tcp_rfc1337" },
365 { CTL_INT, NET_TCP_MAX_SYN_BACKLOG, "tcp_max_syn_backlog" },
366 { CTL_INT, NET_IPV4_LOCAL_PORT_RANGE, "ip_local_port_range" },
367 { CTL_INT, NET_IPV4_IGMP_MAX_MEMBERSHIPS, "igmp_max_memberships" },
368 { CTL_INT, NET_IPV4_IGMP_MAX_MSF, "igmp_max_msf" },
369 { CTL_INT, NET_IPV4_INET_PEER_THRESHOLD, "inet_peer_threshold" },
370 { CTL_INT, NET_IPV4_INET_PEER_MINTTL, "inet_peer_minttl" },
371 { CTL_INT, NET_IPV4_INET_PEER_MAXTTL, "inet_peer_maxttl" },
372 { CTL_INT, NET_IPV4_INET_PEER_GC_MINTIME, "inet_peer_gc_mintime" },
373 { CTL_INT, NET_IPV4_INET_PEER_GC_MAXTIME, "inet_peer_gc_maxtime" },
374 { CTL_INT, NET_TCP_ORPHAN_RETRIES, "tcp_orphan_retries" },
375 { CTL_INT, NET_TCP_FACK, "tcp_fack" },
376 { CTL_INT, NET_TCP_REORDERING, "tcp_reordering" },
377 { CTL_INT, NET_TCP_ECN, "tcp_ecn" },
378 { CTL_INT, NET_TCP_DSACK, "tcp_dsack" },
379 { CTL_INT, NET_TCP_MEM, "tcp_mem" },
380 { CTL_INT, NET_TCP_WMEM, "tcp_wmem" },
381 { CTL_INT, NET_TCP_RMEM, "tcp_rmem" },
382 { CTL_INT, NET_TCP_APP_WIN, "tcp_app_win" },
383 { CTL_INT, NET_TCP_ADV_WIN_SCALE, "tcp_adv_win_scale" },
384 { CTL_INT, NET_TCP_TW_REUSE, "tcp_tw_reuse" },
385 { CTL_INT, NET_TCP_FRTO, "tcp_frto" },
386 { CTL_INT, NET_TCP_FRTO_RESPONSE, "tcp_frto_response" },
387 { CTL_INT, NET_TCP_LOW_LATENCY, "tcp_low_latency" },
388 { CTL_INT, NET_TCP_NO_METRICS_SAVE, "tcp_no_metrics_save" },
389 { CTL_INT, NET_TCP_MODERATE_RCVBUF, "tcp_moderate_rcvbuf" },
390 { CTL_INT, NET_TCP_TSO_WIN_DIVISOR, "tcp_tso_win_divisor" },
391 { CTL_STR, NET_TCP_CONG_CONTROL, "tcp_congestion_control" },
392 { CTL_INT, NET_TCP_MTU_PROBING, "tcp_mtu_probing" },
393 { CTL_INT, NET_TCP_BASE_MSS, "tcp_base_mss" },
394 { CTL_INT, NET_IPV4_TCP_WORKAROUND_SIGNED_WINDOWS, "tcp_workaround_signed_windows" },
395 { CTL_INT, NET_TCP_SLOW_START_AFTER_IDLE, "tcp_slow_start_after_idle" },
396 { CTL_INT, NET_CIPSOV4_CACHE_ENABLE, "cipso_cache_enable" },
397 { CTL_INT, NET_CIPSOV4_CACHE_BUCKET_SIZE, "cipso_cache_bucket_size" },
398 { CTL_INT, NET_CIPSOV4_RBM_OPTFMT, "cipso_rbm_optfmt" },
399 { CTL_INT, NET_CIPSOV4_RBM_STRICTVALID, "cipso_rbm_strictvalid" },
400
401 { CTL_STR, NET_TCP_ALLOWED_CONG_CONTROL, "tcp_allowed_congestion_control" },
402 { CTL_INT, NET_TCP_MAX_SSTHRESH, "tcp_max_ssthresh" },
403
404 { CTL_INT, NET_IPV4_ICMP_ECHO_IGNORE_ALL, "icmp_echo_ignore_all" },
405 { CTL_INT, NET_IPV4_ICMP_ECHO_IGNORE_BROADCASTS, "icmp_echo_ignore_broadcasts" },
406 { CTL_INT, NET_IPV4_ICMP_IGNORE_BOGUS_ERROR_RESPONSES, "icmp_ignore_bogus_error_responses" },
407 { CTL_INT, NET_IPV4_ICMP_ERRORS_USE_INBOUND_IFADDR, "icmp_errors_use_inbound_ifaddr" },
408 { CTL_INT, NET_IPV4_ICMP_RATELIMIT, "icmp_ratelimit" },
409 { CTL_INT, NET_IPV4_ICMP_RATEMASK, "icmp_ratemask" },
410
411 { CTL_INT, NET_IPV4_IPFRAG_HIGH_THRESH, "ipfrag_high_thresh" },
412 { CTL_INT, NET_IPV4_IPFRAG_LOW_THRESH, "ipfrag_low_thresh" },
413 { CTL_INT, NET_IPV4_IPFRAG_TIME, "ipfrag_time" },
414
415 { CTL_INT, NET_IPV4_IPFRAG_SECRET_INTERVAL, "ipfrag_secret_interval" },
416
417
418 { CTL_INT, 2088 , "ip_queue_maxlen" },
419
420
421
422
423
424
425
426
427
428
429
430
431 {}
432};
433
434static const struct bin_table bin_net_ipx_table[] = {
435 { CTL_INT, NET_IPX_PPROP_BROADCASTING, "ipx_pprop_broadcasting" },
436
437 {}
438};
439
440static const struct bin_table bin_net_atalk_table[] = {
441 { CTL_INT, NET_ATALK_AARP_EXPIRY_TIME, "aarp-expiry-time" },
442 { CTL_INT, NET_ATALK_AARP_TICK_TIME, "aarp-tick-time" },
443 { CTL_INT, NET_ATALK_AARP_RETRANSMIT_LIMIT, "aarp-retransmit-limit" },
444 { CTL_INT, NET_ATALK_AARP_RESOLVE_TIME, "aarp-resolve-time" },
445 {},
446};
447
448static const struct bin_table bin_net_netrom_table[] = {
449 { CTL_INT, NET_NETROM_DEFAULT_PATH_QUALITY, "default_path_quality" },
450 { CTL_INT, NET_NETROM_OBSOLESCENCE_COUNT_INITIALISER, "obsolescence_count_initialiser" },
451 { CTL_INT, NET_NETROM_NETWORK_TTL_INITIALISER, "network_ttl_initialiser" },
452 { CTL_INT, NET_NETROM_TRANSPORT_TIMEOUT, "transport_timeout" },
453 { CTL_INT, NET_NETROM_TRANSPORT_MAXIMUM_TRIES, "transport_maximum_tries" },
454 { CTL_INT, NET_NETROM_TRANSPORT_ACKNOWLEDGE_DELAY, "transport_acknowledge_delay" },
455 { CTL_INT, NET_NETROM_TRANSPORT_BUSY_DELAY, "transport_busy_delay" },
456 { CTL_INT, NET_NETROM_TRANSPORT_REQUESTED_WINDOW_SIZE, "transport_requested_window_size" },
