linux/kernel/sysctl_binary.c
<<
>>
Prefs
   1#include <linux/stat.h>
   2#include <linux/sysctl.h>
   3#include "../fs/xfs/xfs_sysctl.h"
   4#include <linux/sunrpc/debug.h>
   5#include <linux/string.h>
   6#include <net/ip_vs.h>
   7#include <linux/syscalls.h>
   8#include <linux/namei.h>
   9#include <linux/mount.h>
  10#include <linux/fs.h>
  11#include <linux/nsproxy.h>
  12#include <linux/pid_namespace.h>
  13#include <linux/file.h>
  14#include <linux/ctype.h>
  15#include <linux/netdevice.h>
  16#include <linux/kernel.h>
  17#include <linux/slab.h>
  18#include <linux/compat.h>
  19
  20#ifdef CONFIG_SYSCTL_SYSCALL
  21
  22struct bin_table;
  23typedef ssize_t bin_convert_t(struct file *file,
  24        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen);
  25
  26static bin_convert_t bin_dir;
  27static bin_convert_t bin_string;
  28static bin_convert_t bin_intvec;
  29static bin_convert_t bin_ulongvec;
  30static bin_convert_t bin_uuid;
  31static bin_convert_t bin_dn_node_address;
  32
  33#define CTL_DIR   bin_dir
  34#define CTL_STR   bin_string
  35#define CTL_INT   bin_intvec
  36#define CTL_ULONG bin_ulongvec
  37#define CTL_UUID  bin_uuid
  38#define CTL_DNADR bin_dn_node_address
  39
  40#define BUFSZ 256
  41
  42struct bin_table {
  43        bin_convert_t           *convert;
  44        int                     ctl_name;
  45        const char              *procname;
  46        const struct bin_table  *child;
  47};
  48
  49static const struct bin_table bin_random_table[] = {
  50        { CTL_INT,      RANDOM_POOLSIZE,        "poolsize" },
  51        { CTL_INT,      RANDOM_ENTROPY_COUNT,   "entropy_avail" },
  52        { CTL_INT,      RANDOM_READ_THRESH,     "read_wakeup_threshold" },
  53        { CTL_INT,      RANDOM_WRITE_THRESH,    "write_wakeup_threshold" },
  54        { CTL_UUID,     RANDOM_BOOT_ID,         "boot_id" },
  55        { CTL_UUID,     RANDOM_UUID,            "uuid" },
  56        {}
  57};
  58
  59static const struct bin_table bin_pty_table[] = {
  60        { CTL_INT,      PTY_MAX,        "max" },
  61        { CTL_INT,      PTY_NR,         "nr" },
  62        {}
  63};
  64
  65static const struct bin_table bin_kern_table[] = {
  66        { CTL_STR,      KERN_OSTYPE,                    "ostype" },
  67        { CTL_STR,      KERN_OSRELEASE,                 "osrelease" },
  68        /* KERN_OSREV not used */
  69        { CTL_STR,      KERN_VERSION,                   "version" },
  70        /* KERN_SECUREMASK not used */
  71        /* KERN_PROF not used */
  72        { CTL_STR,      KERN_NODENAME,                  "hostname" },
  73        { CTL_STR,      KERN_DOMAINNAME,                "domainname" },
  74
  75        { CTL_INT,      KERN_PANIC,                     "panic" },
  76        { CTL_INT,      KERN_REALROOTDEV,               "real-root-dev" },
  77
  78        { CTL_STR,      KERN_SPARC_REBOOT,              "reboot-cmd" },
  79        { CTL_INT,      KERN_CTLALTDEL,                 "ctrl-alt-del" },
  80        { CTL_INT,      KERN_PRINTK,                    "printk" },
  81
  82        /* KERN_NAMETRANS not used */
  83        /* KERN_PPC_HTABRECLAIM not used */
  84        /* KERN_PPC_ZEROPAGED not used */
  85        { CTL_INT,      KERN_PPC_POWERSAVE_NAP,         "powersave-nap" },
  86
  87        { CTL_STR,      KERN_MODPROBE,                  "modprobe" },
  88        { CTL_INT,      KERN_SG_BIG_BUFF,               "sg-big-buff" },
  89        { CTL_INT,      KERN_ACCT,                      "acct" },
  90        /* KERN_PPC_L2CR "l2cr" no longer used */
  91
  92        /* KERN_RTSIGNR not used */
  93        /* KERN_RTSIGMAX not used */
  94
  95        { CTL_ULONG,    KERN_SHMMAX,                    "shmmax" },
  96        { CTL_INT,      KERN_MSGMAX,                    "msgmax" },
  97        { CTL_INT,      KERN_MSGMNB,                    "msgmnb" },
  98        /* KERN_MSGPOOL not used*/
  99        { CTL_INT,      KERN_SYSRQ,                     "sysrq" },
 100        { CTL_INT,      KERN_MAX_THREADS,               "threads-max" },
 101        { CTL_DIR,      KERN_RANDOM,                    "random",       bin_random_table },
 102        { CTL_ULONG,    KERN_SHMALL,                    "shmall" },
 103        { CTL_INT,      KERN_MSGMNI,                    "msgmni" },
 104        { CTL_INT,      KERN_SEM,                       "sem" },
 105        { CTL_INT,      KERN_SPARC_STOP_A,              "stop-a" },
 106        { CTL_INT,      KERN_SHMMNI,                    "shmmni" },
 107
 108        { CTL_INT,      KERN_OVERFLOWUID,               "overflowuid" },
 109        { CTL_INT,      KERN_OVERFLOWGID,               "overflowgid" },
 110
 111        { CTL_STR,      KERN_HOTPLUG,                   "hotplug", },
 112        { CTL_INT,      KERN_IEEE_EMULATION_WARNINGS,   "ieee_emulation_warnings" },
 113
 114        { CTL_INT,      KERN_S390_USER_DEBUG_LOGGING,   "userprocess_debug" },
 115        { CTL_INT,      KERN_CORE_USES_PID,             "core_uses_pid" },
 116        /* KERN_TAINTED "tainted" no longer used */
 117        { CTL_INT,      KERN_CADPID,                    "cad_pid" },
 118        { CTL_INT,      KERN_PIDMAX,                    "pid_max" },
 119        { CTL_STR,      KERN_CORE_PATTERN,              "core_pattern" },
 120        { CTL_INT,      KERN_PANIC_ON_OOPS,             "panic_on_oops" },
 121        { CTL_INT,      KERN_HPPA_PWRSW,                "soft-power" },
 122        { CTL_INT,      KERN_HPPA_UNALIGNED,            "unaligned-trap" },
 123
 124        { CTL_INT,      KERN_PRINTK_RATELIMIT,          "printk_ratelimit" },
 125        { CTL_INT,      KERN_PRINTK_RATELIMIT_BURST,    "printk_ratelimit_burst" },
 126
 127        { CTL_DIR,      KERN_PTY,                       "pty",          bin_pty_table },
 128        { CTL_INT,      KERN_NGROUPS_MAX,               "ngroups_max" },
 129        { CTL_INT,      KERN_SPARC_SCONS_PWROFF,        "scons-poweroff" },
 130        /* KERN_HZ_TIMER "hz_timer" no longer used */
 131        { CTL_INT,      KERN_UNKNOWN_NMI_PANIC,         "unknown_nmi_panic" },
 132        { CTL_INT,      KERN_BOOTLOADER_TYPE,           "bootloader_type" },
 133        { CTL_INT,      KERN_RANDOMIZE,                 "randomize_va_space" },
 134
 135        { CTL_INT,      KERN_SPIN_RETRY,                "spin_retry" },
 136        /* KERN_ACPI_VIDEO_FLAGS "acpi_video_flags" no longer used */
 137        { CTL_INT,      KERN_IA64_UNALIGNED,            "ignore-unaligned-usertrap" },
 138        { CTL_INT,      KERN_COMPAT_LOG,                "compat-log" },
 139        { CTL_INT,      KERN_MAX_LOCK_DEPTH,            "max_lock_depth" },
 140        { CTL_INT,      KERN_PANIC_ON_NMI,              "panic_on_unrecovered_nmi" },
 141        {}
 142};
 143
 144static const struct bin_table bin_vm_table[] = {
 145        { CTL_INT,      VM_OVERCOMMIT_MEMORY,           "overcommit_memory" },
 146        { CTL_INT,      VM_PAGE_CLUSTER,                "page-cluster" },
 147        { CTL_INT,      VM_DIRTY_BACKGROUND,            "dirty_background_ratio" },
 148        { CTL_INT,      VM_DIRTY_RATIO,                 "dirty_ratio" },
 149        /* VM_DIRTY_WB_CS "dirty_writeback_centisecs" no longer used */
 150        /* VM_DIRTY_EXPIRE_CS "dirty_expire_centisecs" no longer used */
 151        /* VM_NR_PDFLUSH_THREADS "nr_pdflush_threads" no longer used */
 152        { CTL_INT,      VM_OVERCOMMIT_RATIO,            "overcommit_ratio" },
 153        /* VM_PAGEBUF unused */
 154        /* VM_HUGETLB_PAGES "nr_hugepages" no longer used */
 155        { CTL_INT,      VM_SWAPPINESS,                  "swappiness" },
 156        { CTL_INT,      VM_LOWMEM_RESERVE_RATIO,        "lowmem_reserve_ratio" },
 157        { CTL_INT,      VM_MIN_FREE_KBYTES,             "min_free_kbytes" },
 158        { CTL_INT,      VM_MAX_MAP_COUNT,               "max_map_count" },
 159        { CTL_INT,      VM_LAPTOP_MODE,                 "laptop_mode" },
 160        { CTL_INT,      VM_BLOCK_DUMP,                  "block_dump" },
 161        { CTL_INT,      VM_HUGETLB_GROUP,               "hugetlb_shm_group" },
 162        { CTL_INT,      VM_VFS_CACHE_PRESSURE,  "vfs_cache_pressure" },
 163        { CTL_INT,      VM_LEGACY_VA_LAYOUT,            "legacy_va_layout" },
 164        /* VM_SWAP_TOKEN_TIMEOUT unused */
 165        { CTL_INT,      VM_DROP_PAGECACHE,              "drop_caches" },
 166        { CTL_INT,      VM_PERCPU_PAGELIST_FRACTION,    "percpu_pagelist_fraction" },
 167        { CTL_INT,      VM_ZONE_RECLAIM_MODE,           "zone_reclaim_mode" },
 168        { CTL_INT,      VM_MIN_UNMAPPED,                "min_unmapped_ratio" },
 169        { CTL_INT,      VM_PANIC_ON_OOM,                "panic_on_oom" },
 170        { CTL_INT,      VM_VDSO_ENABLED,                "vdso_enabled" },
 171        { CTL_INT,      VM_MIN_SLAB,                    "min_slab_ratio" },
 172
 173        {}
 174};
 175
 176static const struct bin_table bin_net_core_table[] = {
 177        { CTL_INT,      NET_CORE_WMEM_MAX,      "wmem_max" },
 178        { CTL_INT,      NET_CORE_RMEM_MAX,      "rmem_max" },
 179        { CTL_INT,      NET_CORE_WMEM_DEFAULT,  "wmem_default" },
 180        { CTL_INT,      NET_CORE_RMEM_DEFAULT,  "rmem_default" },
 181        /* NET_CORE_DESTROY_DELAY unused */
 182        { CTL_INT,      NET_CORE_MAX_BACKLOG,   "netdev_max_backlog" },
 183        /* NET_CORE_FASTROUTE unused */
 184        { CTL_INT,      NET_CORE_MSG_COST,      "message_cost" },
 185        { CTL_INT,      NET_CORE_MSG_BURST,     "message_burst" },
