[linux-block.git] / fs / proc / proc_net.c

// SPDX-License-Identifier: GPL-2.0-only
/*
 *  linux/fs/proc/net.c
 *
 *  Copyright (C) 2007
 *
 *  Author: Eric Biederman <ebiederm@xmission.com>
 *
 *  proc net directory handling functions
 */

#include <linux/uaccess.h>

#include <linux/errno.h>
#include <linux/time.h>
#include <linux/proc_fs.h>
#include <linux/stat.h>
#include <linux/slab.h>
#include <linux/init.h>
#include <linux/sched.h>
#include <linux/sched/task.h>
#include <linux/module.h>
#include <linux/bitops.h>
#include <linux/mount.h>
#include <linux/nsproxy.h>
#include <linux/uidgid.h>
#include <net/net_namespace.h>
#include <linux/seq_file.h>

#include "internal.h"

static inline struct net *PDE_NET(struct proc_dir_entry *pde)
{
	return pde->parent->data;
}

static struct net *get_proc_net(const struct inode *inode)
{
	return maybe_get_net(PDE_NET(PDE(inode)));
}

static int proc_net_d_revalidate(struct dentry *dentry, unsigned int flags)
{
	return 0;
}

static const struct dentry_operations proc_net_dentry_ops = {
	.d_revalidate	= proc_net_d_revalidate,
	.d_delete	= always_delete_dentry,
};

static void pde_force_lookup(struct proc_dir_entry *pde)
{
	/* /proc/net/ entries can be changed under us by setns(CLONE_NEWNET) */
	pde->proc_dops = &proc_net_dentry_ops;
}

static int seq_open_net(struct inode *inode, struct file *file)
{
	unsigned int state_size = PDE(inode)->state_size;
	struct seq_net_private *p;
	struct net *net;

	WARN_ON_ONCE(state_size < sizeof(*p));

	if (file->f_mode & FMODE_WRITE && !PDE(inode)->write)
		return -EACCES;

	net = get_proc_net(inode);
	if (!net)
		return -ENXIO;

	p = __seq_open_private(file, PDE(inode)->seq_ops, state_size);
	if (!p) {
		put_net(net);
		return -ENOMEM;
	}
#ifdef CONFIG_NET_NS
	p->net = net;
#endif
	return 0;
}

static int seq_release_net(struct inode *ino, struct file *f)
{
	struct seq_file *seq = f->private_data;

	put_net(seq_file_net(seq));
	seq_release_private(ino, f);
	return 0;
}

static const struct proc_ops proc_net_seq_ops = {
	.proc_open	= seq_open_net,
	.proc_read	= seq_read,
	.proc_write	= proc_simple_write,
	.proc_lseek	= seq_lseek,
	.proc_release	= seq_release_net,
};

int bpf_iter_init_seq_net(void *priv_data, struct bpf_iter_aux_info *aux)
{
#ifdef CONFIG_NET_NS
	struct seq_net_private *p = priv_data;

	p->net = get_net(current->nsproxy->net_ns);
#endif
	return 0;
}

void bpf_iter_fini_seq_net(void *priv_data)
{
#ifdef CONFIG_NET_NS
	struct seq_net_private *p = priv_data;

	put_net(p->net);
#endif
}

struct proc_dir_entry *proc_create_net_data(const char *name, umode_t mode,
		struct proc_dir_entry *parent, const struct seq_operations *ops,
		unsigned int state_size, void *data)
{
	struct proc_dir_entry *p;

	p = proc_create_reg(name, mode, &parent, data);
	if (!p)
		return NULL;
	pde_force_lookup(p);
	p->proc_ops = &proc_net_seq_ops;
	p->seq_ops = ops;
	p->state_size = state_size;
	return proc_register(parent, p);
}
EXPORT_SYMBOL_GPL(proc_create_net_data);

