1 /* 2 * Bridge netlink control interface 3 * 4 * Authors: 5 * Stephen Hemminger <shemminger@osdl.org> 6 * 7 * This program is free software; you can redistribute it and/or 8 * modify it under the terms of the GNU General Public License 9 * as published by the Free Software Foundation; either version 10 * 2 of the License, or (at your option) any later version. 11 */ 12 13 #include <linux/kernel.h> 14 #include <linux/slab.h> 15 #include <linux/etherdevice.h> 16 #include <net/rtnetlink.h> 17 #include <net/net_namespace.h> 18 #include <net/sock.h> 19 #include <uapi/linux/if_bridge.h> 20 21 #include "br_private.h" 22 #include "br_private_stp.h" 23 24 static inline size_t br_port_info_size(void) 25 { 26 return nla_total_size(1) /* IFLA_BRPORT_STATE */ 27 + nla_total_size(2) /* IFLA_BRPORT_PRIORITY */ 28 + nla_total_size(4) /* IFLA_BRPORT_COST */ 29 + nla_total_size(1) /* IFLA_BRPORT_MODE */ 30 + nla_total_size(1) /* IFLA_BRPORT_GUARD */ 31 + nla_total_size(1) /* IFLA_BRPORT_PROTECT */ 32 + nla_total_size(1) /* IFLA_BRPORT_FAST_LEAVE */ 33 + nla_total_size(1) /* IFLA_BRPORT_LEARNING */ 34 + nla_total_size(1) /* IFLA_BRPORT_UNICAST_FLOOD */ 35 + 0; 36 } 37 38 static inline size_t br_nlmsg_size(void) 39 { 40 return NLMSG_ALIGN(sizeof(struct ifinfomsg)) 41 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */ 42 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */ 43 + nla_total_size(4) /* IFLA_MASTER */ 44 + nla_total_size(4) /* IFLA_MTU */ 45 + nla_total_size(4) /* IFLA_LINK */ 46 + nla_total_size(1) /* IFLA_OPERSTATE */ 47 + nla_total_size(br_port_info_size()); /* IFLA_PROTINFO */ 48 } 49 50 static int br_port_fill_attrs(struct sk_buff *skb, 51 const struct net_bridge_port *p) 52 { 53 u8 mode = !!(p->flags & BR_HAIRPIN_MODE); 54 55 if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) || 56 nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) || 57 nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) || 58 nla_put_u8(skb, IFLA_BRPORT_MODE, mode) || 59 nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) || 60 nla_put_u8(skb, IFLA_BRPORT_PROTECT, !!(p->flags & BR_ROOT_BLOCK)) || 61 nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE, !!(p->flags & BR_MULTICAST_FAST_LEAVE)) || 62 nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) || 63 nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD, !!(p->flags & BR_FLOOD)) || 64 nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP))) 65 return -EMSGSIZE; 66 67 return 0; 68 } 69 70 /* 71 * Create one netlink message for one interface 72 * Contains port and master info as well as carrier and bridge state. 73 */ 74 static int br_fill_ifinfo(struct sk_buff *skb, 75 const struct net_bridge_port *port, 76 u32 pid, u32 seq, int event, unsigned int flags, 77 u32 filter_mask, const struct net_device *dev) 78 { 79 const struct net_bridge *br; 80 struct ifinfomsg *hdr; 81 struct nlmsghdr *nlh; 82 u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN; 83 84 if (port) 85 br = port->br; 86 else 87 br = netdev_priv(dev); 88 89 br_debug(br, "br_fill_info event %d port %s master %s\n", 90 event, dev->name, br->dev->name); 91 92 nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags); 93 if (nlh == NULL) 94 return -EMSGSIZE; 95 96 hdr = nlmsg_data(nlh); 97 hdr->ifi_family = AF_BRIDGE; 98 hdr->__ifi_pad = 0; 99 hdr->ifi_type = dev->type; 100 hdr->ifi_index = dev->ifindex; 101 hdr->ifi_flags = dev_get_flags(dev); 102 