457 { CTL_INT, NET_NETROM_TRANSPORT_NO_ACTIVITY_TIMEOUT, "transport_no_activity_timeout" },
458 { CTL_INT, NET_NETROM_ROUTING_CONTROL, "routing_control" },
459 { CTL_INT, NET_NETROM_LINK_FAILS_COUNT, "link_fails_count" },
460 { CTL_INT, NET_NETROM_RESET, "reset" },
461 {}
462};
463
464static const struct bin_table bin_net_ax25_param_table[] = {
465 { CTL_INT, NET_AX25_IP_DEFAULT_MODE, "ip_default_mode" },
466 { CTL_INT, NET_AX25_DEFAULT_MODE, "ax25_default_mode" },
467 { CTL_INT, NET_AX25_BACKOFF_TYPE, "backoff_type" },
468 { CTL_INT, NET_AX25_CONNECT_MODE, "connect_mode" },
469 { CTL_INT, NET_AX25_STANDARD_WINDOW, "standard_window_size" },
470 { CTL_INT, NET_AX25_EXTENDED_WINDOW, "extended_window_size" },
471 { CTL_INT, NET_AX25_T1_TIMEOUT, "t1_timeout" },
472 { CTL_INT, NET_AX25_T2_TIMEOUT, "t2_timeout" },
473 { CTL_INT, NET_AX25_T3_TIMEOUT, "t3_timeout" },
474 { CTL_INT, NET_AX25_IDLE_TIMEOUT, "idle_timeout" },
475 { CTL_INT, NET_AX25_N2, "maximum_retry_count" },
476 { CTL_INT, NET_AX25_PACLEN, "maximum_packet_length" },
477 { CTL_INT, NET_AX25_PROTOCOL, "protocol" },
478 { CTL_INT, NET_AX25_DAMA_SLAVE_TIMEOUT, "dama_slave_timeout" },
479 {}
480};
481
482static const struct bin_table bin_net_ax25_table[] = {
483 { CTL_DIR, 0, NULL, bin_net_ax25_param_table },
484 {}
485};
486
487static const struct bin_table bin_net_rose_table[] = {
488 { CTL_INT, NET_ROSE_RESTART_REQUEST_TIMEOUT, "restart_request_timeout" },
489 { CTL_INT, NET_ROSE_CALL_REQUEST_TIMEOUT, "call_request_timeout" },
490 { CTL_INT, NET_ROSE_RESET_REQUEST_TIMEOUT, "reset_request_timeout" },
491 { CTL_INT, NET_ROSE_CLEAR_REQUEST_TIMEOUT, "clear_request_timeout" },
492 { CTL_INT, NET_ROSE_ACK_HOLD_BACK_TIMEOUT, "acknowledge_hold_back_timeout" },
493 { CTL_INT, NET_ROSE_ROUTING_CONTROL, "routing_control" },
494 { CTL_INT, NET_ROSE_LINK_FAIL_TIMEOUT, "link_fail_timeout" },
495 { CTL_INT, NET_ROSE_MAX_VCS, "maximum_virtual_circuits" },
496 { CTL_INT, NET_ROSE_WINDOW_SIZE, "window_size" },
497 { CTL_INT, NET_ROSE_NO_ACTIVITY_TIMEOUT, "no_activity_timeout" },
498 {}
499};
500
501static const struct bin_table bin_net_ipv6_conf_var_table[] = {
502 { CTL_INT, NET_IPV6_FORWARDING, "forwarding" },
503 { CTL_INT, NET_IPV6_HOP_LIMIT, "hop_limit" },
504 { CTL_INT, NET_IPV6_MTU, "mtu" },
505 { CTL_INT, NET_IPV6_ACCEPT_RA, "accept_ra" },
506 { CTL_INT, NET_IPV6_ACCEPT_REDIRECTS, "accept_redirects" },
507 { CTL_INT, NET_IPV6_AUTOCONF, "autoconf" },
508 { CTL_INT, NET_IPV6_DAD_TRANSMITS, "dad_transmits" },
509 { CTL_INT, NET_IPV6_RTR_SOLICITS, "router_solicitations" },
510 { CTL_INT, NET_IPV6_RTR_SOLICIT_INTERVAL, "router_solicitation_interval" },
511 { CTL_INT, NET_IPV6_RTR_SOLICIT_DELAY, "router_solicitation_delay" },
512 { CTL_INT, NET_IPV6_USE_TEMPADDR, "use_tempaddr" },
513 { CTL_INT, NET_IPV6_TEMP_VALID_LFT, "temp_valid_lft" },
514 { CTL_INT, NET_IPV6_TEMP_PREFERED_LFT, "temp_prefered_lft" },
515 { CTL_INT, NET_IPV6_REGEN_MAX_RETRY, "regen_max_retry" },
516 { CTL_INT, NET_IPV6_MAX_DESYNC_FACTOR, "max_desync_factor" },
517 { CTL_INT, NET_IPV6_MAX_ADDRESSES, "max_addresses" },
518 { CTL_INT, NET_IPV6_FORCE_MLD_VERSION, "force_mld_version" },
519 { CTL_INT, NET_IPV6_ACCEPT_RA_DEFRTR, "accept_ra_defrtr" },
520 { CTL_INT, NET_IPV6_ACCEPT_RA_PINFO, "accept_ra_pinfo" },
521 { CTL_INT, NET_IPV6_ACCEPT_RA_RTR_PREF, "accept_ra_rtr_pref" },
522 { CTL_INT, NET_IPV6_RTR_PROBE_INTERVAL, "router_probe_interval" },
523 { CTL_INT, NET_IPV6_ACCEPT_RA_RT_INFO_MAX_PLEN, "accept_ra_rt_info_max_plen" },
524 { CTL_INT, NET_IPV6_PROXY_NDP, "proxy_ndp" },
525 { CTL_INT, NET_IPV6_ACCEPT_SOURCE_ROUTE, "accept_source_route" },
526 {}
527};
528
529static const struct bin_table bin_net_ipv6_conf_table[] = {
530 { CTL_DIR, NET_PROTO_CONF_ALL, "all", bin_net_ipv6_conf_var_table },
531 { CTL_DIR, NET_PROTO_CONF_DEFAULT, "default", bin_net_ipv6_conf_var_table },
532 { CTL_DIR, 0, NULL, bin_net_ipv6_conf_var_table },
533 {}
534};
535
536static const struct bin_table bin_net_ipv6_route_table[] = {
537
538 { CTL_INT, NET_IPV6_ROUTE_GC_THRESH, "gc_thresh" },
539 { CTL_INT, NET_IPV6_ROUTE_MAX_SIZE, "max_size" },
540 { CTL_INT, NET_IPV6_ROUTE_GC_MIN_INTERVAL, "gc_min_interval" },
541 { CTL_INT, NET_IPV6_ROUTE_GC_TIMEOUT, "gc_timeout" },
542 { CTL_INT, NET_IPV6_ROUTE_GC_INTERVAL, "gc_interval" },