/**
 * proc_create_net_data_write - Create a writable net_ns-specific proc file
 * @name: The name of the file.
 * @mode: The file's access mode.
 * @parent: The parent directory in which to create.
 * @ops: The seq_file ops with which to read the file.
 * @write: The write method which which to 'modify' the file.
 * @data: Data for retrieval by PDE_DATA().
 *
 * Create a network namespaced proc file in the @parent directory with the
 * specified @name and @mode that allows reading of a file that displays a
 * series of elements and also provides for the file accepting writes that have
 * some arbitrary effect.
 *
 * The functions in the @ops table are used to iterate over items to be
 * presented and extract the readable content using the seq_file interface.
 *
 * The @write function is called with the data copied into a kernel space
 * scratch buffer and has a NUL appended for convenience.  The buffer may be
 * modified by the @write function.  @write should return 0 on success.
 *
 * The @data value is accessible from the @show and @write functions by calling
 * PDE_DATA() on the file inode.  The network namespace must be accessed by
 * calling seq_file_net() on the seq_file struct.
 */
struct proc_dir_entry *proc_create_net_data_write(const char *name, umode_t mode,
						  struct proc_dir_entry *parent,
						  const struct seq_operations *ops,
						  proc_write_t write,
						  unsigned int state_size, void *data)
{
	struct proc_dir_entry *p;

	p = proc_create_reg(name, mode, &parent, data);
	if (!p)
		return NULL;
	pde_force_lookup(p);
	p->proc_ops = &proc_net_seq_ops;
	p->seq_ops = ops;
	p->state_size = state_size;
	p->write = write;
	return proc_register(parent, p);
}
EXPORT_SYMBOL_GPL(proc_create_net_data_write);

static int single_open_net(struct inode *inode, struct file *file)
{
	struct proc_dir_entry *de = PDE(inode);
	struct net *net;
	int err;

	net = get_proc_net(inode);
	if (!net)
		return -ENXIO;

	err = single_open(file, de->single_show, net);
	if (err)
		put_net(net);
	return err;
}

static int single_release_net(struct inode *ino, struct file *f)
{
	struct seq_file *seq = f->private_data;
	put_net(seq->private);
	return single_release(ino, f);
}

static const struct proc_ops proc_net_single_ops = {
	.proc_open	= single_open_net,
	.proc_read	= seq_read,
	.proc_write	= proc_simple_write,
	.proc_lseek	= seq_lseek,
	.proc_release	= single_release_net,
};

struct proc_dir_entry *proc_create_net_single(const char *name, umode_t mode,
		struct proc_dir_entry *parent,
		int (*show)(struct seq_file *, void *), void *data)
{
	struct proc_dir_entry *p;

	p = proc_create_reg(name, mode, &parent, data);
	if (!p)
		return NULL;
	pde_force_lookup(p);
	p->proc_ops = &proc_net_single_ops;
	p->single_show = show;
	return proc_register(parent, p);
}
EXPORT_SYMBOL_GPL(proc_create_net_single);

/**
 * proc_create_net_single_write - Create a writable net_ns-specific proc file
 * @name: The name of the file.
 * @mode: The file's access mode.
 * @parent: The parent directory in which to create.
 * @show: The seqfile show method with which to read the file.
 * @write: The write method which which to 'modify' the file.
 * @data: Data for retrieval by PDE_DATA().
 *
 * Create a network-namespaced proc file in the @parent directory with the
 * specified @name and @mode that allows reading of a file that displays a
 * single element rather than a series and also provides for the file accepting
 * writes that have some arbitrary effect.
 *
 * The @show function is called to extract the readable content via the
 * seq_file interface.
 *
 * The @write function is called with the data copied into a kernel space
 * scratch buffer and has a NUL appended for convenience.  The buffer may be
 * modified by the @write function.  @write should return 0 on success.
 *
 * The @data value is accessible from the @show and @write functions by calling
 * PDE_DATA() on the file inode.  The network namespace must be accessed by
 * calling seq_file_single_net() on the seq_file struct.
 */
struct proc_dir_entry *proc_create_net_single_write(const char *name, umode_t mode,
						    struct proc_dir_entry *parent,
						    int (*show)(struct seq_file *, void *),
						    proc_write_t write,
						    void *data)
{
	struct proc_dir_entry *p;