 186        { CTL_INT,      NET_CORE_OPTMEM_MAX,    "optmem_max" },
 187        /* NET_CORE_HOT_LIST_LENGTH unused */
 188        /* NET_CORE_DIVERT_VERSION unused */
 189        /* NET_CORE_NO_CONG_THRESH unused */
 190        /* NET_CORE_NO_CONG unused */
 191        /* NET_CORE_LO_CONG unused */
 192        /* NET_CORE_MOD_CONG unused */
 193        { CTL_INT,      NET_CORE_DEV_WEIGHT,    "dev_weight" },
 194        { CTL_INT,      NET_CORE_SOMAXCONN,     "somaxconn" },
 195        { CTL_INT,      NET_CORE_BUDGET,        "netdev_budget" },
 196        { CTL_INT,      NET_CORE_AEVENT_ETIME,  "xfrm_aevent_etime" },
 197        { CTL_INT,      NET_CORE_AEVENT_RSEQTH, "xfrm_aevent_rseqth" },
 198        { CTL_INT,      NET_CORE_WARNINGS,      "warnings" },
 199        {},
 200};
 201
 202static const struct bin_table bin_net_unix_table[] = {
 203        /* NET_UNIX_DESTROY_DELAY unused */
 204        /* NET_UNIX_DELETE_DELAY unused */
 205        { CTL_INT,      NET_UNIX_MAX_DGRAM_QLEN,        "max_dgram_qlen" },
 206        {}
 207};
 208
 209static const struct bin_table bin_net_ipv4_route_table[] = {
 210        { CTL_INT,      NET_IPV4_ROUTE_FLUSH,                   "flush" },
 211        /* NET_IPV4_ROUTE_MIN_DELAY "min_delay" no longer used */
 212        /* NET_IPV4_ROUTE_MAX_DELAY "max_delay" no longer used */
 213        { CTL_INT,      NET_IPV4_ROUTE_GC_THRESH,               "gc_thresh" },
 214        { CTL_INT,      NET_IPV4_ROUTE_MAX_SIZE,                "max_size" },
 215        { CTL_INT,      NET_IPV4_ROUTE_GC_MIN_INTERVAL,         "gc_min_interval" },
 216        { CTL_INT,      NET_IPV4_ROUTE_GC_MIN_INTERVAL_MS,      "gc_min_interval_ms" },
 217        { CTL_INT,      NET_IPV4_ROUTE_GC_TIMEOUT,              "gc_timeout" },
 218        /* NET_IPV4_ROUTE_GC_INTERVAL "gc_interval" no longer used */
 219        { CTL_INT,      NET_IPV4_ROUTE_REDIRECT_LOAD,           "redirect_load" },
 220        { CTL_INT,      NET_IPV4_ROUTE_REDIRECT_NUMBER,         "redirect_number" },
 221        { CTL_INT,      NET_IPV4_ROUTE_REDIRECT_SILENCE,        "redirect_silence" },
 222        { CTL_INT,      NET_IPV4_ROUTE_ERROR_COST,              "error_cost" },
 223        { CTL_INT,      NET_IPV4_ROUTE_ERROR_BURST,             "error_burst" },
 224        { CTL_INT,      NET_IPV4_ROUTE_GC_ELASTICITY,           "gc_elasticity" },
 225        { CTL_INT,      NET_IPV4_ROUTE_MTU_EXPIRES,             "mtu_expires" },
 226        { CTL_INT,      NET_IPV4_ROUTE_MIN_PMTU,                "min_pmtu" },
 227        { CTL_INT,      NET_IPV4_ROUTE_MIN_ADVMSS,              "min_adv_mss" },
 228        {}
 229};
 230
 231static const struct bin_table bin_net_ipv4_conf_vars_table[] = {
 232        { CTL_INT,      NET_IPV4_CONF_FORWARDING,               "forwarding" },
 233        { CTL_INT,      NET_IPV4_CONF_MC_FORWARDING,            "mc_forwarding" },
 234
 235        { CTL_INT,      NET_IPV4_CONF_ACCEPT_REDIRECTS,         "accept_redirects" },
 236        { CTL_INT,      NET_IPV4_CONF_SECURE_REDIRECTS,         "secure_redirects" },
 237        { CTL_INT,      NET_IPV4_CONF_SEND_REDIRECTS,           "send_redirects" },
 238        { CTL_INT,      NET_IPV4_CONF_SHARED_MEDIA,             "shared_media" },
 239        { CTL_INT,      NET_IPV4_CONF_RP_FILTER,                "rp_filter" },
 240        { CTL_INT,      NET_IPV4_CONF_ACCEPT_SOURCE_ROUTE,      "accept_source_route" },
 241        { CTL_INT,      NET_IPV4_CONF_PROXY_ARP,                "proxy_arp" },
 242        { CTL_INT,      NET_IPV4_CONF_MEDIUM_ID,                "medium_id" },
 243        { CTL_INT,      NET_IPV4_CONF_BOOTP_RELAY,              "bootp_relay" },
 244        { CTL_INT,      NET_IPV4_CONF_LOG_MARTIANS,             "log_martians" },
 245        { CTL_INT,      NET_IPV4_CONF_TAG,                      "tag" },
 246        { CTL_INT,      NET_IPV4_CONF_ARPFILTER,                "arp_filter" },
 247        { CTL_INT,      NET_IPV4_CONF_ARP_ANNOUNCE,             "arp_announce" },
 248        { CTL_INT,      NET_IPV4_CONF_ARP_IGNORE,               "arp_ignore" },
 249        { CTL_INT,      NET_IPV4_CONF_ARP_ACCEPT,               "arp_accept" },
 250        { CTL_INT,      NET_IPV4_CONF_ARP_NOTIFY,               "arp_notify" },
 251
 252        { CTL_INT,      NET_IPV4_CONF_NOXFRM,                   "disable_xfrm" },
 253        { CTL_INT,      NET_IPV4_CONF_NOPOLICY,                 "disable_policy" },
 254        { CTL_INT,      NET_IPV4_CONF_FORCE_IGMP_VERSION,       "force_igmp_version" },
 255        { CTL_INT,      NET_IPV4_CONF_PROMOTE_SECONDARIES,      "promote_secondaries" },
 256        {}
 257};
 258
 259static const struct bin_table bin_net_ipv4_conf_table[] = {
 260        { CTL_DIR,      NET_PROTO_CONF_ALL,     "all",          bin_net_ipv4_conf_vars_table },
 261        { CTL_DIR,      NET_PROTO_CONF_DEFAULT, "default",      bin_net_ipv4_conf_vars_table },
 262        { CTL_DIR,      0, NULL, bin_net_ipv4_conf_vars_table },
 263        {}
 264};
 265
 266static const struct bin_table bin_net_neigh_vars_table[] = {
 267        { CTL_INT,      NET_NEIGH_MCAST_SOLICIT,        "mcast_solicit" },
 268        { CTL_INT,      NET_NEIGH_UCAST_SOLICIT,        "ucast_solicit" },
 269        { CTL_INT,      NET_NEIGH_APP_SOLICIT,          "app_solicit" },
 270        /* NET_NEIGH_RETRANS_TIME "retrans_time" no longer used */
 271        { CTL_INT,      NET_NEIGH_REACHABLE_TIME,       "base_reachable_time" },
 272        { CTL_INT,      NET_NEIGH_DELAY_PROBE_TIME,     "delay_first_probe_time" },
 273        { CTL_INT,      NET_NEIGH_GC_STALE_TIME,        "gc_stale_time" },
 274        { CTL_INT,      NET_NEIGH_UNRES_QLEN,           "unres_qlen" },
 275        { CTL_INT,      NET_NEIGH_PROXY_QLEN,           "proxy_qlen" },
 276        /* NET_NEIGH_ANYCAST_DELAY "anycast_delay" no longer used */
 277        /* NET_NEIGH_PROXY_DELAY "proxy_delay" no longer used */
 278        /* NET_NEIGH_LOCKTIME "locktime" no longer used */
 279        { CTL_INT,      NET_NEIGH_GC_INTERVAL,          "gc_interval" },
 280        { CTL_INT,      NET_NEIGH_GC_THRESH1,           "gc_thresh1" },
 281        { CTL_INT,      NET_NEIGH_GC_THRESH2,           "gc_thresh2" },
 282        { CTL_INT,      NET_NEIGH_GC_THRESH3,           "gc_thresh3" },
 283        { CTL_INT,      NET_NEIGH_RETRANS_TIME_MS,      "retrans_time_ms" },
 284        { CTL_INT,      NET_NEIGH_REACHABLE_TIME_MS,    "base_reachable_time_ms" },
 285        {}
 286};
 287
 288static const struct bin_table bin_net_neigh_table[] = {
 289        { CTL_DIR,      NET_PROTO_CONF_DEFAULT, "default", bin_net_neigh_vars_table },
 290        { CTL_DIR,      0, NULL, bin_net_neigh_vars_table },
 291        {}
 292};
 293
 294static const struct bin_table bin_net_ipv4_netfilter_table[] = {
 295        { CTL_INT,      NET_IPV4_NF_CONNTRACK_MAX,              "ip_conntrack_max" },
 296
 297        /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_SYN_SENT "ip_conntrack_tcp_timeout_syn_sent" no longer used */
 298        /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_SYN_RECV "ip_conntrack_tcp_timeout_syn_recv" no longer used */
 299        /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_ESTABLISHED "ip_conntrack_tcp_timeout_established" no longer used */
 300        /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_FIN_WAIT "ip_conntrack_tcp_timeout_fin_wait" no longer used */
 301        /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_CLOSE_WAIT "ip_conntrack_tcp_timeout_close_wait" no longer used */
 302        /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_LAST_ACK "ip_conntrack_tcp_timeout_last_ack" no longer used */
 303        /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_TIME_WAIT "ip_conntrack_tcp_timeout_time_wait" no longer used */
 304        /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_CLOSE "ip_conntrack_tcp_timeout_close" no longer used */
 305
 306        /* NET_IPV4_NF_CONNTRACK_UDP_TIMEOUT "ip_conntrack_udp_timeout" no longer used */
 307        /* NET_IPV4_NF_CONNTRACK_UDP_TIMEOUT_STREAM "ip_conntrack_udp_timeout_stream" no longer used */
 308        /* NET_IPV4_NF_CONNTRACK_ICMP_TIMEOUT "ip_conntrack_icmp_timeout" no longer used */
 309        /* NET_IPV4_NF_CONNTRACK_GENERIC_TIMEOUT "ip_conntrack_generic_timeout" no longer used */
 310
 311        { CTL_INT,      NET_IPV4_NF_CONNTRACK_BUCKETS,          "ip_conntrack_buckets" },
 312        { CTL_INT,      NET_IPV4_NF_CONNTRACK_LOG_INVALID,      "ip_conntrack_log_invalid" },
 313        /* NET_IPV4_NF_CONNTRACK_TCP_TIMEOUT_MAX_RETRANS "ip_conntrack_tcp_timeout_max_retrans" no longer used */
 314        { CTL_INT,      NET_IPV4_NF_CONNTRACK_TCP_LOOSE,        "ip_conntrack_tcp_loose" },
 315        { CTL_INT,      NET_IPV4_NF_CONNTRACK_TCP_BE_LIBERAL,   "ip_conntrack_tcp_be_liberal" },
 316        { CTL_INT,      NET_IPV4_NF_CONNTRACK_TCP_MAX_RETRANS,  "ip_conntrack_tcp_max_retrans" },
 317
 318        /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_CLOSED "ip_conntrack_sctp_timeout_closed" no longer used */
 319        /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_COOKIE_WAIT "ip_conntrack_sctp_timeout_cookie_wait" no longer used */
 320        /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_COOKIE_ECHOED "ip_conntrack_sctp_timeout_cookie_echoed" no longer used */
 321        /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_ESTABLISHED "ip_conntrack_sctp_timeout_established" no longer used */
 322        /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_SENT "ip_conntrack_sctp_timeout_shutdown_sent" no longer used */