543 { CTL_INT, NET_IPV6_ROUTE_GC_ELASTICITY, "gc_elasticity" },
544 { CTL_INT, NET_IPV6_ROUTE_MTU_EXPIRES, "mtu_expires" },
545 { CTL_INT, NET_IPV6_ROUTE_MIN_ADVMSS, "min_adv_mss" },
546 { CTL_INT, NET_IPV6_ROUTE_GC_MIN_INTERVAL_MS, "gc_min_interval_ms" },
547 {}
548};
549
550static const struct bin_table bin_net_ipv6_icmp_table[] = {
551 { CTL_INT, NET_IPV6_ICMP_RATELIMIT, "ratelimit" },
552 {}
553};
554
555static const struct bin_table bin_net_ipv6_table[] = {
556 { CTL_DIR, NET_IPV6_CONF, "conf", bin_net_ipv6_conf_table },
557 { CTL_DIR, NET_IPV6_NEIGH, "neigh", bin_net_neigh_table },
558 { CTL_DIR, NET_IPV6_ROUTE, "route", bin_net_ipv6_route_table },
559 { CTL_DIR, NET_IPV6_ICMP, "icmp", bin_net_ipv6_icmp_table },
560 { CTL_INT, NET_IPV6_BINDV6ONLY, "bindv6only" },
561 { CTL_INT, NET_IPV6_IP6FRAG_HIGH_THRESH, "ip6frag_high_thresh" },
562 { CTL_INT, NET_IPV6_IP6FRAG_LOW_THRESH, "ip6frag_low_thresh" },
563 { CTL_INT, NET_IPV6_IP6FRAG_TIME, "ip6frag_time" },
564 { CTL_INT, NET_IPV6_IP6FRAG_SECRET_INTERVAL, "ip6frag_secret_interval" },
565 { CTL_INT, NET_IPV6_MLD_MAX_MSF, "mld_max_msf" },
566 { CTL_INT, 2088 , "ip6_queue_maxlen" },
567 {}
568};
569
570static const struct bin_table bin_net_x25_table[] = {
571 { CTL_INT, NET_X25_RESTART_REQUEST_TIMEOUT, "restart_request_timeout" },
572 { CTL_INT, NET_X25_CALL_REQUEST_TIMEOUT, "call_request_timeout" },
573 { CTL_INT, NET_X25_RESET_REQUEST_TIMEOUT, "reset_request_timeout" },
574 { CTL_INT, NET_X25_CLEAR_REQUEST_TIMEOUT, "clear_request_timeout" },
575 { CTL_INT, NET_X25_ACK_HOLD_BACK_TIMEOUT, "acknowledgement_hold_back_timeout" },
576 { CTL_INT, NET_X25_FORWARD, "x25_forward" },
577 {}
578};
579
580static const struct bin_table bin_net_tr_table[] = {
581 { CTL_INT, NET_TR_RIF_TIMEOUT, "rif_timeout" },
582 {}
583};
584
585
586static const struct bin_table bin_net_decnet_conf_vars[] = {
587 { CTL_INT, NET_DECNET_CONF_DEV_FORWARDING, "forwarding" },
588 { CTL_INT, NET_DECNET_CONF_DEV_PRIORITY, "priority" },
589 { CTL_INT, NET_DECNET_CONF_DEV_T2, "t2" },
590 { CTL_INT, NET_DECNET_CONF_DEV_T3, "t3" },
591 {}
592};
593
594static const struct bin_table bin_net_decnet_conf[] = {
595 { CTL_DIR, NET_DECNET_CONF_ETHER, "ethernet", bin_net_decnet_conf_vars },
596 { CTL_DIR, NET_DECNET_CONF_GRE, "ipgre", bin_net_decnet_conf_vars },
597 { CTL_DIR, NET_DECNET_CONF_X25, "x25", bin_net_decnet_conf_vars },
598 { CTL_DIR, NET_DECNET_CONF_PPP, "ppp", bin_net_decnet_conf_vars },
599 { CTL_DIR, NET_DECNET_CONF_DDCMP, "ddcmp", bin_net_decnet_conf_vars },
600 { CTL_DIR, NET_DECNET_CONF_LOOPBACK, "loopback", bin_net_decnet_conf_vars },
601 { CTL_DIR, 0, NULL, bin_net_decnet_conf_vars },
602 {}
603};
604
605static const struct bin_table bin_net_decnet_table[] = {
606 { CTL_DIR, NET_DECNET_CONF, "conf", bin_net_decnet_conf },
607 { CTL_DNADR, NET_DECNET_NODE_ADDRESS, "node_address" },
608 { CTL_STR, NET_DECNET_NODE_NAME, "node_name" },
609 { CTL_STR, NET_DECNET_DEFAULT_DEVICE, "default_device" },
610 { CTL_INT, NET_DECNET_TIME_WAIT, "time_wait" },
611 { CTL_INT, NET_DECNET_DN_COUNT, "dn_count" },
612 { CTL_INT, NET_DECNET_DI_COUNT, "di_count" },
613 { CTL_INT, NET_DECNET_DR_COUNT, "dr_count" },
614 { CTL_INT, NET_DECNET_DST_GC_INTERVAL, "dst_gc_interval" },
615 { CTL_INT, NET_DECNET_NO_FC_MAX_CWND, "no_fc_max_cwnd" },
616 { CTL_INT, NET_DECNET_MEM, "decnet_mem" },
617 { CTL_INT, NET_DECNET_RMEM, "decnet_rmem" },
618 { CTL_INT, NET_DECNET_WMEM, "decnet_wmem" },
619 { CTL_INT, NET_DECNET_DEBUG_LEVEL, "debug" },
620 {}
621};
622
623static const struct bin_table bin_net_sctp_table[] = {
624 { CTL_INT, NET_SCTP_RTO_INITIAL, "rto_initial" },
625 { CTL_INT, NET_SCTP_RTO_MIN, "rto_min" },
626 { CTL_INT, NET_SCTP_RTO_MAX, "rto_max" },
627 { CTL_INT, NET_SCTP_RTO_ALPHA, "rto_alpha_exp_divisor" },
628 { CTL_INT, NET_SCTP_RTO_BETA, "rto_beta_exp_divisor" },
629 { CTL_INT, NET_SCTP_VALID_COOKIE_LIFE, "valid_cookie_life" },
630 { CTL_INT, NET_SCTP_ASSOCIATION_MAX_RETRANS, "association_max_retrans" },
631 { CTL_INT, NET_SCTP_PATH_MAX_RETRANS, "path_max_retrans" },
632 { CTL_INT, NET_SCTP_MAX_INIT_RETRANSMITS, "max_init_retransmits" },
633 { CTL_INT, NET_SCTP_HB_INTERVAL, "hb_interval" },
634 { CTL_INT, NET_SCTP_PRESERVE_ENABLE, "cookie_preserve_enable" },
635 { CTL_INT, NET_SCTP_MAX_BURST, "max_burst" },
636 { CTL_INT, NET_SCTP_ADDIP_ENABLE, "addip_enable" },