	p = proc_create_reg(name, mode, &parent, data);
	if (!p)
		return NULL;
	pde_force_lookup(p);
	p->proc_ops = &proc_net_single_ops;
	p->single_show = show;
	p->write = write;
	return proc_register(parent, p);
}
EXPORT_SYMBOL_GPL(proc_create_net_single_write);

static struct net *get_proc_task_net(struct inode *dir)
{
	struct task_struct *task;
	struct nsproxy *ns;
	struct net *net = NULL;

	rcu_read_lock();
	task = pid_task(proc_pid(dir), PIDTYPE_PID);
	if (task != NULL) {
		task_lock(task);
		ns = task->nsproxy;
		if (ns != NULL)
			net = get_net(ns->net_ns);
		task_unlock(task);
	}
	rcu_read_unlock();

	return net;
}

static struct dentry *proc_tgid_net_lookup(struct inode *dir,
		struct dentry *dentry, unsigned int flags)
{
	struct dentry *de;
	struct net *net;

	de = ERR_PTR(-ENOENT);
	net = get_proc_task_net(dir);
	if (net != NULL) {
		de = proc_lookup_de(dir, dentry, net->proc_net);
		put_net(net);
	}
	return de;
}

static int proc_tgid_net_getattr(const struct path *path, struct kstat *stat,
				 u32 request_mask, unsigned int query_flags)
{
	struct inode *inode = d_inode(path->dentry);
	struct net *net;

	net = get_proc_task_net(inode);

	generic_fillattr(inode, stat);

	if (net != NULL) {
		stat->nlink = net->proc_net->nlink;
		put_net(net);
	}

	return 0;
}

const struct inode_operations proc_net_inode_operations = {
	.lookup		= proc_tgid_net_lookup,
	.getattr	= proc_tgid_net_getattr,
};

static int proc_tgid_net_readdir(struct file *file, struct dir_context *ctx)
{
	int ret;
	struct net *net;

	ret = -EINVAL;
	net = get_proc_task_net(file_inode(file));
	if (net != NULL) {
		ret = proc_readdir_de(file, ctx, net->proc_net);
		put_net(net);
	}
	return ret;
}

const struct file_operations proc_net_operations = {
	.llseek		= generic_file_llseek,
	.read		= generic_read_dir,
	.iterate_shared	= proc_tgid_net_readdir,
};

static __net_init int proc_net_ns_init(struct net *net)
{
	struct proc_dir_entry *netd, *net_statd;
	kuid_t uid;
	kgid_t gid;
	int err;

	err = -ENOMEM;
	netd = kmem_cache_zalloc(proc_dir_entry_cache, GFP_KERNEL);
	if (!netd)
		goto out;

	netd->subdir = RB_ROOT;
	netd->data = net;
	netd->nlink = 2;
	netd->namelen = 3;
	netd->parent = &proc_root;
	netd->name = netd->inline_name;
	memcpy(netd->name, "net", 4);

	uid = make_kuid(net->user_ns, 0);
	if (!uid_valid(uid))
		uid = netd->uid;

	gid = make_kgid(net->user_ns, 0);
	if (!gid_valid(gid))
		gid = netd->gid;

	proc_set_user(netd, uid, gid);

	err = -EEXIST;
	net_statd = proc_net_mkdir(net, "stat", netd);
	if (!net_statd)
		goto free_net;

	net->proc_net = netd;
	net->proc_net_stat = net_statd;
	return 0;

free_net:
	pde_free(netd);
out:
	return err;
}

static __net_exit void proc_net_ns_exit(struct net *net)
{
	remove_proc_entry("stat", net->proc_net);
	pde_free(net->proc_net);
}

static struct pernet_operations __net_initdata proc_net_ns_ops = {
	.init = proc_net_ns_init,
	.exit = proc_net_ns_exit,
};

int __init proc_net_init(void)
{
	proc_symlink("net", NULL, "self/net");