 323        /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_RECD "ip_conntrack_sctp_timeout_shutdown_recd" no longer used */
 324        /* NET_IPV4_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_ACK_SENT "ip_conntrack_sctp_timeout_shutdown_ack_sent" no longer used */
 325
 326        { CTL_INT,      NET_IPV4_NF_CONNTRACK_COUNT,            "ip_conntrack_count" },
 327        { CTL_INT,      NET_IPV4_NF_CONNTRACK_CHECKSUM,         "ip_conntrack_checksum" },
 328        {}
 329};
 330
 331static const struct bin_table bin_net_ipv4_table[] = {
 332        {CTL_INT,       NET_IPV4_FORWARD,                       "ip_forward" },
 333
 334        { CTL_DIR,      NET_IPV4_CONF,          "conf",         bin_net_ipv4_conf_table },
 335        { CTL_DIR,      NET_IPV4_NEIGH,         "neigh",        bin_net_neigh_table },
 336        { CTL_DIR,      NET_IPV4_ROUTE,         "route",        bin_net_ipv4_route_table },
 337        /* NET_IPV4_FIB_HASH unused */
 338        { CTL_DIR,      NET_IPV4_NETFILTER,     "netfilter",    bin_net_ipv4_netfilter_table },
 339
 340        { CTL_INT,      NET_IPV4_TCP_TIMESTAMPS,                "tcp_timestamps" },
 341        { CTL_INT,      NET_IPV4_TCP_WINDOW_SCALING,            "tcp_window_scaling" },
 342        { CTL_INT,      NET_IPV4_TCP_SACK,                      "tcp_sack" },
 343        { CTL_INT,      NET_IPV4_TCP_RETRANS_COLLAPSE,          "tcp_retrans_collapse" },
 344        { CTL_INT,      NET_IPV4_DEFAULT_TTL,                   "ip_default_ttl" },
 345        /* NET_IPV4_AUTOCONFIG unused */
 346        { CTL_INT,      NET_IPV4_NO_PMTU_DISC,                  "ip_no_pmtu_disc" },
 347        { CTL_INT,      NET_IPV4_NONLOCAL_BIND,                 "ip_nonlocal_bind" },
 348        { CTL_INT,      NET_IPV4_TCP_SYN_RETRIES,               "tcp_syn_retries" },
 349        { CTL_INT,      NET_TCP_SYNACK_RETRIES,                 "tcp_synack_retries" },
 350        { CTL_INT,      NET_TCP_MAX_ORPHANS,                    "tcp_max_orphans" },
 351        { CTL_INT,      NET_TCP_MAX_TW_BUCKETS,                 "tcp_max_tw_buckets" },
 352        { CTL_INT,      NET_IPV4_DYNADDR,                       "ip_dynaddr" },
 353        { CTL_INT,      NET_IPV4_TCP_KEEPALIVE_TIME,            "tcp_keepalive_time" },
 354        { CTL_INT,      NET_IPV4_TCP_KEEPALIVE_PROBES,          "tcp_keepalive_probes" },
 355        { CTL_INT,      NET_IPV4_TCP_KEEPALIVE_INTVL,           "tcp_keepalive_intvl" },
 356        { CTL_INT,      NET_IPV4_TCP_RETRIES1,                  "tcp_retries1" },
 357        { CTL_INT,      NET_IPV4_TCP_RETRIES2,                  "tcp_retries2" },
 358        { CTL_INT,      NET_IPV4_TCP_FIN_TIMEOUT,               "tcp_fin_timeout" },
 359        { CTL_INT,      NET_TCP_SYNCOOKIES,                     "tcp_syncookies" },
 360        { CTL_INT,      NET_TCP_TW_RECYCLE,                     "tcp_tw_recycle" },
 361        { CTL_INT,      NET_TCP_ABORT_ON_OVERFLOW,              "tcp_abort_on_overflow" },
 362        { CTL_INT,      NET_TCP_STDURG,                         "tcp_stdurg" },
 363        { CTL_INT,      NET_TCP_RFC1337,                        "tcp_rfc1337" },
 364        { CTL_INT,      NET_TCP_MAX_SYN_BACKLOG,                "tcp_max_syn_backlog" },
 365        { CTL_INT,      NET_IPV4_LOCAL_PORT_RANGE,              "ip_local_port_range" },
 366        { CTL_INT,      NET_IPV4_IGMP_MAX_MEMBERSHIPS,          "igmp_max_memberships" },
 367        { CTL_INT,      NET_IPV4_IGMP_MAX_MSF,                  "igmp_max_msf" },
 368        { CTL_INT,      NET_IPV4_INET_PEER_THRESHOLD,           "inet_peer_threshold" },
 369        { CTL_INT,      NET_IPV4_INET_PEER_MINTTL,              "inet_peer_minttl" },
 370        { CTL_INT,      NET_IPV4_INET_PEER_MAXTTL,              "inet_peer_maxttl" },
 371        { CTL_INT,      NET_IPV4_INET_PEER_GC_MINTIME,          "inet_peer_gc_mintime" },
 372        { CTL_INT,      NET_IPV4_INET_PEER_GC_MAXTIME,          "inet_peer_gc_maxtime" },
 373        { CTL_INT,      NET_TCP_ORPHAN_RETRIES,                 "tcp_orphan_retries" },
 374        { CTL_INT,      NET_TCP_FACK,                           "tcp_fack" },
 375        { CTL_INT,      NET_TCP_REORDERING,                     "tcp_reordering" },
 376        { CTL_INT,      NET_TCP_ECN,                            "tcp_ecn" },
 377        { CTL_INT,      NET_TCP_DSACK,                          "tcp_dsack" },
 378        { CTL_INT,      NET_TCP_MEM,                            "tcp_mem" },
 379        { CTL_INT,      NET_TCP_WMEM,                           "tcp_wmem" },
 380        { CTL_INT,      NET_TCP_RMEM,                           "tcp_rmem" },
 381        { CTL_INT,      NET_TCP_APP_WIN,                        "tcp_app_win" },
 382        { CTL_INT,      NET_TCP_ADV_WIN_SCALE,                  "tcp_adv_win_scale" },
 383        { CTL_INT,      NET_TCP_TW_REUSE,                       "tcp_tw_reuse" },
 384        { CTL_INT,      NET_TCP_FRTO,                           "tcp_frto" },
 385        { CTL_INT,      NET_TCP_FRTO_RESPONSE,                  "tcp_frto_response" },
 386        { CTL_INT,      NET_TCP_LOW_LATENCY,                    "tcp_low_latency" },
 387        { CTL_INT,      NET_TCP_NO_METRICS_SAVE,                "tcp_no_metrics_save" },
 388        { CTL_INT,      NET_TCP_MODERATE_RCVBUF,                "tcp_moderate_rcvbuf" },
 389        { CTL_INT,      NET_TCP_TSO_WIN_DIVISOR,                "tcp_tso_win_divisor" },
 390        { CTL_STR,      NET_TCP_CONG_CONTROL,                   "tcp_congestion_control" },
 391        { CTL_INT,      NET_TCP_MTU_PROBING,                    "tcp_mtu_probing" },
 392        { CTL_INT,      NET_TCP_BASE_MSS,                       "tcp_base_mss" },
 393        { CTL_INT,      NET_IPV4_TCP_WORKAROUND_SIGNED_WINDOWS, "tcp_workaround_signed_windows" },
 394        { CTL_INT,      NET_TCP_DMA_COPYBREAK,                  "tcp_dma_copybreak" },
 395        { CTL_INT,      NET_TCP_SLOW_START_AFTER_IDLE,          "tcp_slow_start_after_idle" },
 396        { CTL_INT,      NET_CIPSOV4_CACHE_ENABLE,               "cipso_cache_enable" },
 397        { CTL_INT,      NET_CIPSOV4_CACHE_BUCKET_SIZE,          "cipso_cache_bucket_size" },
 398        { CTL_INT,      NET_CIPSOV4_RBM_OPTFMT,                 "cipso_rbm_optfmt" },
 399        { CTL_INT,      NET_CIPSOV4_RBM_STRICTVALID,            "cipso_rbm_strictvalid" },
 400        /* NET_TCP_AVAIL_CONG_CONTROL "tcp_available_congestion_control" no longer used */
 401        { CTL_STR,      NET_TCP_ALLOWED_CONG_CONTROL,           "tcp_allowed_congestion_control" },
 402        { CTL_INT,      NET_TCP_MAX_SSTHRESH,                   "tcp_max_ssthresh" },
 403
 404        { CTL_INT,      NET_IPV4_ICMP_ECHO_IGNORE_ALL,          "icmp_echo_ignore_all" },
 405        { CTL_INT,      NET_IPV4_ICMP_ECHO_IGNORE_BROADCASTS,   "icmp_echo_ignore_broadcasts" },
 406        { CTL_INT,      NET_IPV4_ICMP_IGNORE_BOGUS_ERROR_RESPONSES,     "icmp_ignore_bogus_error_responses" },
 407        { CTL_INT,      NET_IPV4_ICMP_ERRORS_USE_INBOUND_IFADDR,        "icmp_errors_use_inbound_ifaddr" },
 408        { CTL_INT,      NET_IPV4_ICMP_RATELIMIT,                "icmp_ratelimit" },
 409        { CTL_INT,      NET_IPV4_ICMP_RATEMASK,                 "icmp_ratemask" },
 410
 411        { CTL_INT,      NET_IPV4_IPFRAG_HIGH_THRESH,            "ipfrag_high_thresh" },
 412        { CTL_INT,      NET_IPV4_IPFRAG_LOW_THRESH,             "ipfrag_low_thresh" },
 413        { CTL_INT,      NET_IPV4_IPFRAG_TIME,                   "ipfrag_time" },
 414
 415        { CTL_INT,      NET_IPV4_IPFRAG_SECRET_INTERVAL,        "ipfrag_secret_interval" },
 416        /* NET_IPV4_IPFRAG_MAX_DIST "ipfrag_max_dist" no longer used */
 417
 418        { CTL_INT,      2088 /* NET_IPQ_QMAX */,                "ip_queue_maxlen" },
 419
 420        /* NET_TCP_DEFAULT_WIN_SCALE unused */
 421        /* NET_TCP_BIC_BETA unused */
 422        /* NET_IPV4_TCP_MAX_KA_PROBES unused */
 423        /* NET_IPV4_IP_MASQ_DEBUG unused */
 424        /* NET_TCP_SYN_TAILDROP unused */
 425        /* NET_IPV4_ICMP_SOURCEQUENCH_RATE unused */
 426        /* NET_IPV4_ICMP_DESTUNREACH_RATE unused */
 427        /* NET_IPV4_ICMP_TIMEEXCEED_RATE unused */
 428        /* NET_IPV4_ICMP_PARAMPROB_RATE unused */
 429        /* NET_IPV4_ICMP_ECHOREPLY_RATE unused */
 430        /* NET_IPV4_ALWAYS_DEFRAG unused */
 431        {}
 432};
 433
 434static const struct bin_table bin_net_ipx_table[] = {
 435        { CTL_INT,      NET_IPX_PPROP_BROADCASTING,     "ipx_pprop_broadcasting" },
 436        /* NET_IPX_FORWARDING unused */
 437        {}
 438};
 439
 440static const struct bin_table bin_net_atalk_table[] = {
 441        { CTL_INT,      NET_ATALK_AARP_EXPIRY_TIME,             "aarp-expiry-time" },
 442        { CTL_INT,      NET_ATALK_AARP_TICK_TIME,               "aarp-tick-time" },
 443        { CTL_INT,      NET_ATALK_AARP_RETRANSMIT_LIMIT,        "aarp-retransmit-limit" },
 444        { CTL_INT,      NET_ATALK_AARP_RESOLVE_TIME,            "aarp-resolve-time" },
 445        {},
 446};
 447
 448static const struct bin_table bin_net_netrom_table[] = {
 449        { CTL_INT,      NET_NETROM_DEFAULT_PATH_QUALITY,                "default_path_quality" },
 450        { CTL_INT,      NET_NETROM_OBSOLESCENCE_COUNT_INITIALISER,      "obsolescence_count_initialiser" },
 451        { CTL_INT,      NET_NETROM_NETWORK_TTL_INITIALISER,             "network_ttl_initialiser" },
 452        { CTL_INT,      NET_NETROM_TRANSPORT_TIMEOUT,                   "transport_timeout" },
 453        { CTL_INT,      NET_NETROM_TRANSPORT_MAXIMUM_TRIES,             "transport_maximum_tries" },