637 { CTL_INT, NET_SCTP_PRSCTP_ENABLE, "prsctp_enable" },
638 { CTL_INT, NET_SCTP_SNDBUF_POLICY, "sndbuf_policy" },
639 { CTL_INT, NET_SCTP_SACK_TIMEOUT, "sack_timeout" },
640 { CTL_INT, NET_SCTP_RCVBUF_POLICY, "rcvbuf_policy" },
641 {}
642};
643
644static const struct bin_table bin_net_llc_llc2_timeout_table[] = {
645 { CTL_INT, NET_LLC2_ACK_TIMEOUT, "ack" },
646 { CTL_INT, NET_LLC2_P_TIMEOUT, "p" },
647 { CTL_INT, NET_LLC2_REJ_TIMEOUT, "rej" },
648 { CTL_INT, NET_LLC2_BUSY_TIMEOUT, "busy" },
649 {}
650};
651
652static const struct bin_table bin_net_llc_station_table[] = {
653 { CTL_INT, NET_LLC_STATION_ACK_TIMEOUT, "ack_timeout" },
654 {}
655};
656
657static const struct bin_table bin_net_llc_llc2_table[] = {
658 { CTL_DIR, NET_LLC2, "timeout", bin_net_llc_llc2_timeout_table },
659 {}
660};
661
662static const struct bin_table bin_net_llc_table[] = {
663 { CTL_DIR, NET_LLC2, "llc2", bin_net_llc_llc2_table },
664 { CTL_DIR, NET_LLC_STATION, "station", bin_net_llc_station_table },
665 {}
666};
667
668static const struct bin_table bin_net_netfilter_table[] = {
669 { CTL_INT, NET_NF_CONNTRACK_MAX, "nf_conntrack_max" },
670
671
672
673
674
675
676
677
678
679
680
681
682 { CTL_INT, NET_NF_CONNTRACK_BUCKETS, "nf_conntrack_buckets" },
683 { CTL_INT, NET_NF_CONNTRACK_LOG_INVALID, "nf_conntrack_log_invalid" },
684
685 { CTL_INT, NET_NF_CONNTRACK_TCP_LOOSE, "nf_conntrack_tcp_loose" },
686 { CTL_INT, NET_NF_CONNTRACK_TCP_BE_LIBERAL, "nf_conntrack_tcp_be_liberal" },
687 { CTL_INT, NET_NF_CONNTRACK_TCP_MAX_RETRANS, "nf_conntrack_tcp_max_retrans" },
688
689
690
691
692
693
694
695 { CTL_INT, NET_NF_CONNTRACK_COUNT, "nf_conntrack_count" },
696
697
698 { CTL_INT, NET_NF_CONNTRACK_FRAG6_LOW_THRESH, "nf_conntrack_frag6_low_thresh" },
699 { CTL_INT, NET_NF_CONNTRACK_FRAG6_HIGH_THRESH, "nf_conntrack_frag6_high_thresh" },
700 { CTL_INT, NET_NF_CONNTRACK_CHECKSUM, "nf_conntrack_checksum" },
701
702 {}
703};
704
705static const struct bin_table bin_net_irda_table[] = {
706 { CTL_INT, NET_IRDA_DISCOVERY, "discovery" },
707 { CTL_STR, NET_IRDA_DEVNAME, "devname" },
708 { CTL_INT, NET_IRDA_DEBUG, "debug" },
709 { CTL_INT, NET_IRDA_FAST_POLL, "fast_poll_increase" },
710 { CTL_INT, NET_IRDA_DISCOVERY_SLOTS, "discovery_slots" },
711 { CTL_INT, NET_IRDA_DISCOVERY_TIMEOUT, "discovery_timeout" },
712 { CTL_INT, NET_IRDA_SLOT_TIMEOUT, "slot_timeout" },
713 { CTL_INT, NET_IRDA_MAX_BAUD_RATE, "max_baud_rate" },
714 { CTL_INT, NET_IRDA_MIN_TX_TURN_TIME, "min_tx_turn_time" },
715 { CTL_INT, NET_IRDA_MAX_TX_DATA_SIZE, "max_tx_data_size" },
716 { CTL_INT, NET_IRDA_MAX_TX_WINDOW, "max_tx_window" },
717 { CTL_INT, NET_IRDA_MAX_NOREPLY_TIME, "max_noreply_time" },
718 { CTL_INT, NET_IRDA_WARN_NOREPLY_TIME, "warn_noreply_time" },
719 { CTL_INT, NET_IRDA_LAP_KEEPALIVE_TIME, "lap_keepalive_time" },
720 {}
721};
722
723static const struct bin_table bin_net_table[] = {
724 { CTL_DIR, NET_CORE, "core", bin_net_core_table },
725
726
727 { CTL_DIR, NET_UNIX, "unix", bin_net_unix_table },
728 { CTL_DIR, NET_IPV4, "ipv4", bin_net_ipv4_table },
729 { CTL_DIR, NET_IPX, "ipx", bin_net_ipx_table },
730 { CTL_DIR, NET_ATALK, "appletalk", bin_net_atalk_table },
731 { CTL_DIR, NET_NETROM, "netrom", bin_net_netrom_table },
732 { CTL_DIR, NET_AX25, "ax25", bin_net_ax25_table },
733
734 { CTL_DIR, NET_ROSE, "rose", bin_net_rose_table },
735 { CTL_DIR, NET_IPV6, "ipv6", bin_net_ipv6_table },
736 { CTL_DIR, NET_X25, "x25", bin_net_x25_table },
737 { CTL_DIR, NET_TR, "token-ring", bin_net_tr_table },
738 { CTL_DIR, NET_DECNET, "decnet", bin_net_decnet_table },
739
740 { CTL_DIR, NET_SCTP, "sctp", bin_net_sctp_table },
741 { CTL_DIR, NET_LLC, "llc", bin_net_llc_table },
742 { CTL_DIR, NET_NETFILTER, "netfilter", bin_net_netfilter_table },
743
744 { CTL_DIR, NET_IRDA, "irda", bin_net_irda_table },
745 { CTL_INT, 2089, "nf_conntrack_max" },
746 {}
747};
748
749static const struct bin_table bin_fs_quota_table[] = {
750 { CTL_INT, FS_DQ_LOOKUPS, "lookups" },
751 { CTL_INT, FS_DQ_DROPS, "drops" },
752 { CTL_INT, FS_DQ_READS, "reads" },
753 { CTL_INT, FS_DQ_WRITES, "writes" },
754 { CTL_INT, FS_DQ_CACHE_HITS, "cache_hits" },
755 { CTL_INT, FS_DQ_ALLOCATED, "allocated_dquots" },
756 { CTL_INT, FS_DQ_FREE, "free_dquots" },
757 { CTL_INT, FS_DQ_SYNCS, "syncs" },
