1 // SPDX-License-Identifier: GPL-2.0 2 /* 3 * sysctl_net_ipv6.c: sysctl interface to net IPV6 subsystem. 4 * 5 * Changes: 6 * YOSHIFUJI Hideaki @USAGI: added icmp sysctl table. 7 */ 8 9 #include <linux/mm.h> 10 #include <linux/sysctl.h> 11 #include <linux/in6.h> 12 #include <linux/ipv6.h> 13 #include <linux/slab.h> 14 #include <linux/export.h> 15 #include <net/ndisc.h> 16 #include <net/ipv6.h> 17 #include <net/addrconf.h> 18 #include <net/inet_frag.h> 19 #ifdef CONFIG_NETLABEL 20 #include <net/calipso.h> 21 #endif 22 23 static int one = 1; 24 static int auto_flowlabels_min; 25 static int auto_flowlabels_max = IP6_AUTO_FLOW_LABEL_MAX; 26 27 28 static struct ctl_table ipv6_table_template[] = { 29 { 30 .procname = "bindv6only", 31 .data = &init_net.ipv6.sysctl.bindv6only, 32 .maxlen = sizeof(int), 33 .mode = 0644, 34 .proc_handler = proc_dointvec 35 }, 36 { 37 .procname = "anycast_src_echo_reply", 38 .data = &init_net.ipv6.sysctl.anycast_src_echo_reply, 39 .maxlen = sizeof(int), 40 .mode = 0644, 41 .proc_handler = proc_dointvec 42 }, 43 { 44 .procname = "flowlabel_consistency", 45 .data = &init_net.ipv6.sysctl.flowlabel_consistency, 46 .maxlen = sizeof(int), 47 .mode = 0644, 48 .proc_handler = proc_dointvec 49 }, 50 { 51 .procname = "auto_flowlabels", 52 .data = &init_net.ipv6.sysctl.auto_flowlabels, 53 .maxlen = sizeof(int), 54 .mode = 0644, 55 .proc_handler = proc_dointvec_minmax, 56 .extra1 = &auto_flowlabels_min, 57 .extra2 = &auto_flowlabels_max 58 }, 59 { 60 .procname = "fwmark_reflect", 61 .data = &init_net.ipv6.sysctl.fwmark_reflect, 62 .maxlen = sizeof(int), 63 .mode = 0644, 64 .proc_handler = proc_dointvec 65 }, 66 { 67 .procname = "idgen_retries", 68 .data = &init_net.ipv6.sysctl.idgen_retries, 69 .maxlen = sizeof(int), 70 .mode = 0644, 71 .proc_handler = proc_dointvec, 72 }, 73 { 74 .procname = "idgen_delay", 75 .data = &init_net.ipv6.sysctl.idgen_delay, 76 .maxlen = sizeof(int), 77 .mode = 0644, 78 .proc_handler = proc_dointvec_jiffies, 79 }, 80 { 81 .procname = "flowlabel_state_ranges", 82 .data = &init_net.ipv6.sysctl.flowlabel_state_ranges, 83 .maxlen = sizeof(int), 84 .mode = 0644, 85 .proc_handler = proc_dointvec 86 }, 87 { 88 .procname = "ip_nonlocal_bind", 89 .data = &init_net.ipv6.sysctl.ip_nonlocal_bind, 90 .maxlen = sizeof(int), 91 .mode = 0644, 92 .proc_handler = proc_dointvec 93 }, 94 { 95 .procname = "flowlabel_reflect", 96 .data = &init_net.ipv6.sysctl.flowlabel_reflect, 97 .maxlen = sizeof(int), 98 .mode = 0644, 99 .proc_handler = proc_dointvec, 100 }, 101 { 102 .procname = "max_dst_opts_number", 103 .data = &init_net.ipv6.sysctl.max_dst_opts_cnt, 104 .maxlen = sizeof(int), 105 .mode = 0644, 106 .proc_handler = proc_dointvec 107 }, 108 { 109 .procname = "max_hbh_opts_number", 110 .data = &init_net.ipv6.sysctl.max_hbh_opts_cnt, 111 .maxlen = sizeof(int), 112 .mode = 0644, 113 .proc_handler = proc_dointvec 114 }, 115 { 116 .procname = "max_dst_opts_length", 117 .data = &init_net.ipv6.sysctl.max_dst_opts_len, 118 .maxlen = sizeof(int), 119 .mode = 0644, 120 .proc_handler = proc_dointvec 121 }, 122 { 123 .procname = "max_hbh_length", 124 .data = &init_net.ipv6.sysctl.max_hbh_opts_len, 125 .maxlen = sizeof(int), 126 .mode = 0644, 127 .proc_handler = proc_dointvec 128 }, 129 { } 130 }; 131 132 static struct ctl_table ipv6_rotable[] = { 133 { 134 .procname = "mld_max_msf", 135 .data = &sysctl_mld_max_msf, 136 .maxlen = sizeof(int), 137 .mode = 0644, 138 .proc_handler = proc_dointvec 139 }, 140 { 141 .procname = "mld_qrv", 142 .data = &sysctl_mld_qrv, 143 .maxlen = sizeof(int), 144 .mode = 0644, 145 .proc_handler = proc_dointvec_minmax, 146 .extra1 = &one 147 }, 148 #ifdef CONFIG_NETLABEL 149 { 150 .procname = "calipso_cache_enable", 151 .data = &calipso_cache_enabled, 152 .maxlen = sizeof(int), 153 .mode = 0644, 154 .proc_handler = proc_dointvec, 155 }, 156 { 157 .procname = "calipso_cache_bucket_size", 158 .data = &calipso_cache_bucketsize, 159 .maxlen = sizeof(int), 160 .mode = 0644, 161 .proc_handler = proc_dointvec, 162 }, 163 #endif /* CONFIG_NETLABEL */ 164 { } 165 }; 166 167 static int __net_init ipv6_sysctl_net_init(struct net *net) 168 { 169 struct ctl_table *ipv6_table; 170 struct ctl_table *ipv6_route_table; 171 struct ctl_table *ipv6_icmp_table; 172 int err; 173 174 err = -ENOMEM; 175 ipv6_table = kmemdup(ipv6_table_template, sizeof(ipv6_table_template), 176 GFP_KERNEL); 177 if (!ipv6_table) 178 goto out; 179 ipv6_table[0].data = &net->ipv6.sysctl.bindv6only; 180 ipv6_table[1].data = &net->ipv6.sysctl.anycast_src_echo_reply; 181 ipv6_table[2].data = &net->ipv6.sysctl.flowlabel_consistency; 182 ipv6_table[3].data = &net->ipv6.sysctl.auto_flowlabels; 183 ipv6_table[4].data = &net->ipv6.sysctl.fwmark_reflect; 184 ipv6_table[5].data = &net->ipv6.sysctl.idgen_retries; 185 ipv6_table[6].data = &net->ipv6.sysctl.idgen_delay; 186 ipv6_table[7].data = &net->ipv6.sysctl.flowlabel_state_ranges; 187 ipv6_table[8].data = &net->ipv6.sysctl.ip_nonlocal_bind; 188 ipv6_table[9].data = &net->ipv6.sysctl.flowlabel_reflect; 189 ipv6_table[10].data = &net->ipv6.sysctl.max_dst_opts_cnt; 190 ipv6_table[11].data = &net->ipv6.sysctl.max_hbh_opts_cnt; 191 ipv6_table[12].data = &net->ipv6.sysctl.max_dst_opts_len; 192 ipv6_table[13].data = &net->ipv6.sysctl.max_hbh_opts_len; 193 194 ipv6_route_table = ipv6_route_sysctl_init(net); 195 if (!ipv6_route_table) 196 goto out_ipv6_table; 197 198 ipv6_icmp_table = ipv6_icmp_sysctl_init(net); 199 if (!ipv6_icmp_table) 200 goto out_ipv6_route_table; 201 202 net->ipv6.sysctl.hdr = register_net_sysctl(net, "net/ipv6", ipv6_table); 203 if (!net->ipv6.sysctl.hdr) 204 goto out_ipv6_icmp_table; 205 206 net->ipv6.sysctl.route_hdr = 207 register_net_sysctl(net, "net/ipv6/route", ipv6_route_table); 208 if (!net->ipv6.sysctl.route_hdr) 209 goto out_unregister_ipv6_table; 210 211 net->ipv6.sysctl.icmp_hdr = 212 register_net_sysctl(net, "net/ipv6/icmp", ipv6_icmp_table); 213 if (!net->ipv6.sysctl.icmp_hdr) 214 goto out_unregister_route_table; 215 216 err = 0; 217 out: 218 return err; 219 out_unregister_route_table: 220 unregister_net_sysctl_table(net->ipv6.sysctl.route_hdr); 221 out_unregister_ipv6_table: 222 unregister_net_sysctl_table(net->ipv6.sysctl.hdr); 223 out_ipv6_icmp_table: 224 kfree(ipv6_icmp_table); 225 out_ipv6_route_table: 226 kfree(ipv6_route_table); 227 out_ipv6_table: 228 kfree(ipv6_table); 229 goto out; 230 } 231 232 static void __net_exit ipv6_sysctl_net_exit(struct net *net) 233 { 234 struct ctl_table *ipv6_table; 235 struct ctl_table *ipv6_route_table; 236 struct ctl_table *ipv6_icmp_table; 237 238 ipv6_table = net->ipv6.sysctl.hdr->ctl_table_arg; 239 ipv6_route_table = net->ipv6.sysctl.route_hdr->ctl_table_arg; 240 ipv6_icmp_table = net->ipv6.sysctl.icmp_hdr->ctl_table_arg; 241 242 unregister_net_sysctl_table(net->ipv6.sysctl.icmp_hdr); 243 unregister_net_sysctl_table(net->ipv6.sysctl.route_hdr); 244 unregister_net_sysctl_table(net->ipv6.sysctl.hdr); 245 246 kfree(ipv6_table); 247 kfree(ipv6_route_table); 248 kfree(ipv6_icmp_table); 249 } 250 251 static struct pernet_operations ipv6_sysctl_net_ops = { 252 .init = ipv6_sysctl_net_init, 253 .exit = ipv6_sysctl_net_exit, 254 }; 255 256 static struct ctl_table_header *ip6_header; 257 258 int ipv6_sysctl_register(void) 259 { 260 int err = -ENOMEM; 261 262 ip6_header = register_net_sysctl(&init_net, "net/ipv6", ipv6_rotable); 263 if (!ip6_header) 264 goto out; 265 266 err = register_pernet_subsys(&ipv6_sysctl_net_ops); 267 if (err) 268 goto err_pernet; 269 out: 270 return err; 271 272 err_pernet: 273 unregister_net_sysctl_table(ip6_header); 274 goto out; 275 } 276 277 void ipv6_sysctl_unregister(void) 278 { 279 unregister_net_sysctl_table(ip6_header); 280 unregister_pernet_subsys(&ipv6_sysctl_net_ops); 281 } 282