 454        { CTL_INT,      NET_NETROM_TRANSPORT_ACKNOWLEDGE_DELAY,         "transport_acknowledge_delay" },
 455        { CTL_INT,      NET_NETROM_TRANSPORT_BUSY_DELAY,                "transport_busy_delay" },
 456        { CTL_INT,      NET_NETROM_TRANSPORT_REQUESTED_WINDOW_SIZE,     "transport_requested_window_size" },
 457        { CTL_INT,      NET_NETROM_TRANSPORT_NO_ACTIVITY_TIMEOUT,       "transport_no_activity_timeout" },
 458        { CTL_INT,      NET_NETROM_ROUTING_CONTROL,                     "routing_control" },
 459        { CTL_INT,      NET_NETROM_LINK_FAILS_COUNT,                    "link_fails_count" },
 460        { CTL_INT,      NET_NETROM_RESET,                               "reset" },
 461        {}
 462};
 463
 464static const struct bin_table bin_net_ax25_param_table[] = {
 465        { CTL_INT,      NET_AX25_IP_DEFAULT_MODE,       "ip_default_mode" },
 466        { CTL_INT,      NET_AX25_DEFAULT_MODE,          "ax25_default_mode" },
 467        { CTL_INT,      NET_AX25_BACKOFF_TYPE,          "backoff_type" },
 468        { CTL_INT,      NET_AX25_CONNECT_MODE,          "connect_mode" },
 469        { CTL_INT,      NET_AX25_STANDARD_WINDOW,       "standard_window_size" },
 470        { CTL_INT,      NET_AX25_EXTENDED_WINDOW,       "extended_window_size" },
 471        { CTL_INT,      NET_AX25_T1_TIMEOUT,            "t1_timeout" },
 472        { CTL_INT,      NET_AX25_T2_TIMEOUT,            "t2_timeout" },
 473        { CTL_INT,      NET_AX25_T3_TIMEOUT,            "t3_timeout" },
 474        { CTL_INT,      NET_AX25_IDLE_TIMEOUT,          "idle_timeout" },
 475        { CTL_INT,      NET_AX25_N2,                    "maximum_retry_count" },
 476        { CTL_INT,      NET_AX25_PACLEN,                "maximum_packet_length" },
 477        { CTL_INT,      NET_AX25_PROTOCOL,              "protocol" },
 478        { CTL_INT,      NET_AX25_DAMA_SLAVE_TIMEOUT,    "dama_slave_timeout" },
 479        {}
 480};
 481
 482static const struct bin_table bin_net_ax25_table[] = {
 483        { CTL_DIR,      0, NULL, bin_net_ax25_param_table },
 484        {}
 485};
 486
 487static const struct bin_table bin_net_rose_table[] = {
 488        { CTL_INT,      NET_ROSE_RESTART_REQUEST_TIMEOUT,       "restart_request_timeout" },
 489        { CTL_INT,      NET_ROSE_CALL_REQUEST_TIMEOUT,          "call_request_timeout" },
 490        { CTL_INT,      NET_ROSE_RESET_REQUEST_TIMEOUT,         "reset_request_timeout" },
 491        { CTL_INT,      NET_ROSE_CLEAR_REQUEST_TIMEOUT,         "clear_request_timeout" },
 492        { CTL_INT,      NET_ROSE_ACK_HOLD_BACK_TIMEOUT,         "acknowledge_hold_back_timeout" },
 493        { CTL_INT,      NET_ROSE_ROUTING_CONTROL,               "routing_control" },
 494        { CTL_INT,      NET_ROSE_LINK_FAIL_TIMEOUT,             "link_fail_timeout" },
 495        { CTL_INT,      NET_ROSE_MAX_VCS,                       "maximum_virtual_circuits" },
 496        { CTL_INT,      NET_ROSE_WINDOW_SIZE,                   "window_size" },
 497        { CTL_INT,      NET_ROSE_NO_ACTIVITY_TIMEOUT,           "no_activity_timeout" },
 498        {}
 499};
 500
 501static const struct bin_table bin_net_ipv6_conf_var_table[] = {
 502        { CTL_INT,      NET_IPV6_FORWARDING,                    "forwarding" },
 503        { CTL_INT,      NET_IPV6_HOP_LIMIT,                     "hop_limit" },
 504        { CTL_INT,      NET_IPV6_MTU,                           "mtu" },
 505        { CTL_INT,      NET_IPV6_ACCEPT_RA,                     "accept_ra" },
 506        { CTL_INT,      NET_IPV6_ACCEPT_REDIRECTS,              "accept_redirects" },
 507        { CTL_INT,      NET_IPV6_AUTOCONF,                      "autoconf" },
 508        { CTL_INT,      NET_IPV6_DAD_TRANSMITS,                 "dad_transmits" },
 509        { CTL_INT,      NET_IPV6_RTR_SOLICITS,                  "router_solicitations" },
 510        { CTL_INT,      NET_IPV6_RTR_SOLICIT_INTERVAL,          "router_solicitation_interval" },
 511        { CTL_INT,      NET_IPV6_RTR_SOLICIT_DELAY,             "router_solicitation_delay" },
 512        { CTL_INT,      NET_IPV6_USE_TEMPADDR,                  "use_tempaddr" },
 513        { CTL_INT,      NET_IPV6_TEMP_VALID_LFT,                "temp_valid_lft" },
 514        { CTL_INT,      NET_IPV6_TEMP_PREFERED_LFT,             "temp_prefered_lft" },
 515        { CTL_INT,      NET_IPV6_REGEN_MAX_RETRY,               "regen_max_retry" },
 516        { CTL_INT,      NET_IPV6_MAX_DESYNC_FACTOR,             "max_desync_factor" },
 517        { CTL_INT,      NET_IPV6_MAX_ADDRESSES,                 "max_addresses" },
 518        { CTL_INT,      NET_IPV6_FORCE_MLD_VERSION,             "force_mld_version" },
 519        { CTL_INT,      NET_IPV6_ACCEPT_RA_DEFRTR,              "accept_ra_defrtr" },
 520        { CTL_INT,      NET_IPV6_ACCEPT_RA_PINFO,               "accept_ra_pinfo" },
 521        { CTL_INT,      NET_IPV6_ACCEPT_RA_RTR_PREF,            "accept_ra_rtr_pref" },
 522        { CTL_INT,      NET_IPV6_RTR_PROBE_INTERVAL,            "router_probe_interval" },
 523        { CTL_INT,      NET_IPV6_ACCEPT_RA_RT_INFO_MAX_PLEN,    "accept_ra_rt_info_max_plen" },
 524        { CTL_INT,      NET_IPV6_PROXY_NDP,                     "proxy_ndp" },
 525        { CTL_INT,      NET_IPV6_ACCEPT_SOURCE_ROUTE,           "accept_source_route" },
 526        {}
 527};
 528
 529static const struct bin_table bin_net_ipv6_conf_table[] = {
 530        { CTL_DIR,      NET_PROTO_CONF_ALL,             "all",  bin_net_ipv6_conf_var_table },
 531        { CTL_DIR,      NET_PROTO_CONF_DEFAULT,         "default", bin_net_ipv6_conf_var_table },
 532        { CTL_DIR,      0, NULL, bin_net_ipv6_conf_var_table },
 533        {}
 534};
 535
 536static const struct bin_table bin_net_ipv6_route_table[] = {
 537        /* NET_IPV6_ROUTE_FLUSH "flush"  no longer used */
 538        { CTL_INT,      NET_IPV6_ROUTE_GC_THRESH,               "gc_thresh" },
 539        { CTL_INT,      NET_IPV6_ROUTE_MAX_SIZE,                "max_size" },
 540        { CTL_INT,      NET_IPV6_ROUTE_GC_MIN_INTERVAL,         "gc_min_interval" },
 541        { CTL_INT,      NET_IPV6_ROUTE_GC_TIMEOUT,              "gc_timeout" },
 542        { CTL_INT,      NET_IPV6_ROUTE_GC_INTERVAL,             "gc_interval" },
 543        { CTL_INT,      NET_IPV6_ROUTE_GC_ELASTICITY,           "gc_elasticity" },
 544        { CTL_INT,      NET_IPV6_ROUTE_MTU_EXPIRES,             "mtu_expires" },
 545        { CTL_INT,      NET_IPV6_ROUTE_MIN_ADVMSS,              "min_adv_mss" },
 546        { CTL_INT,      NET_IPV6_ROUTE_GC_MIN_INTERVAL_MS,      "gc_min_interval_ms" },
 547        {}
 548};
 549
 550static const struct bin_table bin_net_ipv6_icmp_table[] = {
 551        { CTL_INT,      NET_IPV6_ICMP_RATELIMIT,        "ratelimit" },
 552        {}
 553};
 554
 555static const struct bin_table bin_net_ipv6_table[] = {
 556        { CTL_DIR,      NET_IPV6_CONF,          "conf",         bin_net_ipv6_conf_table },
 557        { CTL_DIR,      NET_IPV6_NEIGH,         "neigh",        bin_net_neigh_table },
 558        { CTL_DIR,      NET_IPV6_ROUTE,         "route",        bin_net_ipv6_route_table },
 559        { CTL_DIR,      NET_IPV6_ICMP,          "icmp",         bin_net_ipv6_icmp_table },
 560        { CTL_INT,      NET_IPV6_BINDV6ONLY,            "bindv6only" },
 561        { CTL_INT,      NET_IPV6_IP6FRAG_HIGH_THRESH,   "ip6frag_high_thresh" },
 562        { CTL_INT,      NET_IPV6_IP6FRAG_LOW_THRESH,    "ip6frag_low_thresh" },
 563        { CTL_INT,      NET_IPV6_IP6FRAG_TIME,          "ip6frag_time" },
 564        { CTL_INT,      NET_IPV6_IP6FRAG_SECRET_INTERVAL,       "ip6frag_secret_interval" },
 565        { CTL_INT,      NET_IPV6_MLD_MAX_MSF,           "mld_max_msf" },
 566        { CTL_INT,      2088 /* IPQ_QMAX */,            "ip6_queue_maxlen" },
 567        {}
 568};
 569
 570static const struct bin_table bin_net_x25_table[] = {
 571        { CTL_INT,      NET_X25_RESTART_REQUEST_TIMEOUT,        "restart_request_timeout" },
 572        { CTL_INT,      NET_X25_CALL_REQUEST_TIMEOUT,           "call_request_timeout" },
 573        { CTL_INT,      NET_X25_RESET_REQUEST_TIMEOUT,  "reset_request_timeout" },
 574        { CTL_INT,      NET_X25_CLEAR_REQUEST_TIMEOUT,  "clear_request_timeout" },
 575        { CTL_INT,      NET_X25_ACK_HOLD_BACK_TIMEOUT,  "acknowledgement_hold_back_timeout" },
 576        { CTL_INT,      NET_X25_FORWARD,                        "x25_forward" },
 577        {}
 578};
 579
 580static const struct bin_table bin_net_tr_table[] = {
 581        { CTL_INT,      NET_TR_RIF_TIMEOUT,     "rif_timeout" },
 582        {}
 583};
 584
 585
 586static const struct bin_table bin_net_decnet_conf_vars[] = {
 587        { CTL_INT,      NET_DECNET_CONF_DEV_FORWARDING, "forwarding" },
 588        { CTL_INT,      NET_DECNET_CONF_DEV_PRIORITY,   "priority" },
 589        { CTL_INT,      NET_DECNET_CONF_DEV_T2,         "t2" },
 590        { CTL_INT,      NET_DECNET_CONF_DEV_T3,         "t3" },
 591        {}
 592};
 593
 594static const struct bin_table bin_net_decnet_conf[] = {
 595        { CTL_DIR, NET_DECNET_CONF_ETHER,    "ethernet", bin_net_decnet_conf_vars },
 596        { CTL_DIR, NET_DECNET_CONF_GRE,      "ipgre",    bin_net_decnet_conf_vars },
 597        { CTL_DIR, NET_DECNET_CONF_X25,      "x25",      bin_net_decnet_conf_vars },
 598        { CTL_DIR, NET_DECNET_CONF_PPP,      "ppp",      bin_net_decnet_conf_vars },
 599        { CTL_DIR, NET_DECNET_CONF_DDCMP,    "ddcmp",    bin_net_decnet_conf_vars },
 600        { CTL_DIR, NET_DECNET_CONF_LOOPBACK, "loopback", bin_net_decnet_conf_vars },