758 { CTL_INT, FS_DQ_WARNINGS, "warnings" },
759 {}
760};
761
762static const struct bin_table bin_fs_xfs_table[] = {
763 { CTL_INT, XFS_SGID_INHERIT, "irix_sgid_inherit" },
764 { CTL_INT, XFS_SYMLINK_MODE, "irix_symlink_mode" },
765 { CTL_INT, XFS_PANIC_MASK, "panic_mask" },
766
767 { CTL_INT, XFS_ERRLEVEL, "error_level" },
768 { CTL_INT, XFS_SYNCD_TIMER, "xfssyncd_centisecs" },
769 { CTL_INT, XFS_INHERIT_SYNC, "inherit_sync" },
770 { CTL_INT, XFS_INHERIT_NODUMP, "inherit_nodump" },
771 { CTL_INT, XFS_INHERIT_NOATIME, "inherit_noatime" },
772 { CTL_INT, XFS_BUF_TIMER, "xfsbufd_centisecs" },
773 { CTL_INT, XFS_BUF_AGE, "age_buffer_centisecs" },
774 { CTL_INT, XFS_INHERIT_NOSYM, "inherit_nosymlinks" },
775 { CTL_INT, XFS_ROTORSTEP, "rotorstep" },
776 { CTL_INT, XFS_INHERIT_NODFRG, "inherit_nodefrag" },
777 { CTL_INT, XFS_FILESTREAM_TIMER, "filestream_centisecs" },
778 { CTL_INT, XFS_STATS_CLEAR, "stats_clear" },
779 {}
780};
781
782static const struct bin_table bin_fs_ocfs2_nm_table[] = {
783 { CTL_STR, 1, "hb_ctl_path" },
784 {}
785};
786
787static const struct bin_table bin_fs_ocfs2_table[] = {
788 { CTL_DIR, 1, "nm", bin_fs_ocfs2_nm_table },
789 {}
790};
791
792static const struct bin_table bin_inotify_table[] = {
793 { CTL_INT, INOTIFY_MAX_USER_INSTANCES, "max_user_instances" },
794 { CTL_INT, INOTIFY_MAX_USER_WATCHES, "max_user_watches" },
795 { CTL_INT, INOTIFY_MAX_QUEUED_EVENTS, "max_queued_events" },
796 {}
797};
798
799static const struct bin_table bin_fs_table[] = {
800 { CTL_INT, FS_NRINODE, "inode-nr" },
801 { CTL_INT, FS_STATINODE, "inode-state" },
802
803
804
805
806 { CTL_INT, FS_MAXFILE, "file-max" },
807 { CTL_INT, FS_DENTRY, "dentry-state" },
808
809
810 { CTL_INT, FS_OVERFLOWUID, "overflowuid" },
811 { CTL_INT, FS_OVERFLOWGID, "overflowgid" },
812 { CTL_INT, FS_LEASES, "leases-enable" },
813 { CTL_INT, FS_DIR_NOTIFY, "dir-notify-enable" },
814 { CTL_INT, FS_LEASE_TIME, "lease-break-time" },
815 { CTL_DIR, FS_DQSTATS, "quota", bin_fs_quota_table },
816 { CTL_DIR, FS_XFS, "xfs", bin_fs_xfs_table },
817 { CTL_ULONG, FS_AIO_NR, "aio-nr" },
818 { CTL_ULONG, FS_AIO_MAX_NR, "aio-max-nr" },
819 { CTL_DIR, FS_INOTIFY, "inotify", bin_inotify_table },
820 { CTL_DIR, FS_OCFS2, "ocfs2", bin_fs_ocfs2_table },
821 { CTL_INT, KERN_SETUID_DUMPABLE, "suid_dumpable" },
822 {}
823};
824
825static const struct bin_table bin_ipmi_table[] = {
826 { CTL_INT, DEV_IPMI_POWEROFF_POWERCYCLE, "poweroff_powercycle" },
827 {}
828};
829
830static const struct bin_table bin_mac_hid_files[] = {
831
832
833 { CTL_INT, DEV_MAC_HID_MOUSE_BUTTON_EMULATION, "mouse_button_emulation" },
834 { CTL_INT, DEV_MAC_HID_MOUSE_BUTTON2_KEYCODE, "mouse_button2_keycode" },
835 { CTL_INT, DEV_MAC_HID_MOUSE_BUTTON3_KEYCODE, "mouse_button3_keycode" },
836
837 {}
838};
839
840static const struct bin_table bin_raid_table[] = {
841 { CTL_INT, DEV_RAID_SPEED_LIMIT_MIN, "speed_limit_min" },
842 { CTL_INT, DEV_RAID_SPEED_LIMIT_MAX, "speed_limit_max" },
843 {}
844};
845
846static const struct bin_table bin_scsi_table[] = {
847 { CTL_INT, DEV_SCSI_LOGGING_LEVEL, "logging_level" },
848 {}
849};
850
851static const struct bin_table bin_dev_table[] = {
852
853
854
855 { CTL_DIR, DEV_RAID, "raid", bin_raid_table },
856 { CTL_DIR, DEV_MAC_HID, "mac_hid", bin_mac_hid_files },
857 { CTL_DIR, DEV_SCSI, "scsi", bin_scsi_table },
858 { CTL_DIR, DEV_IPMI, "ipmi", bin_ipmi_table },
859 {}
860};
861
862static const struct bin_table bin_bus_isa_table[] = {
863 { CTL_INT, BUS_ISA_MEM_BASE, "membase" },
864 { CTL_INT, BUS_ISA_PORT_BASE, "portbase" },
865 { CTL_INT, BUS_ISA_PORT_SHIFT, "portshift" },
866 {}
867};
868
869static const struct bin_table bin_bus_table[] = {
870 { CTL_DIR, CTL_BUS_ISA, "isa", bin_bus_isa_table },
871 {}
872};
873
874
875static const struct bin_table bin_s390dbf_table[] = {
876 { CTL_INT, 5678 , "debug_stoppable" },
877 { CTL_INT, 5679 , "debug_active" },
878 {}
879};
880
881static const struct bin_table bin_sunrpc_table[] = {
882
883
884
885
886
887 { CTL_INT, CTL_SLOTTABLE_UDP, "udp_slot_table_entries" },
888 { CTL_INT, CTL_SLOTTABLE_TCP, "tcp_slot_table_entries" },
889 { CTL_INT, CTL_MIN_RESVPORT, "min_resvport" },
890 { CTL_INT, CTL_MAX_RESVPORT, "max_resvport" },
891 {}
892};
893
894static const struct bin_table bin_pm_table[] = {
895
896
897 { CTL_INT, 2 , "cmode" },
898 { CTL_INT, 3 , "p0" },