hdr->ifi_change = 0; 103 104 if (nla_put_string(skb, IFLA_IFNAME, dev->name) || 105 nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) || 106 nla_put_u32(skb, IFLA_MTU, dev->mtu) || 107 nla_put_u8(skb, IFLA_OPERSTATE, operstate) || 108 (dev->addr_len && 109 nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) || 110 (dev->ifindex != dev->iflink && 111 nla_put_u32(skb, IFLA_LINK, dev->iflink))) 112 goto nla_put_failure; 113 114 if (event == RTM_NEWLINK && port) { 115 struct nlattr *nest 116 = nla_nest_start(skb, IFLA_PROTINFO | NLA_F_NESTED); 117 118 if (nest == NULL || br_port_fill_attrs(skb, port) < 0) 119 goto nla_put_failure; 120 nla_nest_end(skb, nest); 121 } 122 123 /* Check if the VID information is requested */ 124 if (filter_mask & RTEXT_FILTER_BRVLAN) { 125 struct nlattr *af; 126 const struct net_port_vlans *pv; 127 struct bridge_vlan_info vinfo; 128 u16 vid; 129 u16 pvid; 130 131 if (port) 132 pv = nbp_get_vlan_info(port); 133 else 134 pv = br_get_vlan_info(br); 135 136 if (!pv || bitmap_empty(pv->vlan_bitmap, VLAN_N_VID)) 137 goto done; 138 139 af = nla_nest_start(skb, IFLA_AF_SPEC); 140 if (!af) 141 goto nla_put_failure; 142 143 pvid = br_get_pvid(pv); 144 for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID) { 145 vinfo.vid = vid; 146 vinfo.flags = 0; 147 if (vid == pvid) 148 vinfo.flags |= BRIDGE_VLAN_INFO_PVID; 149 150 if (test_bit(vid, pv->untagged_bitmap)) 151 vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED; 152 153 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO, 154 sizeof(vinfo), &vinfo)) 155 goto nla_put_failure; 156 } 157 158 nla_nest_end(skb, af); 159 } 160 161 done: 162 return nlmsg_end(skb, nlh); 163 164 nla_put_failure: 165 nlmsg_cancel(skb, nlh); 166 return -EMSGSIZE; 167 } 168 169 /* 170 * Notify listeners of a change in port information 171 */ 172 void br_ifinfo_notify(int event, struct net_bridge_port *port) 173 { 174 struct net *net; 175 struct sk_buff *skb; 176 int err = -ENOBUFS; 177 178 if (!port) 179 return; 180 181 net = dev_net(port->dev); 182 br_debug(port->br, "port %u(%s) event %d\n", 183 (unsigned int)port->port_no, port->dev->name, event); 184 185 skb = nlmsg_new(br_nlmsg_size(), GFP_ATOMIC); 186 if (skb == NULL) 187 goto errout; 188 189 err = br_fill_ifinfo(skb, port, 0, 0, event, 0, 0, port->dev); 190 if (err < 0) { 191 /* -EMSGSIZE implies BUG in br_nlmsg_size() */ 192 WARN_ON(err == -EMSGSIZE); 193 kfree_skb(skb); 194 goto errout; 195 } 196 rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC); 197 return; 198 errout: 199 rtnl_set_sk_err(net, RTNLGRP_LINK, err); 200 } 201 202 203 /* 204 * Dump information about all ports, in response to GETLINK 205 */ 206 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq, 207 struct net_device *dev, u32 filter_mask) 208 { 209 int err = 0; 210 struct net_bridge_port *port = br_port_get_rtnl(dev); 211 212 if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN)) 213 goto out; 214 215 err = br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, NLM_F_MULTI, 216 filter_mask, dev); 217 out: 218 return err; 219 } 220 221 static const struct nla_policy ifla_br_policy[IFLA_MAX+1] = { 222 [IFLA_BRIDGE_FLAGS] = { .type = NLA_U16 }, 223 [IFLA_BRIDGE_MODE] = { .type = NLA_U16 }, 224 [IFLA_BRIDGE_VLAN_INFO] = { .type = NLA_BINARY, 225 .len = sizeof(struct bridge_vlan_info), }, 226 }; 227 228 static int br_afspec(struct net_bridge *br, 229 struct net_bridge_port *p, 230 