 601        { CTL_DIR, 0,                        NULL,       bin_net_decnet_conf_vars },
 602        {}
 603};
 604
 605static const struct bin_table bin_net_decnet_table[] = {
 606        { CTL_DIR,      NET_DECNET_CONF,                "conf", bin_net_decnet_conf },
 607        { CTL_DNADR,    NET_DECNET_NODE_ADDRESS,        "node_address" },
 608        { CTL_STR,      NET_DECNET_NODE_NAME,           "node_name" },
 609        { CTL_STR,      NET_DECNET_DEFAULT_DEVICE,      "default_device" },
 610        { CTL_INT,      NET_DECNET_TIME_WAIT,           "time_wait" },
 611        { CTL_INT,      NET_DECNET_DN_COUNT,            "dn_count" },
 612        { CTL_INT,      NET_DECNET_DI_COUNT,            "di_count" },
 613        { CTL_INT,      NET_DECNET_DR_COUNT,            "dr_count" },
 614        { CTL_INT,      NET_DECNET_DST_GC_INTERVAL,     "dst_gc_interval" },
 615        { CTL_INT,      NET_DECNET_NO_FC_MAX_CWND,      "no_fc_max_cwnd" },
 616        { CTL_INT,      NET_DECNET_MEM,         "decnet_mem" },
 617        { CTL_INT,      NET_DECNET_RMEM,                "decnet_rmem" },
 618        { CTL_INT,      NET_DECNET_WMEM,                "decnet_wmem" },
 619        { CTL_INT,      NET_DECNET_DEBUG_LEVEL, "debug" },
 620        {}
 621};
 622
 623static const struct bin_table bin_net_sctp_table[] = {
 624        { CTL_INT,      NET_SCTP_RTO_INITIAL,           "rto_initial" },
 625        { CTL_INT,      NET_SCTP_RTO_MIN,               "rto_min" },
 626        { CTL_INT,      NET_SCTP_RTO_MAX,               "rto_max" },
 627        { CTL_INT,      NET_SCTP_RTO_ALPHA,             "rto_alpha_exp_divisor" },
 628        { CTL_INT,      NET_SCTP_RTO_BETA,              "rto_beta_exp_divisor" },
 629        { CTL_INT,      NET_SCTP_VALID_COOKIE_LIFE,     "valid_cookie_life" },
 630        { CTL_INT,      NET_SCTP_ASSOCIATION_MAX_RETRANS,       "association_max_retrans" },
 631        { CTL_INT,      NET_SCTP_PATH_MAX_RETRANS,      "path_max_retrans" },
 632        { CTL_INT,      NET_SCTP_MAX_INIT_RETRANSMITS,  "max_init_retransmits" },
 633        { CTL_INT,      NET_SCTP_HB_INTERVAL,           "hb_interval" },
 634        { CTL_INT,      NET_SCTP_PRESERVE_ENABLE,       "cookie_preserve_enable" },
 635        { CTL_INT,      NET_SCTP_MAX_BURST,             "max_burst" },
 636        { CTL_INT,      NET_SCTP_ADDIP_ENABLE,          "addip_enable" },
 637        { CTL_INT,      NET_SCTP_PRSCTP_ENABLE,         "prsctp_enable" },
 638        { CTL_INT,      NET_SCTP_SNDBUF_POLICY,         "sndbuf_policy" },
 639        { CTL_INT,      NET_SCTP_SACK_TIMEOUT,          "sack_timeout" },
 640        { CTL_INT,      NET_SCTP_RCVBUF_POLICY,         "rcvbuf_policy" },
 641        {}
 642};
 643
 644static const struct bin_table bin_net_llc_llc2_timeout_table[] = {
 645        { CTL_INT,      NET_LLC2_ACK_TIMEOUT,   "ack" },
 646        { CTL_INT,      NET_LLC2_P_TIMEOUT,     "p" },
 647        { CTL_INT,      NET_LLC2_REJ_TIMEOUT,   "rej" },
 648        { CTL_INT,      NET_LLC2_BUSY_TIMEOUT,  "busy" },
 649        {}
 650};
 651
 652static const struct bin_table bin_net_llc_station_table[] = {
 653        { CTL_INT,      NET_LLC_STATION_ACK_TIMEOUT,    "ack_timeout" },
 654        {}
 655};
 656
 657static const struct bin_table bin_net_llc_llc2_table[] = {
 658        { CTL_DIR,      NET_LLC2,               "timeout",      bin_net_llc_llc2_timeout_table },
 659        {}
 660};
 661
 662static const struct bin_table bin_net_llc_table[] = {
 663        { CTL_DIR,      NET_LLC2,               "llc2",         bin_net_llc_llc2_table },
 664        { CTL_DIR,      NET_LLC_STATION,        "station",      bin_net_llc_station_table },
 665        {}
 666};
 667
 668static const struct bin_table bin_net_netfilter_table[] = {
 669        { CTL_INT,      NET_NF_CONNTRACK_MAX,                   "nf_conntrack_max" },
 670        /* NET_NF_CONNTRACK_TCP_TIMEOUT_SYN_SENT "nf_conntrack_tcp_timeout_syn_sent" no longer used */
 671        /* NET_NF_CONNTRACK_TCP_TIMEOUT_SYN_RECV "nf_conntrack_tcp_timeout_syn_recv" no longer used */
 672        /* NET_NF_CONNTRACK_TCP_TIMEOUT_ESTABLISHED "nf_conntrack_tcp_timeout_established" no longer used */
 673        /* NET_NF_CONNTRACK_TCP_TIMEOUT_FIN_WAIT "nf_conntrack_tcp_timeout_fin_wait" no longer used */
 674        /* NET_NF_CONNTRACK_TCP_TIMEOUT_CLOSE_WAIT "nf_conntrack_tcp_timeout_close_wait" no longer used */
 675        /* NET_NF_CONNTRACK_TCP_TIMEOUT_LAST_ACK "nf_conntrack_tcp_timeout_last_ack" no longer used */
 676        /* NET_NF_CONNTRACK_TCP_TIMEOUT_TIME_WAIT "nf_conntrack_tcp_timeout_time_wait" no longer used */
 677        /* NET_NF_CONNTRACK_TCP_TIMEOUT_CLOSE "nf_conntrack_tcp_timeout_close" no longer used */
 678        /* NET_NF_CONNTRACK_UDP_TIMEOUT "nf_conntrack_udp_timeout" no longer used */
 679        /* NET_NF_CONNTRACK_UDP_TIMEOUT_STREAM "nf_conntrack_udp_timeout_stream" no longer used */
 680        /* NET_NF_CONNTRACK_ICMP_TIMEOUT "nf_conntrack_icmp_timeout" no longer used */
 681        /* NET_NF_CONNTRACK_GENERIC_TIMEOUT "nf_conntrack_generic_timeout" no longer used */
 682        { CTL_INT,      NET_NF_CONNTRACK_BUCKETS,               "nf_conntrack_buckets" },
 683        { CTL_INT,      NET_NF_CONNTRACK_LOG_INVALID,           "nf_conntrack_log_invalid" },
 684        /* NET_NF_CONNTRACK_TCP_TIMEOUT_MAX_RETRANS "nf_conntrack_tcp_timeout_max_retrans" no longer used */
 685        { CTL_INT,      NET_NF_CONNTRACK_TCP_LOOSE,             "nf_conntrack_tcp_loose" },
 686        { CTL_INT,      NET_NF_CONNTRACK_TCP_BE_LIBERAL,        "nf_conntrack_tcp_be_liberal" },
 687        { CTL_INT,      NET_NF_CONNTRACK_TCP_MAX_RETRANS,       "nf_conntrack_tcp_max_retrans" },
 688        /* NET_NF_CONNTRACK_SCTP_TIMEOUT_CLOSED "nf_conntrack_sctp_timeout_closed" no longer used */
 689        /* NET_NF_CONNTRACK_SCTP_TIMEOUT_COOKIE_WAIT "nf_conntrack_sctp_timeout_cookie_wait" no longer used */
 690        /* NET_NF_CONNTRACK_SCTP_TIMEOUT_COOKIE_ECHOED "nf_conntrack_sctp_timeout_cookie_echoed" no longer used */
 691        /* NET_NF_CONNTRACK_SCTP_TIMEOUT_ESTABLISHED "nf_conntrack_sctp_timeout_established" no longer used */
 692        /* NET_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_SENT "nf_conntrack_sctp_timeout_shutdown_sent" no longer used */
 693        /* NET_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_RECD "nf_conntrack_sctp_timeout_shutdown_recd" no longer used */
 694        /* NET_NF_CONNTRACK_SCTP_TIMEOUT_SHUTDOWN_ACK_SENT "nf_conntrack_sctp_timeout_shutdown_ack_sent" no longer used */
 695        { CTL_INT,      NET_NF_CONNTRACK_COUNT,                 "nf_conntrack_count" },
 696        /* NET_NF_CONNTRACK_ICMPV6_TIMEOUT "nf_conntrack_icmpv6_timeout" no longer used */
 697        /* NET_NF_CONNTRACK_FRAG6_TIMEOUT "nf_conntrack_frag6_timeout" no longer used */
 698        { CTL_INT,      NET_NF_CONNTRACK_FRAG6_LOW_THRESH,      "nf_conntrack_frag6_low_thresh" },
 699        { CTL_INT,      NET_NF_CONNTRACK_FRAG6_HIGH_THRESH,     "nf_conntrack_frag6_high_thresh" },
 700        { CTL_INT,      NET_NF_CONNTRACK_CHECKSUM,              "nf_conntrack_checksum" },
 701
 702        {}
 703};
 704
 705static const struct bin_table bin_net_irda_table[] = {
 706        { CTL_INT,      NET_IRDA_DISCOVERY,             "discovery" },
 707        { CTL_STR,      NET_IRDA_DEVNAME,               "devname" },
 708        { CTL_INT,      NET_IRDA_DEBUG,                 "debug" },
 709        { CTL_INT,      NET_IRDA_FAST_POLL,             "fast_poll_increase" },
 710        { CTL_INT,      NET_IRDA_DISCOVERY_SLOTS,       "discovery_slots" },
 711        { CTL_INT,      NET_IRDA_DISCOVERY_TIMEOUT,     "discovery_timeout" },
 712        { CTL_INT,      NET_IRDA_SLOT_TIMEOUT,          "slot_timeout" },
 713        { CTL_INT,      NET_IRDA_MAX_BAUD_RATE,         "max_baud_rate" },
 714        { CTL_INT,      NET_IRDA_MIN_TX_TURN_TIME,      "min_tx_turn_time" },
 715        { CTL_INT,      NET_IRDA_MAX_TX_DATA_SIZE,      "max_tx_data_size" },
 716        { CTL_INT,      NET_IRDA_MAX_TX_WINDOW,         "max_tx_window" },
 717        { CTL_INT,      NET_IRDA_MAX_NOREPLY_TIME,      "max_noreply_time" },
 718        { CTL_INT,      NET_IRDA_WARN_NOREPLY_TIME,     "warn_noreply_time" },
 719        { CTL_INT,      NET_IRDA_LAP_KEEPALIVE_TIME,    "lap_keepalive_time" },
 720        {}
 721};
 722
 723static const struct bin_table bin_net_table[] = {
 724        { CTL_DIR,      NET_CORE,               "core",         bin_net_core_table },
 725        /* NET_ETHER not used */
 726        /* NET_802 not used */
 727        { CTL_DIR,      NET_UNIX,               "unix",         bin_net_unix_table },
 728        { CTL_DIR,      NET_IPV4,               "ipv4",         bin_net_ipv4_table },
 729        { CTL_DIR,      NET_IPX,                "ipx",          bin_net_ipx_table },
 730        { CTL_DIR,      NET_ATALK,              "appletalk",    bin_net_atalk_table },
 731        { CTL_DIR,      NET_NETROM,             "netrom",       bin_net_netrom_table },
 732        { CTL_DIR,      NET_AX25,               "ax25",         bin_net_ax25_table },
 733        /*  NET_BRIDGE "bridge" no longer used */
 734        { CTL_DIR,      NET_ROSE,               "rose",         bin_net_rose_table },
 735        { CTL_DIR,      NET_IPV6,               "ipv6",         bin_net_ipv6_table },
 736        { CTL_DIR,      NET_X25,                "x25",          bin_net_x25_table },
 737        { CTL_DIR,      NET_TR,                 "token-ring",   bin_net_tr_table },