899 { CTL_INT, 4 , "cm" },
900 {}
901};
902
903static const struct bin_table bin_root_table[] = {
904 { CTL_DIR, CTL_KERN, "kernel", bin_kern_table },
905 { CTL_DIR, CTL_VM, "vm", bin_vm_table },
906 { CTL_DIR, CTL_NET, "net", bin_net_table },
907
908 { CTL_DIR, CTL_FS, "fs", bin_fs_table },
909
910 { CTL_DIR, CTL_DEV, "dev", bin_dev_table },
911 { CTL_DIR, CTL_BUS, "bus", bin_bus_table },
912 { CTL_DIR, CTL_ABI, "abi" },
913
914
915 { CTL_DIR, CTL_S390DBF, "s390dbf", bin_s390dbf_table },
916 { CTL_DIR, CTL_SUNRPC, "sunrpc", bin_sunrpc_table },
917 { CTL_DIR, CTL_PM, "pm", bin_pm_table },
918 {}
919};
920
921static ssize_t bin_dir(struct file *file,
922 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
923{
924 return -ENOTDIR;
925}
926
927
928static ssize_t bin_string(struct file *file,
929 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
930{
931 ssize_t result, copied = 0;
932
933 if (oldval && oldlen) {
934 char __user *lastp;
935 loff_t pos = 0;
936 int ch;
937
938 result = vfs_read(file, oldval, oldlen, &pos);
939 if (result < 0)
940 goto out;
941
942 copied = result;
943 lastp = oldval + copied - 1;
944
945 result = -EFAULT;
946 if (get_user(ch, lastp))
947 goto out;
948
949
950 if (ch == '\n') {
951 result = -EFAULT;
952 if (put_user('\0', lastp))
953 goto out;
954 copied -= 1;
955 }
956 }
957
958 if (newval && newlen) {
959 loff_t pos = 0;
960
961 result = vfs_write(file, newval, newlen, &pos);
962 if (result < 0)
963 goto out;
964 }
965
966 result = copied;
967out:
968 return result;
969}
970
971static ssize_t bin_intvec(struct file *file,
972 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
973{
974 ssize_t copied = 0;
975 char *buffer;
976 ssize_t result;
977
978 result = -ENOMEM;
979 buffer = kmalloc(BUFSZ, GFP_KERNEL);
980 if (!buffer)
981 goto out;
982
983 if (oldval && oldlen) {
984 unsigned __user *vec = oldval;
985 size_t length = oldlen / sizeof(*vec);
986 char *str, *end;
987 int i;
988
989 result = kernel_read(file, 0, buffer, BUFSZ - 1);
990 if (result < 0)
991 goto out_kfree;
992
993 str = buffer;
994 end = str + result;
995 *end++ = '\0';
996 for (i = 0; i < length; i++) {
997 unsigned long value;
998
999 value = simple_strtoul(str, &str, 10);
1000 while (isspace(*str))
1001 str++;
1002
1003 result = -EFAULT;
1004 if (put_user(value, vec + i))
1005 goto out_kfree;
1006
1007 copied += sizeof(*vec);
1008 if (!isdigit(*str))
1009 break;
1010 }
1011 }
1012
1013 if (newval && newlen) {
1014 unsigned __user *vec = newval;
1015 size_t length = newlen / sizeof(*vec);
1016 char *str, *end;
1017 int i;
1018
1019 str = buffer;
1020 end = str + BUFSZ;
1021 for (i = 0; i < length; i++) {
1022 unsigned long value;
1023
1024 result = -EFAULT;
1025 if (get_user(value, vec + i))
1026 goto out_kfree;
1027
1028 str += snprintf(str, end - str, "%lu\t", value);
1029 }
1030
1031 result = kernel_write(file, buffer, str - buffer, 0);
1032 if (result < 0)
1033 goto out_kfree;
1034 }
1035 result = copied;
1036out_kfree:
1037 kfree(buffer);
1038out:
1039 return result;
1040}
1041
1042static ssize_t bin_ulongvec(struct file *file,
1043 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1044{
1045 ssize_t copied = 0;
1046 char *buffer;
1047 ssize_t result;
1048
1049 result = -ENOMEM;
1050 buffer = kmalloc(BUFSZ, GFP_KERNEL);
1051 if (!buffer)
1052 goto out;
1053
1054 if (oldval && oldlen) {
1055 unsigned long __user *vec = oldval;
1056 size_t length = oldlen / sizeof(*vec);
1057 char *str, *end;
1058 int i;
1059
1060 result = kernel_read(file, 0, buffer, BUFSZ - 1);
1061 if (result < 0)
1062 goto out_kfree;
1063
1064 str = buffer;
1065 end = str + result;
1066 *end++ = '\0';
1067 for (i = 0; i < length; i++) {
1068 unsigned long value;
1069
1070 value = simple_strtoul(str, &str, 10);
1071 while (isspace(*str))
1072 str++;
1073
1074 result = -EFAULT;
1075 if (put_user(value, vec + i))
1076 goto out_kfree;
1077
1078 copied += sizeof(*vec);
1079 if (!isdigit(*str))
1080 break;
1081 }
1082 }
1083
1084 if (newval && newlen) {
1085 unsigned long __user *vec = newval;
1086 size_t length = newlen / sizeof(*vec);
1087 char *str, *end;
1088 int i;
1089
1090 str = buffer;
1091 end = str + BUFSZ;
1092 for (i = 0; i < length; i++) {
1093 unsigned long value;
1094
1095 result = -EFAULT;
1096 if (get_user(value, vec + i))