struct nlattr *af_spec, 231 int cmd) 232 { 233 struct nlattr *tb[IFLA_BRIDGE_MAX+1]; 234 int err = 0; 235 236 err = nla_parse_nested(tb, IFLA_BRIDGE_MAX, af_spec, ifla_br_policy); 237 if (err) 238 return err; 239 240 if (tb[IFLA_BRIDGE_VLAN_INFO]) { 241 struct bridge_vlan_info *vinfo; 242 243 vinfo = nla_data(tb[IFLA_BRIDGE_VLAN_INFO]); 244 245 if (!vinfo->vid || vinfo->vid >= VLAN_VID_MASK) 246 return -EINVAL; 247 248 switch (cmd) { 249 case RTM_SETLINK: 250 if (p) { 251 err = nbp_vlan_add(p, vinfo->vid, vinfo->flags); 252 if (err) 253 break; 254 255 if (vinfo->flags & BRIDGE_VLAN_INFO_MASTER) 256 err = br_vlan_add(p->br, vinfo->vid, 257 vinfo->flags); 258 } else 259 err = br_vlan_add(br, vinfo->vid, vinfo->flags); 260 261 break; 262 263 case RTM_DELLINK: 264 if (p) { 265 nbp_vlan_delete(p, vinfo->vid); 266 if (vinfo->flags & BRIDGE_VLAN_INFO_MASTER) 267 br_vlan_delete(p->br, vinfo->vid); 268 } else 269 br_vlan_delete(br, vinfo->vid); 270 break; 271 } 272 } 273 274 return err; 275 } 276 277 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = { 278 [IFLA_BRPORT_STATE] = { .type = NLA_U8 }, 279 [IFLA_BRPORT_COST] = { .type = NLA_U32 }, 280 [IFLA_BRPORT_PRIORITY] = { .type = NLA_U16 }, 281 [IFLA_BRPORT_MODE] = { .type = NLA_U8 }, 282 [IFLA_BRPORT_GUARD] = { .type = NLA_U8 }, 283 [IFLA_BRPORT_PROTECT] = { .type = NLA_U8 }, 284 [IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 }, 285 [IFLA_BRPORT_LEARNING] = { .type = NLA_U8 }, 286 [IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 }, 287 }; 288 289 /* Change the state of the port and notify spanning tree */ 290 static int br_set_port_state(struct net_bridge_port *p, u8 state) 291 { 292 if (state > BR_STATE_BLOCKING) 293 return -EINVAL; 294 295 /* if kernel STP is running, don't allow changes */ 296 if (p->br->stp_enabled == BR_KERNEL_STP) 297 return -EBUSY; 298 299 /* if device is not up, change is not allowed 300 * if link is not present, only allowable state is disabled 301 */ 302 if (!netif_running(p->dev) || 303 (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED)) 304 return -ENETDOWN; 305 306 br_set_state(p, state); 307 br_log_state(p); 308 br_port_state_selection(p->br); 309 return 0; 310 } 311 312 /* Set/clear or port flags based on attribute */ 313 static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[], 314 int attrtype, unsigned long mask) 315 { 316 if (tb[attrtype]) { 317 u8 flag = nla_get_u8(tb[attrtype]); 318 if (flag) 319 p->flags |= mask; 320 else 321 p->flags &= ~mask; 322 } 323 } 324 325 /* Process bridge protocol info on port */ 326 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[]) 327 { 328 int err; 329 unsigned long old_flags = p->flags; 330 331 br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE); 332 br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD); 333 br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE, BR_MULTICAST_FAST_LEAVE); 334 br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK); 335 br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING); 336 br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD); 337 br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP); 338 339 if (tb[IFLA_BRPORT_COST]) { 340 err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST])); 341 if (err) 342 return err; 343 } 344 345 if (tb[IFLA_BRPORT_PRIORITY]) { 346 err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY])); 347 if (err) 348 return err; 349 } 