 738        { CTL_DIR,      NET_DECNET,             "decnet",       bin_net_decnet_table },
 739        /*  NET_ECONET not used */
 740        { CTL_DIR,      NET_SCTP,               "sctp",         bin_net_sctp_table },
 741        { CTL_DIR,      NET_LLC,                "llc",          bin_net_llc_table },
 742        { CTL_DIR,      NET_NETFILTER,          "netfilter",    bin_net_netfilter_table },
 743        /* NET_DCCP "dccp" no longer used */
 744        { CTL_DIR,      NET_IRDA,               "irda",         bin_net_irda_table },
 745        { CTL_INT,      2089,                   "nf_conntrack_max" },
 746        {}
 747};
 748
 749static const struct bin_table bin_fs_quota_table[] = {
 750        { CTL_INT,      FS_DQ_LOOKUPS,          "lookups" },
 751        { CTL_INT,      FS_DQ_DROPS,            "drops" },
 752        { CTL_INT,      FS_DQ_READS,            "reads" },
 753        { CTL_INT,      FS_DQ_WRITES,           "writes" },
 754        { CTL_INT,      FS_DQ_CACHE_HITS,       "cache_hits" },
 755        { CTL_INT,      FS_DQ_ALLOCATED,        "allocated_dquots" },
 756        { CTL_INT,      FS_DQ_FREE,             "free_dquots" },
 757        { CTL_INT,      FS_DQ_SYNCS,            "syncs" },
 758        { CTL_INT,      FS_DQ_WARNINGS,         "warnings" },
 759        {}
 760};
 761
 762static const struct bin_table bin_fs_xfs_table[] = {
 763        { CTL_INT,      XFS_SGID_INHERIT,       "irix_sgid_inherit" },
 764        { CTL_INT,      XFS_SYMLINK_MODE,       "irix_symlink_mode" },
 765        { CTL_INT,      XFS_PANIC_MASK,         "panic_mask" },
 766
 767        { CTL_INT,      XFS_ERRLEVEL,           "error_level" },
 768        { CTL_INT,      XFS_SYNCD_TIMER,        "xfssyncd_centisecs" },
 769        { CTL_INT,      XFS_INHERIT_SYNC,       "inherit_sync" },
 770        { CTL_INT,      XFS_INHERIT_NODUMP,     "inherit_nodump" },
 771        { CTL_INT,      XFS_INHERIT_NOATIME,    "inherit_noatime" },
 772        { CTL_INT,      XFS_BUF_TIMER,          "xfsbufd_centisecs" },
 773        { CTL_INT,      XFS_BUF_AGE,            "age_buffer_centisecs" },
 774        { CTL_INT,      XFS_INHERIT_NOSYM,      "inherit_nosymlinks" },
 775        { CTL_INT,      XFS_ROTORSTEP,  "rotorstep" },
 776        { CTL_INT,      XFS_INHERIT_NODFRG,     "inherit_nodefrag" },
 777        { CTL_INT,      XFS_FILESTREAM_TIMER,   "filestream_centisecs" },
 778        { CTL_INT,      XFS_STATS_CLEAR,        "stats_clear" },
 779        {}
 780};
 781
 782static const struct bin_table bin_fs_ocfs2_nm_table[] = {
 783        { CTL_STR,      1, "hb_ctl_path" },
 784        {}
 785};
 786
 787static const struct bin_table bin_fs_ocfs2_table[] = {
 788        { CTL_DIR,      1,      "nm",   bin_fs_ocfs2_nm_table },
 789        {}
 790};
 791
 792static const struct bin_table bin_inotify_table[] = {
 793        { CTL_INT,      INOTIFY_MAX_USER_INSTANCES,     "max_user_instances" },
 794        { CTL_INT,      INOTIFY_MAX_USER_WATCHES,       "max_user_watches" },
 795        { CTL_INT,      INOTIFY_MAX_QUEUED_EVENTS,      "max_queued_events" },
 796        {}
 797};
 798
 799static const struct bin_table bin_fs_table[] = {
 800        { CTL_INT,      FS_NRINODE,             "inode-nr" },
 801        { CTL_INT,      FS_STATINODE,           "inode-state" },
 802        /* FS_MAXINODE unused */
 803        /* FS_NRDQUOT unused */
 804        /* FS_MAXDQUOT unused */
 805        /* FS_NRFILE "file-nr" no longer used */
 806        { CTL_INT,      FS_MAXFILE,             "file-max" },
 807        { CTL_INT,      FS_DENTRY,              "dentry-state" },
 808        /* FS_NRSUPER unused */
 809        /* FS_MAXUPSER unused */
 810        { CTL_INT,      FS_OVERFLOWUID,         "overflowuid" },
 811        { CTL_INT,      FS_OVERFLOWGID,         "overflowgid" },
 812        { CTL_INT,      FS_LEASES,              "leases-enable" },
 813        { CTL_INT,      FS_DIR_NOTIFY,          "dir-notify-enable" },
 814        { CTL_INT,      FS_LEASE_TIME,          "lease-break-time" },
 815        { CTL_DIR,      FS_DQSTATS,             "quota",        bin_fs_quota_table },
 816        { CTL_DIR,      FS_XFS,                 "xfs",          bin_fs_xfs_table },
 817        { CTL_ULONG,    FS_AIO_NR,              "aio-nr" },
 818        { CTL_ULONG,    FS_AIO_MAX_NR,          "aio-max-nr" },
 819        { CTL_DIR,      FS_INOTIFY,             "inotify",      bin_inotify_table },
 820        { CTL_DIR,      FS_OCFS2,               "ocfs2",        bin_fs_ocfs2_table },
 821        { CTL_INT,      KERN_SETUID_DUMPABLE,   "suid_dumpable" },
 822        {}
 823};
 824
 825static const struct bin_table bin_ipmi_table[] = {
 826        { CTL_INT,      DEV_IPMI_POWEROFF_POWERCYCLE,   "poweroff_powercycle" },
 827        {}
 828};
 829
 830static const struct bin_table bin_mac_hid_files[] = {
 831        /* DEV_MAC_HID_KEYBOARD_SENDS_LINUX_KEYCODES unused */
 832        /* DEV_MAC_HID_KEYBOARD_LOCK_KEYCODES unused */
 833        { CTL_INT,      DEV_MAC_HID_MOUSE_BUTTON_EMULATION,     "mouse_button_emulation" },
 834        { CTL_INT,      DEV_MAC_HID_MOUSE_BUTTON2_KEYCODE,      "mouse_button2_keycode" },
 835        { CTL_INT,      DEV_MAC_HID_MOUSE_BUTTON3_KEYCODE,      "mouse_button3_keycode" },
 836        /* DEV_MAC_HID_ADB_MOUSE_SENDS_KEYCODES unused */
 837        {}
 838};
 839
 840static const struct bin_table bin_raid_table[] = {
 841        { CTL_INT,      DEV_RAID_SPEED_LIMIT_MIN,       "speed_limit_min" },
 842        { CTL_INT,      DEV_RAID_SPEED_LIMIT_MAX,       "speed_limit_max" },
 843        {}
 844};
 845
 846static const struct bin_table bin_scsi_table[] = {
 847        { CTL_INT, DEV_SCSI_LOGGING_LEVEL, "logging_level" },
 848        {}
 849};
 850
 851static const struct bin_table bin_dev_table[] = {
 852        /* DEV_CDROM    "cdrom" no longer used */
 853        /* DEV_HWMON unused */
 854        /* DEV_PARPORT  "parport" no longer used */
 855        { CTL_DIR,      DEV_RAID,       "raid",         bin_raid_table },
 856        { CTL_DIR,      DEV_MAC_HID,    "mac_hid",      bin_mac_hid_files },
 857        { CTL_DIR,      DEV_SCSI,       "scsi",         bin_scsi_table },
 858        { CTL_DIR,      DEV_IPMI,       "ipmi",         bin_ipmi_table },
 859        {}
 860};
 861
 862static const struct bin_table bin_bus_isa_table[] = {
 863        { CTL_INT,      BUS_ISA_MEM_BASE,       "membase" },
 864        { CTL_INT,      BUS_ISA_PORT_BASE,      "portbase" },
 865        { CTL_INT,      BUS_ISA_PORT_SHIFT,     "portshift" },
 866        {}
 867};
 868
 869static const struct bin_table bin_bus_table[] = {
 870        { CTL_DIR,      CTL_BUS_ISA,    "isa",  bin_bus_isa_table },
 871        {}
 872};
 873
 874
 875static const struct bin_table bin_s390dbf_table[] = {
 876        { CTL_INT,      5678 /* CTL_S390DBF_STOPPABLE */, "debug_stoppable" },
 877        { CTL_INT,      5679 /* CTL_S390DBF_ACTIVE */,    "debug_active" },
 878        {}
 879};
 880
 881static const struct bin_table bin_sunrpc_table[] = {
 882        /* CTL_RPCDEBUG "rpc_debug"  no longer used */
 883        /* CTL_NFSDEBUG "nfs_debug"  no longer used */
 884        /* CTL_NFSDDEBUG "nfsd_debug" no longer used  */
 885        /* CTL_NLMDEBUG "nlm_debug" no longer used */
 886
 887        { CTL_INT,      CTL_SLOTTABLE_UDP,      "udp_slot_table_entries" },
 888        { CTL_INT,      CTL_SLOTTABLE_TCP,      "tcp_slot_table_entries" },
 889        { CTL_INT,      CTL_MIN_RESVPORT,       "min_resvport" },
 890        { CTL_INT,      CTL_MAX_RESVPORT,       "max_resvport" },
 891        {}
 892};
 893
 894static const struct bin_table bin_pm_table[] = {
 895        /* frv specific */
 896        /* 1 == CTL_PM_SUSPEND  "suspend"  no longer used" */
 897        { CTL_INT,      2 /* CTL_PM_CMODE */,           "cmode" },
 898        { CTL_INT,      3 /* CTL_PM_P0 */,              "p0" },
 899        { CTL_INT,      4 /* CTL_PM_CM */,              "cm" },
 900        {}
 901};
 902
 903static const struct bin_table bin_root_table[] = {
 904        { CTL_DIR,      CTL_KERN,       "kernel",       bin_kern_table },
 905        { CTL_DIR,      CTL_VM,         "vm",           bin_vm_table },
 906        { CTL_DIR,      CTL_NET,        "net",          bin_net_table },
 907        /* CTL_PROC not used */
 908        { CTL_DIR,      CTL_FS,         "fs",           bin_fs_table },
 909        /* CTL_DEBUG "debug" no longer used */
 910        { CTL_DIR,      CTL_DEV,        "dev",          bin_dev_table },
 911        { CTL_DIR,      CTL_BUS,        "bus",          bin_bus_table },
 912        { CTL_DIR,      CTL_ABI,        "abi" },
 913        /* CTL_CPU not used */
 914        /* CTL_ARLAN "arlan" no longer used */
 915        { CTL_DIR,      CTL_S390DBF,    "s390dbf",      bin_s390dbf_table },
 916        { CTL_DIR,      CTL_SUNRPC,     "sunrpc",       bin_sunrpc_table },
 917        { CTL_DIR,      CTL_PM,         "pm",           bin_pm_table },
 918        {}
 919};
 920
 921static ssize_t bin_dir(struct file *file,
 922        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
 923{
 924        return -ENOTDIR;
 925}
 926
 927
 928static ssize_t bin_string(struct file *file,
 929        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
 930{
 931        ssize_t result, copied = 0;
 932
 933        if (oldval && oldlen) {
 934                char __user *lastp;
 935                loff_t pos = 0;
 936                int ch;
 937
 938                result = vfs_read(file, oldval, oldlen, &pos);
 939                if (result < 0)
 940                        goto out;
 941
 942                copied = result;