1097 goto out_kfree;
1098
1099 str += snprintf(str, end - str, "%lu\t", value);
1100 }
1101
1102 result = kernel_write(file, buffer, str - buffer, 0);
1103 if (result < 0)
1104 goto out_kfree;
1105 }
1106 result = copied;
1107out_kfree:
1108 kfree(buffer);
1109out:
1110 return result;
1111}
1112
1113static ssize_t bin_uuid(struct file *file,
1114 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1115{
1116 ssize_t result, copied = 0;
1117
1118
1119 if (oldval && oldlen) {
1120 char buf[40], *str = buf;
1121 unsigned char uuid[16];
1122 int i;
1123
1124 result = kernel_read(file, 0, buf, sizeof(buf) - 1);
1125 if (result < 0)
1126 goto out;
1127
1128 buf[result] = '\0';
1129
1130
1131 for (i = 0; i < 16; i++) {
1132 result = -EIO;
1133 if (!isxdigit(str[0]) || !isxdigit(str[1]))
1134 goto out;
1135
1136 uuid[i] = (hex_to_bin(str[0]) << 4) |
1137 hex_to_bin(str[1]);
1138 str += 2;
1139 if (*str == '-')
1140 str++;
1141 }
1142
1143 if (oldlen > 16)
1144 oldlen = 16;
1145
1146 result = -EFAULT;
1147 if (copy_to_user(oldval, uuid, oldlen))
1148 goto out;
1149
1150 copied = oldlen;
1151 }
1152 result = copied;
1153out:
1154 return result;
1155}
1156
1157static ssize_t bin_dn_node_address(struct file *file,
1158 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1159{
1160 ssize_t result, copied = 0;
1161
1162 if (oldval && oldlen) {
1163 char buf[15], *nodep;
1164 unsigned long area, node;
1165 __le16 dnaddr;
1166
1167 result = kernel_read(file, 0, buf, sizeof(buf) - 1);
1168 if (result < 0)
1169 goto out;
1170
1171 buf[result] = '\0';
1172
1173
1174 result = -EIO;
1175 nodep = strchr(buf, '.');
1176 if (!nodep)
1177 goto out;
1178 ++nodep;
1179
1180 area = simple_strtoul(buf, NULL, 10);
1181 node = simple_strtoul(nodep, NULL, 10);
1182
1183 result = -EIO;
1184 if ((area > 63)||(node > 1023))
1185 goto out;
1186
1187 dnaddr = cpu_to_le16((area << 10) | node);
1188
1189 result = -EFAULT;
1190 if (put_user(dnaddr, (__le16 __user *)oldval))
1191 goto out;
1192
1193 copied = sizeof(dnaddr);
1194 }
1195
1196 if (newval && newlen) {
1197 __le16 dnaddr;
1198 char buf[15];
1199 int len;
1200
1201 result = -EINVAL;
1202 if (newlen != sizeof(dnaddr))
1203 goto out;
1204
1205 result = -EFAULT;
1206 if (get_user(dnaddr, (__le16 __user *)newval))
1207 goto out;
1208
1209 len = snprintf(buf, sizeof(buf), "%hu.%hu",
1210 le16_to_cpu(dnaddr) >> 10,
1211 le16_to_cpu(dnaddr) & 0x3ff);
1212
1213 result = kernel_write(file, buf, len, 0);
1214 if (result < 0)
1215 goto out;
1216 }
1217
1218 result = copied;
1219out:
1220 return result;
1221}
1222
1223static const struct bin_table *get_sysctl(const int *name, int nlen, char *path)
1224{
1225 const struct bin_table *table = &bin_root_table[0];
1226 int ctl_name;
1227
1228
1229
1230
1231
1232 memcpy(path, "sys/", 4);
1233 path += 4;
1234
1235repeat:
1236 if (!nlen)
1237 return ERR_PTR(-ENOTDIR);
1238 ctl_name = *name;
1239 name++;
1240 nlen--;
1241 for ( ; table->convert; table++) {
1242 int len = 0;
1243
1244
1245
1246
1247
1248 if (!table->ctl_name) {
1249#ifdef CONFIG_NET
1250 struct net *net = current->nsproxy->net_ns;
1251 struct net_device *dev;
1252 dev = dev_get_by_index(net, ctl_name);
1253 if (dev) {
1254 len = strlen(dev->name);
1255 memcpy(path, dev->name, len);
1256 dev_put(dev);
1257 }
1258#endif
1259
1260 } else if (ctl_name == table->ctl_name) {
1261 len = strlen(table->procname);
1262 memcpy(path, table->procname, len);
1263 }
1264 if (len) {
1265 path += len;
1266 if (table->child) {
1267 *path++ = '/';
1268 table = table->child;
1269 goto repeat;
1270 }
1271 *path = '\0';
1272 return table;
1273 }
1274 }
1275 return ERR_PTR(-ENOTDIR);
1276}
1277
1278static char *sysctl_getname(const int *name, int nlen, const struct bin_table **tablep)
1279{
1280 char *tmp, *result;
1281
1282 result = ERR_PTR(-ENOMEM);
1283 tmp = __getname();
1284 if (tmp) {
1285 const struct bin_table *table = get_sysctl(name, nlen, tmp);
1286 result = tmp;
1287 *tablep = table;
1288 if (IS_ERR(table)) {
1289 __putname(tmp);
1290 result = ERR_CAST(table);
1291 }
1292 }
1293 return result;
1294}
1295
1296static ssize_t binary_sysctl(const int *name, int nlen,
1297 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1298{
1299 const struct bin_table *table = NULL;
1300 struct vfsmount *mnt;
1301 struct file *file;
1302 ssize_t result;
