GitHub-Mirror/linux-bl808
2
0
Fork 0
mirror of https://github.com/Fishwaldo/linux-bl808.git synced 2025-03-21 06:24:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

net: Kill register_sysctl_rotable

Browse source 
register_sysctl_rotable never caught on as an interesting way to
register sysctls.  My take on the situation is that what we want are
sysctls that we can only see in the initial network namespace.  What we
have implemented with register_sysctl_rotable are sysctls that we can
see in all of the network namespaces and can only change in the initial
network namespace.

That is a very silly way to go.  Just register the network sysctls
in the initial network namespace and we don't have any weird special
cases to deal with.

The sysctls affected are:
/proc/sys/net/ipv4/ipfrag_secret_interval
/proc/sys/net/ipv4/ipfrag_max_dist
/proc/sys/net/ipv6/ip6frag_secret_interval
/proc/sys/net/ipv6/mld_max_msf

I really don't expect anyone will miss them if they can't read them in a
child user namespace.

CC: Pavel Emelyanov <xemul@openvz.org>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Acked-by: Pavel Emelyanov <xemul@parallels.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Eric W. Biederman 2012-04-19 13:22:55 +00:00 • committed by David S. Miller
parent 2ca794e5e8
commit 4344475797
6 changed files with 4 additions and 29 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
include/net/net_namespace.h
View file

@ -290,8 +290,6 @@ static inline int net_sysctl_init(void) { return 0; }
#endif #endif
extern struct ctl_table_header *register_net_sysctl_table(struct net *net, extern struct ctl_table_header *register_net_sysctl_table(struct net *net,
const struct ctl_path *path, struct ctl_table *table); const struct ctl_path *path, struct ctl_table *table);
extern struct ctl_table_header *register_net_sysctl_rotable(
const struct ctl_path *path, struct ctl_table *table);
extern struct ctl_table_header *register_net_sysctl(struct net *net, extern struct ctl_table_header *register_net_sysctl(struct net *net,
const char *path, struct ctl_table *table); const char *path, struct ctl_table *table);
extern void unregister_net_sysctl_table(struct ctl_table_header *header); extern void unregister_net_sysctl_table(struct ctl_table_header *header);

2
net/core/sysctl_net_core.c
View file

@ -258,7 +258,7 @@ static __init int sysctl_core_init(void)
static struct ctl_table empty[1]; static struct ctl_table empty[1];
kmemleak_not_leak(register_sysctl_paths(net_core_path, empty)); kmemleak_not_leak(register_sysctl_paths(net_core_path, empty));
register_net_sysctl_rotable(net_core_path, net_core_table); register_net_sysctl(&init_net, "net/core", net_core_table);
return register_pernet_subsys(&sysctl_core_ops); return register_pernet_subsys(&sysctl_core_ops);
} }

2
net/ipv4/ip_fragment.c
View file

@ -807,7 +807,7 @@ static void __net_exit ip4_frags_ns_ctl_unregister(struct net *net)
static void ip4_frags_ctl_register(void) static void ip4_frags_ctl_register(void)
{ {
register_net_sysctl_rotable(net_ipv4_ctl_path, ip4_frags_ctl_table); register_net_sysctl(&init_net, "net/ipv4", ip4_frags_ctl_table);
} }
#else #else
static inline int ip4_frags_ns_ctl_register(struct net *net) static inline int ip4_frags_ns_ctl_register(struct net *net)

2
net/ipv6/reassembly.c
View file

@ -674,7 +674,7 @@ static struct ctl_table_header *ip6_ctl_header;
static int ip6_frags_sysctl_register(void) static int ip6_frags_sysctl_register(void)
{ {
ip6_ctl_header = register_net_sysctl_rotable(net_ipv6_ctl_path, ip6_ctl_header = register_net_sysctl(&init_net, "net/ipv6",
ip6_frags_ctl_table); ip6_frags_ctl_table);
return ip6_ctl_header == NULL ? -ENOMEM : 0; return ip6_ctl_header == NULL ? -ENOMEM : 0;
} }

2
net/ipv6/sysctl_net_ipv6.c
View file

@ -140,7 +140,7 @@ int ipv6_sysctl_register(void)
{ {
int err = -ENOMEM; int err = -ENOMEM;
ip6_header = register_net_sysctl_rotable(net_ipv6_ctl_path, ipv6_rotable); ip6_header = register_net_sysctl(&init_net, "net/ipv6", ipv6_rotable);
if (ip6_header == NULL) if (ip6_header == NULL)
goto out; goto out;

23
net/sysctl_net.c
View file

@ -59,19 +59,6 @@ static struct ctl_table_root net_sysctl_root = {
.permissions = net_ctl_permissions, .permissions = net_ctl_permissions,
}; };
static int net_ctl_ro_header_perms(struct ctl_table_root *root,
struct nsproxy *namespaces, struct ctl_table *table)
{
if (net_eq(namespaces->net_ns, &init_net))
return table->mode;
else
return table->mode & ~0222;
}
static struct ctl_table_root net_sysctl_ro_root = {
.permissions = net_ctl_ro_header_perms,
};
static int __net_init sysctl_net_init(struct net *net) static int __net_init sysctl_net_init(struct net *net)
{ {
setup_sysctl_set(&net->sysctls, &net_sysctl_root, is_seen); setup_sysctl_set(&net->sysctls, &net_sysctl_root, is_seen);
@ -103,8 +90,6 @@ __init int net_sysctl_init(void)
ret = register_pernet_subsys(&sysctl_pernet_ops); ret = register_pernet_subsys(&sysctl_pernet_ops);
if (ret) if (ret)
goto out; goto out;
setup_sysctl_set(&net_sysctl_ro_root.default_set, &net_sysctl_ro_root, NULL);
register_sysctl_root(&net_sysctl_ro_root);
register_sysctl_root(&net_sysctl_root); register_sysctl_root(&net_sysctl_root);
out: out:
return ret; return ret;
@ -117,14 +102,6 @@ struct ctl_table_header *register_net_sysctl_table(struct net *net,
} }
EXPORT_SYMBOL_GPL(register_net_sysctl_table); EXPORT_SYMBOL_GPL(register_net_sysctl_table);
struct ctl_table_header *register_net_sysctl_rotable(const
struct ctl_path *path, struct ctl_table *table)
{
return __register_sysctl_paths(&net_sysctl_ro_root.default_set,
path, table);
}
EXPORT_SYMBOL_GPL(register_net_sysctl_rotable);
struct ctl_table_header *register_net_sysctl(struct net *net, struct ctl_table_header *register_net_sysctl(struct net *net,
const char *path, struct ctl_table *table) const char *path, struct ctl_table *table)
{ {