 943                lastp = oldval + copied - 1;
 944
 945                result = -EFAULT;
 946                if (get_user(ch, lastp))
 947                        goto out;
 948
 949                /* Trim off the trailing newline */
 950                if (ch == '\n') {
 951                        result = -EFAULT;
 952                        if (put_user('\0', lastp))
 953                                goto out;
 954                        copied -= 1;
 955                }
 956        }
 957
 958        if (newval && newlen) {
 959                loff_t pos = 0;
 960
 961                result = vfs_write(file, newval, newlen, &pos);
 962                if (result < 0)
 963                        goto out;
 964        }
 965
 966        result = copied;
 967out:
 968        return result;
 969}
 970
 971static ssize_t bin_intvec(struct file *file,
 972        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
 973{
 974        ssize_t copied = 0;
 975        char *buffer;
 976        ssize_t result;
 977
 978        result = -ENOMEM;
 979        buffer = kmalloc(BUFSZ, GFP_KERNEL);
 980        if (!buffer)
 981                goto out;
 982
 983        if (oldval && oldlen) {
 984                unsigned __user *vec = oldval;
 985                size_t length = oldlen / sizeof(*vec);
 986                char *str, *end;
 987                int i;
 988
 989                result = kernel_read(file, 0, buffer, BUFSZ - 1);
 990                if (result < 0)
 991                        goto out_kfree;
 992
 993                str = buffer;
 994                end = str + result;
 995                *end++ = '\0';
 996                for (i = 0; i < length; i++) {
 997                        unsigned long value;
 998
 999                        value = simple_strtoul(str, &str, 10);
1000                        while (isspace(*str))
1001                                str++;
1002                        
1003                        result = -EFAULT;
1004                        if (put_user(value, vec + i))
1005                                goto out_kfree;
1006
1007                        copied += sizeof(*vec);
1008                        if (!isdigit(*str))
1009                                break;
1010                }
1011        }
1012
1013        if (newval && newlen) {
1014                unsigned __user *vec = newval;
1015                size_t length = newlen / sizeof(*vec);
1016                char *str, *end;
1017                int i;
1018
1019                str = buffer;
1020                end = str + BUFSZ;
1021                for (i = 0; i < length; i++) {
1022                        unsigned long value;
1023
1024                        result = -EFAULT;
1025                        if (get_user(value, vec + i))
1026                                goto out_kfree;
1027
1028                        str += snprintf(str, end - str, "%lu\t", value);
1029                }
1030
1031                result = kernel_write(file, buffer, str - buffer, 0);
1032                if (result < 0)
1033                        goto out_kfree;
1034        }
1035        result = copied;
1036out_kfree:
1037        kfree(buffer);
1038out:
1039        return result;
1040}
1041
1042static ssize_t bin_ulongvec(struct file *file,
1043        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1044{
1045        ssize_t copied = 0;
1046        char *buffer;
1047        ssize_t result;
1048
1049        result = -ENOMEM;
1050        buffer = kmalloc(BUFSZ, GFP_KERNEL);
1051        if (!buffer)
1052                goto out;
1053
1054        if (oldval && oldlen) {
1055                unsigned long __user *vec = oldval;
1056                size_t length = oldlen / sizeof(*vec);
1057                char *str, *end;
1058                int i;
1059
1060                result = kernel_read(file, 0, buffer, BUFSZ - 1);
1061                if (result < 0)
1062                        goto out_kfree;
1063
1064                str = buffer;
1065                end = str + result;
1066                *end++ = '\0';
1067                for (i = 0; i < length; i++) {
1068                        unsigned long value;
1069
1070                        value = simple_strtoul(str, &str, 10);
1071                        while (isspace(*str))
1072                                str++;
1073                        
1074                        result = -EFAULT;
1075                        if (put_user(value, vec + i))
1076                                goto out_kfree;
1077
1078                        copied += sizeof(*vec);
1079                        if (!isdigit(*str))
1080                                break;
1081                }
1082        }
1083
1084        if (newval && newlen) {
1085                unsigned long __user *vec = newval;
1086                size_t length = newlen / sizeof(*vec);
1087                char *str, *end;
1088                int i;
1089
1090                str = buffer;
1091                end = str + BUFSZ;
1092                for (i = 0; i < length; i++) {
1093                        unsigned long value;
1094
1095                        result = -EFAULT;
1096                        if (get_user(value, vec + i))
1097                                goto out_kfree;
1098
1099                        str += snprintf(str, end - str, "%lu\t", value);
1100                }
1101
1102                result = kernel_write(file, buffer, str - buffer, 0);
1103                if (result < 0)
1104                        goto out_kfree;
1105        }
1106        result = copied;
1107out_kfree:
1108        kfree(buffer);
1109out:
1110        return result;
1111}
1112
1113static ssize_t bin_uuid(struct file *file,
1114        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1115{
1116        ssize_t result, copied = 0;
1117
1118        /* Only supports reads */
1119        if (oldval && oldlen) {
1120                char buf[40], *str = buf;
1121                unsigned char uuid[16];
1122                int i;
1123
1124                result = kernel_read(file, 0, buf, sizeof(buf) - 1);
1125                if (result < 0)
1126                        goto out;
1127
1128                buf[result] = '\0';
1129
1130                /* Convert the uuid to from a string to binary */
1131                for (i = 0; i < 16; i++) {
1132                        result = -EIO;
1133                        if (!isxdigit(str[0]) || !isxdigit(str[1]))
1134                                goto out;
1135
1136                        uuid[i] = (hex_to_bin(str[0]) << 4) |
1137                                        hex_to_bin(str[1]);
1138                        str += 2;
1139                        if (*str == '-')
1140                                str++;
1141                }
1142
1143                if (oldlen > 16)
1144                        oldlen = 16;
1145
1146                result = -EFAULT;
1147                if (copy_to_user(oldval, uuid, oldlen))
1148                        goto out;
1149
1150                copied = oldlen;
1151        }
1152        result = copied;
1153out:
1154        return result;
1155}
1156
1157static ssize_t bin_dn_node_address(struct file *file,
1158        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1159{
1160        ssize_t result, copied = 0;
1161
1162        if (oldval && oldlen) {
1163                char buf[15], *nodep;
1164                unsigned long area, node;
1165                __le16 dnaddr;
1166
1167                result = kernel_read(file, 0, buf, sizeof(buf) - 1);
1168                if (result < 0)
1169                        goto out;
1170
1171                buf[result] = '\0';
1172
1173                /* Convert the decnet address to binary */
1174                result = -EIO;
1175                nodep = strchr(buf, '.');
1176                if (!nodep)
1177                        goto out;
1178                ++nodep;
1179
1180                area = simple_strtoul(buf, NULL, 10);
1181                node = simple_strtoul(nodep, NULL, 10);
1182
1183                result = -EIO;
1184                if ((area > 63)||(node > 1023))
1185                        goto out;
1186
1187                dnaddr = cpu_to_le16((area << 10) | node);
1188
1189                result = -EFAULT;
1190                if (put_user(dnaddr, (__le16 __user *)oldval))
1191                        goto out;
1192
1193                copied = sizeof(dnaddr);
1194        }
1195
1196        if (newval && newlen) {
1197                __le16 dnaddr;
1198                char buf[15];
1199                int len;
1200
1201                result = -EINVAL;
1202                if (newlen != sizeof(dnaddr))
1203                        goto out;
1204
1205                result = -EFAULT;
1206                if (get_user(dnaddr, (__le16 __user *)newval))
1207                        goto out;
1208
1209                len = snprintf(buf, sizeof(buf), "%hu.%hu",
1210                                le16_to_cpu(dnaddr) >> 10,
1211                                le16_to_cpu(dnaddr) & 0x3ff);
1212
1213                result = kernel_write(file, buf, len, 0);
1214                if (result < 0)
1215                        goto out;
1216        }
1217
1218        result = copied;
1219out:
1220        return result;
1221}
1222
1223static const struct bin_table *get_sysctl(const int *name, int nlen, char *path)
1224{
1225        const struct bin_table *table = &bin_root_table[0];
1226        int ctl_name;
1227
1228        /* The binary sysctl tables have a small maximum depth so
1229         * there is no danger of overflowing our path as it PATH_MAX
1230         * bytes long.