350 351 if (tb[IFLA_BRPORT_STATE]) { 352 err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE])); 353 if (err) 354 return err; 355 } 356 357 br_port_flags_change(p, old_flags ^ p->flags); 358 return 0; 359 } 360 361 /* Change state and parameters on port. */ 362 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh) 363 { 364 struct nlattr *protinfo; 365 struct nlattr *afspec; 366 struct net_bridge_port *p; 367 struct nlattr *tb[IFLA_BRPORT_MAX + 1]; 368 int err = 0; 369 370 protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO); 371 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC); 372 if (!protinfo && !afspec) 373 return 0; 374 375 p = br_port_get_rtnl(dev); 376 /* We want to accept dev as bridge itself if the AF_SPEC 377 * is set to see if someone is setting vlan info on the bridge 378 */ 379 if (!p && !afspec) 380 return -EINVAL; 381 382 if (p && protinfo) { 383 if (protinfo->nla_type & NLA_F_NESTED) { 384 err = nla_parse_nested(tb, IFLA_BRPORT_MAX, 385 protinfo, br_port_policy); 386 if (err) 387 return err; 388 389 spin_lock_bh(&p->br->lock); 390 err = br_setport(p, tb); 391 spin_unlock_bh(&p->br->lock); 392 } else { 393 /* Binary compatibility with old RSTP */ 394 if (nla_len(protinfo) < sizeof(u8)) 395 return -EINVAL; 396 397 spin_lock_bh(&p->br->lock); 398 err = br_set_port_state(p, nla_get_u8(protinfo)); 399 spin_unlock_bh(&p->br->lock); 400 } 401 if (err) 402 goto out; 403 } 404 405 if (afspec) { 406 err = br_afspec((struct net_bridge *)netdev_priv(dev), p, 407 afspec, RTM_SETLINK); 408 } 409 410 if (err == 0) 411 br_ifinfo_notify(RTM_NEWLINK, p); 412 413 out: 414 return err; 415 } 416 417 /* Delete port information */ 418 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh) 419 { 420 struct nlattr *afspec; 421 struct net_bridge_port *p; 422 int err; 423 424 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC); 425 if (!afspec) 426 return 0; 427 428 p = br_port_get_rtnl(dev); 429 /* We want to accept dev as bridge itself as well */ 430 if (!p && !(dev->priv_flags & IFF_EBRIDGE)) 431 return -EINVAL; 432 433 err = br_afspec((struct net_bridge *)netdev_priv(dev), p, 434 afspec, RTM_DELLINK); 435 436 return err; 437 } 438 static int br_validate(struct nlattr *tb[], struct nlattr *data[]) 439 { 440 if (tb[IFLA_ADDRESS]) { 441 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN) 442 return -EINVAL; 443 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS]))) 444 return -EADDRNOTAVAIL; 445 } 446 447 return 0; 448 } 449 450 static int br_dev_newlink(struct net *src_net, struct net_device *dev, 451 struct nlattr *tb[], struct nlattr *data[]) 452 { 453 struct net_bridge *br = netdev_priv(dev); 454 455 if (tb[IFLA_ADDRESS]) { 456 spin_lock_bh(&br->lock); 457 br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS])); 458 spin_unlock_bh(&br->lock); 459 } 460 461 return register_netdevice(dev); 462 } 463 464 static int br_port_slave_changelink(struct net_device *brdev, 465 struct net_device *dev, 466 struct nlattr *tb[], 467 struct nlattr *data[]) 468 { 469 if (!data) 470 return 0; 471 return br_setport(br_port_get_rtnl(dev), data); 472 } 473 474 static int br_port_fill_slave_info(struct sk_buff *skb, 475 const struct net_device *brdev, 476 const struct net_device *dev) 477 { 478 return br_port_fill_attrs(skb, br_port_get_rtnl(dev)); 479 } 480 481 static size_t br_port_get_slave_size(const struct net_device *brdev, 482 const struct net_device *dev) 483 { 484 return br_port_info_size(); 485 } 486 487 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = { 488 [IFLA_BR_FORWARD_DELAY] = { .type = NLA_U32 }, 489 [IFLA_BR_HELLO_TIME] = { .type = NLA_U32 }, 490 [IFLA_BR_MAX_AGE] = { .type = NLA_U32 }, 491 }; 492 493 static int br_changelink(struct net_device *brdev, struct nlattr *tb[], 494 struct nlattr *data[]) 495 { 496 struct net_bridge *br = netdev_priv(brdev); 497 int err; 498 499 if (!data) 500 return 0; 501 502 if (data[IFLA_BR_FORWARD_DELAY]) { 503 err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY])); 504 if (err) 505 return err; 506 } 507 508 if (data[IFLA_BR_HELLO_TIME]) { 509 err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME])); 510 if (err) 511 return err; 512 } 513 514 if (data[IFLA_BR_MAX_AGE]) { 515 err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE])); 516 if (err) 517 return err; 518 } 519 520 return 0; 521 } 522 523 static size_t br_get_size(const struct net_device *brdev) 524 { 525 return nla_total_size(sizeof(u32)) + /* IFLA_BR_FORWARD_DELAY */ 526 nla_total_size(sizeof(u32)) + /* IFLA_BR_HELLO_TIME */ 527 nla_total_size(sizeof(u32)) + /* IFLA_BR_MAX_AGE */ 528 0; 529 } 530 531 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev) 532 { 533 struct net_bridge *br = netdev_priv(brdev); 534 u32 forward_delay = jiffies_to_clock_t(br->forward_delay); 535 u32 hello_time = jiffies_to_clock_t(br->hello_time); 536 u32 age_time = jiffies_to_clock_t(br->max_age); 537 538 if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) || 539 nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) || 540 nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time)) 541 return -EMSGSIZE; 542 543 return 0; 544 } 545 546 static size_t br_get_link_af_size(const struct net_device *dev) 547 { 548 struct net_port_vlans *pv; 549 550 if (br_port_exists(dev)) 551 pv = nbp_get_vlan_info(br_port_get_rtnl(dev)); 552 else if (dev->priv_flags & IFF_EBRIDGE) 553 pv = br_get_vlan_info((struct net_bridge *)netdev_priv(dev)); 554 else 555 return 0; 556 557 if (!pv) 558 return 0; 559 560 /* Each VLAN is returned in bridge_vlan_info along with flags */ 561 return pv->num_vlans * nla_total_size(sizeof(struct bridge_vlan_info)); 562 } 563 564 static struct rtnl_af_ops br_af_ops = { 565 .family = AF_BRIDGE, 566 .get_link_af_size = br_get_link_af_size, 567 }; 568 569 struct rtnl_link_ops br_link_ops __read_mostly = { 570 .kind = "bridge", 571 .priv_size = sizeof(struct net_bridge), 572 .setup = br_dev_setup, 573 .maxtype = IFLA_BRPORT_MAX, 574 .policy = br_policy, 575 .validate = br_validate, 576 .newlink = br_dev_newlink, 577 .changelink = br_changelink, 578 .dellink = br_dev_delete, 579 .get_size = br_get_size, 580 .fill_info = br_fill_info, 581 582 .slave_maxtype = IFLA_BRPORT_MAX, 583 .slave_policy = br_port_policy, 584 .slave_changelink = br_port_slave_changelink, 585 .get_slave_size = br_port_get_slave_size, 586 .fill_slave_info = br_port_fill_slave_info, 587 }; 588 589 int __init br_netlink_init(void) 590 { 591 int err; 592 593 br_mdb_init(); 594 rtnl_af_register(&br_af_ops); 595 596 err = rtnl_link_register(&br_link_ops); 597 if (err) 598 goto out_af; 599 600 return 0; 601 602 out_af: 603 rtnl_af_unregister(&br_af_ops); 604 br_mdb_uninit(); 605 return err; 606 } 607 608 void br_netlink_fini(void) 609 { 610 br_mdb_uninit(); 611 rtnl_af_unregister(&br_af_ops); 612 rtnl_link_unregister(&br_link_ops); 613 } 614