1303 char *pathname;
1304 int flags;
1305
1306 pathname = sysctl_getname(name, nlen, &table);
1307 result = PTR_ERR(pathname);
1308 if (IS_ERR(pathname))
1309 goto out;
1310
1311
1312 if (oldval && oldlen && newval && newlen) {
1313 flags = O_RDWR;
1314 } else if (newval && newlen) {
1315 flags = O_WRONLY;
1316 } else if (oldval && oldlen) {
1317 flags = O_RDONLY;
1318 } else {
1319 result = 0;
1320 goto out_putname;
1321 }
1322
1323 mnt = task_active_pid_ns(current)->proc_mnt;
1324 file = file_open_root(mnt->mnt_root, mnt, pathname, flags);
1325 result = PTR_ERR(file);
1326 if (IS_ERR(file))
1327 goto out_putname;
1328
1329 result = table->convert(file, oldval, oldlen, newval, newlen);
1330
1331 fput(file);
1332out_putname:
1333 __putname(pathname);
1334out:
1335 return result;
1336}
1337
1338
1339#else
1340
1341static ssize_t binary_sysctl(const int *name, int nlen,
1342 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1343{
1344 return -ENOSYS;
1345}
1346
1347#endif
1348
1349
1350static void deprecated_sysctl_warning(const int *name, int nlen)
1351{
1352 int i;
1353
1354
1355
1356
1357
1358 if (name[0] == CTL_KERN && name[1] == KERN_VERSION)
1359 return;
1360
1361 if (printk_ratelimit()) {
1362 printk(KERN_INFO
1363 "warning: process `%s' used the deprecated sysctl "
1364 "system call with ", current->comm);
1365 for (i = 0; i < nlen; i++)
1366 printk("%d.", name[i]);
1367 printk("\n");
1368 }
1369 return;
1370}
1371
1372#define WARN_ONCE_HASH_BITS 8
1373#define WARN_ONCE_HASH_SIZE (1<<WARN_ONCE_HASH_BITS)
1374
1375static DECLARE_BITMAP(warn_once_bitmap, WARN_ONCE_HASH_SIZE);
1376
1377#define FNV32_OFFSET 2166136261U
1378#define FNV32_PRIME 0x01000193
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388static void warn_on_bintable(const int *name, int nlen)
1389{
1390 int i;
1391 u32 hash = FNV32_OFFSET;
1392
1393 for (i = 0; i < nlen; i++)
1394 hash = (hash ^ name[i]) * FNV32_PRIME;
1395 hash %= WARN_ONCE_HASH_SIZE;
1396 if (__test_and_set_bit(hash, warn_once_bitmap))
1397 return;
1398 deprecated_sysctl_warning(name, nlen);
1399}
1400
1401static ssize_t do_sysctl(int __user *args_name, int nlen,
1402 void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1403{
1404 int name[CTL_MAXNAME];
1405 int i;
1406
1407
1408 if (nlen < 0 || nlen > CTL_MAXNAME)
1409 return -ENOTDIR;
1410
1411 for (i = 0; i < nlen; i++)
1412 if (get_user(name[i], args_name + i))
1413 return -EFAULT;
1414
1415 warn_on_bintable(name, nlen);
1416
1417 return binary_sysctl(name, nlen, oldval, oldlen, newval, newlen);
1418}
1419
1420SYSCALL_DEFINE1(sysctl, struct __sysctl_args __user *, args)
1421{
1422 struct __sysctl_args tmp;
1423 size_t oldlen = 0;
1424 ssize_t result;
1425
1426 if (copy_from_user(&tmp, args, sizeof(tmp)))
1427 return -EFAULT;
1428
1429 if (tmp.oldval && !tmp.oldlenp)
1430 return -EFAULT;
1431
1432 if (tmp.oldlenp && get_user(oldlen, tmp.oldlenp))
1433 return -EFAULT;
1434
1435 result = do_sysctl(tmp.name, tmp.nlen, tmp.oldval, oldlen,
1436 tmp.newval, tmp.newlen);
1437
1438 if (result >= 0) {
1439 oldlen = result;
1440 result = 0;
1441 }
1442
1443 if (tmp.oldlenp && put_user(oldlen, tmp.oldlenp))
1444 return -EFAULT;
1445
1446 return result;
1447}
1448
1449
1450#ifdef CONFIG_COMPAT
1451
1452struct compat_sysctl_args {
1453 compat_uptr_t name;
1454 int nlen;
1455 compat_uptr_t oldval;
1456 compat_uptr_t oldlenp;
1457 compat_uptr_t newval;
1458 compat_size_t newlen;
1459 compat_ulong_t __unused[4];
1460};
1461
1462COMPAT_SYSCALL_DEFINE1(sysctl, struct compat_sysctl_args __user *, args)
1463{
1464 struct compat_sysctl_args tmp;
1465 compat_size_t __user *compat_oldlenp;
1466 size_t oldlen = 0;
1467 ssize_t result;
1468
1469 if (copy_from_user(&tmp, args, sizeof(tmp)))
1470 return -EFAULT;
1471
1472 if (tmp.oldval && !tmp.oldlenp)
1473 return -EFAULT;
1474
1475 compat_oldlenp = compat_ptr(tmp.oldlenp);
1476 if (compat_oldlenp && get_user(oldlen, compat_oldlenp))
1477 return -EFAULT;
1478
1479 result = do_sysctl(compat_ptr(tmp.name), tmp.nlen,
1480 compat_ptr(tmp.oldval), oldlen,
1481 compat_ptr(tmp.newval), tmp.newlen);
1482
1483 if (result >= 0) {
1484 oldlen = result;
1485 result = 0;
1486 }
1487
1488 if (compat_oldlenp && put_user(oldlen, compat_oldlenp))
1489 return -EFAULT;
1490
1491 return result;
1492}
1493
1494#endif
1495