1231         */
1232        memcpy(path, "sys/", 4);
1233        path += 4;
1234
1235repeat:
1236        if (!nlen)
1237                return ERR_PTR(-ENOTDIR);
1238        ctl_name = *name;
1239        name++;
1240        nlen--;
1241        for ( ; table->convert; table++) {
1242                int len = 0;
1243
1244                /*
1245                 * For a wild card entry map from ifindex to network
1246                 * device name.
1247                 */
1248                if (!table->ctl_name) {
1249#ifdef CONFIG_NET
1250                        struct net *net = current->nsproxy->net_ns;
1251                        struct net_device *dev;
1252                        dev = dev_get_by_index(net, ctl_name);
1253                        if (dev) {
1254                                len = strlen(dev->name);
1255                                memcpy(path, dev->name, len);
1256                                dev_put(dev);
1257                        }
1258#endif
1259                /* Use the well known sysctl number to proc name mapping */
1260                } else if (ctl_name == table->ctl_name) {
1261                        len = strlen(table->procname);
1262                        memcpy(path, table->procname, len);
1263                }
1264                if (len) {
1265                        path += len;
1266                        if (table->child) {
1267                                *path++ = '/';
1268                                table = table->child;
1269                                goto repeat;
1270                        }
1271                        *path = '\0';
1272                        return table;
1273                }
1274        }
1275        return ERR_PTR(-ENOTDIR);
1276}
1277
1278static char *sysctl_getname(const int *name, int nlen, const struct bin_table **tablep)
1279{
1280        char *tmp, *result;
1281
1282        result = ERR_PTR(-ENOMEM);
1283        tmp = __getname();
1284        if (tmp) {
1285                const struct bin_table *table = get_sysctl(name, nlen, tmp);
1286                result = tmp;
1287                *tablep = table;
1288                if (IS_ERR(table)) {
1289                        __putname(tmp);
1290                        result = ERR_CAST(table);
1291                }
1292        }
1293        return result;
1294}
1295
1296static ssize_t binary_sysctl(const int *name, int nlen,
1297        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1298{
1299        const struct bin_table *table = NULL;
1300        struct vfsmount *mnt;
1301        struct file *file;
1302        ssize_t result;
1303        char *pathname;
1304        int flags;
1305
1306        pathname = sysctl_getname(name, nlen, &table);
1307        result = PTR_ERR(pathname);
1308        if (IS_ERR(pathname))
1309                goto out;
1310
1311        /* How should the sysctl be accessed? */
1312        if (oldval && oldlen && newval && newlen) {
1313                flags = O_RDWR;
1314        } else if (newval && newlen) {
1315                flags = O_WRONLY;
1316        } else if (oldval && oldlen) {
1317                flags = O_RDONLY;
1318        } else {
1319                result = 0;
1320                goto out_putname;
1321        }
1322
1323        mnt = task_active_pid_ns(current)->proc_mnt;
1324        file = file_open_root(mnt->mnt_root, mnt, pathname, flags);
1325        result = PTR_ERR(file);
1326        if (IS_ERR(file))
1327                goto out_putname;
1328
1329        result = table->convert(file, oldval, oldlen, newval, newlen);
1330
1331        fput(file);
1332out_putname:
1333        __putname(pathname);
1334out:
1335        return result;
1336}
1337
1338
1339#else /* CONFIG_SYSCTL_SYSCALL */
1340
1341static ssize_t binary_sysctl(const int *name, int nlen,
1342        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1343{
1344        return -ENOSYS;
1345}
1346
1347#endif /* CONFIG_SYSCTL_SYSCALL */
1348
1349
1350static void deprecated_sysctl_warning(const int *name, int nlen)
1351{
1352        int i;
1353
1354        /*
1355         * CTL_KERN/KERN_VERSION is used by older glibc and cannot
1356         * ever go away.
1357         */
1358        if (name[0] == CTL_KERN && name[1] == KERN_VERSION)
1359                return;
1360
1361        if (printk_ratelimit()) {
1362                printk(KERN_INFO
1363                        "warning: process `%s' used the deprecated sysctl "
1364                        "system call with ", current->comm);
1365                for (i = 0; i < nlen; i++)
1366                        printk("%d.", name[i]);
1367                printk("\n");
1368        }
1369        return;
1370}
1371
1372#define WARN_ONCE_HASH_BITS 8
1373#define WARN_ONCE_HASH_SIZE (1<<WARN_ONCE_HASH_BITS)
1374
1375static DECLARE_BITMAP(warn_once_bitmap, WARN_ONCE_HASH_SIZE);
1376
1377#define FNV32_OFFSET 2166136261U
1378#define FNV32_PRIME 0x01000193
1379
1380/*
1381 * Print each legacy sysctl (approximately) only once.
1382 * To avoid making the tables non-const use a external
1383 * hash-table instead.
1384 * Worst case hash collision: 6, but very rarely.
1385 * NOTE! We don't use the SMP-safe bit tests. We simply
1386 * don't care enough.
1387 */
1388static void warn_on_bintable(const int *name, int nlen)
1389{
1390        int i;
1391        u32 hash = FNV32_OFFSET;
1392
1393        for (i = 0; i < nlen; i++)
1394                hash = (hash ^ name[i]) * FNV32_PRIME;
1395        hash %= WARN_ONCE_HASH_SIZE;
1396        if (__test_and_set_bit(hash, warn_once_bitmap))
1397                return;
1398        deprecated_sysctl_warning(name, nlen);
1399}
1400
1401static ssize_t do_sysctl(int __user *args_name, int nlen,
1402        void __user *oldval, size_t oldlen, void __user *newval, size_t newlen)
1403{
1404        int name[CTL_MAXNAME];
1405        int i;
1406
1407        /* Check args->nlen. */
1408        if (nlen < 0 || nlen > CTL_MAXNAME)
1409                return -ENOTDIR;
1410        /* Read in the sysctl name for simplicity */
1411        for (i = 0; i < nlen; i++)
1412                if (get_user(name[i], args_name + i))
1413                        return -EFAULT;
1414
1415        warn_on_bintable(name, nlen);
1416
1417        return binary_sysctl(name, nlen, oldval, oldlen, newval, newlen);
1418}
1419
1420SYSCALL_DEFINE1(sysctl, struct __sysctl_args __user *, args)
1421{
1422        struct __sysctl_args tmp;
1423        size_t oldlen = 0;
1424        ssize_t result;
1425
1426        if (copy_from_user(&tmp, args, sizeof(tmp)))
1427                return -EFAULT;
1428
1429        if (tmp.oldval && !tmp.oldlenp)
1430                return -EFAULT;
1431
1432        if (tmp.oldlenp && get_user(oldlen, tmp.oldlenp))
1433                return -EFAULT;
1434
1435        result = do_sysctl(tmp.name, tmp.nlen, tmp.oldval, oldlen,
1436                           tmp.newval, tmp.newlen);
1437
1438        if (result >= 0) {
1439                oldlen = result;
1440                result = 0;
1441        }
1442
1443        if (tmp.oldlenp && put_user(oldlen, tmp.oldlenp))
1444                return -EFAULT;
1445
1446        return result;
1447}
1448
1449
1450#ifdef CONFIG_COMPAT
1451
1452struct compat_sysctl_args {
1453        compat_uptr_t   name;
1454        int             nlen;
1455        compat_uptr_t   oldval;
1456        compat_uptr_t   oldlenp;
1457        compat_uptr_t   newval;
1458        compat_size_t   newlen;
1459        compat_ulong_t  __unused[4];
1460};
1461
1462COMPAT_SYSCALL_DEFINE1(sysctl, struct compat_sysctl_args __user *, args)
1463{
1464        struct compat_sysctl_args tmp;
1465        compat_size_t __user *compat_oldlenp;
1466        size_t oldlen = 0;
1467        ssize_t result;
1468
1469        if (copy_from_user(&tmp, args, sizeof(tmp)))
1470                return -EFAULT;
1471
1472        if (tmp.oldval && !tmp.oldlenp)
1473                return -EFAULT;
1474
1475        compat_oldlenp = compat_ptr(tmp.oldlenp);
1476        if (compat_oldlenp && get_user(oldlen, compat_oldlenp))
1477                return -EFAULT;
1478
1479        result = do_sysctl(compat_ptr(tmp.name), tmp.nlen,
1480                           compat_ptr(tmp.oldval), oldlen,
1481                           compat_ptr(tmp.newval), tmp.newlen);
1482
1483        if (result >= 0) {
1484                oldlen = result;
1485                result = 0;
1486        }
1487
1488        if (compat_oldlenp && put_user(oldlen, compat_oldlenp))
1489                return -EFAULT;
1490
1491        return result;
1492}
1493
1494#endif /* CONFIG_COMPAT */
1495
lxr.linux.no kindly hosted by Redpill Linpro AS, provider of Linux consulting and operations services since 1995.