	return register_pernet_subsys(&proc_net_ns_ops);
}
Commit	Line	Data
457c8996	1	// SPDX-License-Identifier: GPL-2.0-only
3c12afe7 DM	2	/*
	3	* linux/fs/proc/net.c
	4	*
	5	* Copyright (C) 2007
	6	*
	7	* Author: Eric Biederman <ebiederm@xmission.com>
	8	*
	9	* proc net directory handling functions
	10	*/
	11
7c0f6ba6	12	#include <linux/uaccess.h>
3c12afe7 DM	13
	14	#include <linux/errno.h>
	15	#include <linux/time.h>
	16	#include <linux/proc_fs.h>
	17	#include <linux/stat.h>
5a0e3ad6	18	#include <linux/slab.h>
3c12afe7 DM	19	#include <linux/init.h>
3c12afe7 DM	20	#include <linux/sched.h>
f719ff9b	21	#include <linux/sched/task.h>
3c12afe7 DM	22	#include <linux/module.h>
3c12afe7 DM	23	#include <linux/bitops.h>
3c12afe7 DM	24	#include <linux/mount.h>
3c12afe7 DM	25	#include <linux/nsproxy.h>
c110486f	26	#include <linux/uidgid.h>
3c12afe7	27	#include <net/net_namespace.h>
e372c414	28	#include <linux/seq_file.h>
3c12afe7 DM	29
	30	#include "internal.h"
	31
4abfd029 DH	32	static inline struct net PDE_NET(struct proc_dir_entry pde)
	33	{
	34	return pde->parent->data;
	35	}
3c12afe7	36
8086cd45 AB	37	static struct net get_proc_net(const struct inode inode)
	38	{
	39	return maybe_get_net(PDE_NET(PDE(inode)));
	40	}
	41
1fde6f21 AD	42	static int proc_net_d_revalidate(struct dentry *dentry, unsigned int flags)
	43	{
	44	return 0;
	45	}
	46
	47	static const struct dentry_operations proc_net_dentry_ops = {
	48	.d_revalidate = proc_net_d_revalidate,
	49	.d_delete = always_delete_dentry,
	50	};
	51
	52	static void pde_force_lookup(struct proc_dir_entry *pde)
	53	{
	54	/* /proc/net/ entries can be changed under us by setns(CLONE_NEWNET) */
	55	pde->proc_dops = &proc_net_dentry_ops;
	56	}
	57
c3506372	58	static int seq_open_net(struct inode inode, struct file file)
e372c414	59	{
c3506372	60	unsigned int state_size = PDE(inode)->state_size;
e372c414	61	struct seq_net_private *p;
c3506372	62	struct net *net;
e372c414	63
c3506372	64	WARN_ON_ONCE(state_size < sizeof(*p));
e372c414	65
564def71 DH	66	if (file->f_mode & FMODE_WRITE && !PDE(inode)->write)
	67	return -EACCES;
	68
c3506372 CH	69	net = get_proc_net(inode);
c3506372 CH	70	if (!net)
e372c414 DL	71	return -ENXIO;
e372c414 DL	72
c3506372 CH	73	p = __seq_open_private(file, PDE(inode)->seq_ops, state_size);
c3506372 CH	74	if (!p) {
e372c414 DL	75	put_net(net);
	76	return -ENOMEM;
	77	}
1218854a	78	#ifdef CONFIG_NET_NS
e372c414	79	p->net = net;
1218854a	80	#endif
e372c414 DL	81	return 0;
e372c414 DL	82	}
c3506372 CH	83
	84	static int seq_release_net(struct inode ino, struct file f)
	85	{
	86	struct seq_file *seq = f->private_data;
	87
	88	put_net(seq_file_net(seq));
	89	seq_release_private(ino, f);
	90	return 0;
	91	}
	92
d56c0d45 AD	93	static const struct proc_ops proc_net_seq_ops = {
	94	.proc_open = seq_open_net,
	95	.proc_read = seq_read,
	96	.proc_write = proc_simple_write,
	97	.proc_lseek = seq_lseek,
	98	.proc_release = seq_release_net,
c3506372 CH	99	};
c3506372 CH	100
f9c79272	101	int bpf_iter_init_seq_net(void priv_data, struct bpf_iter_aux_info aux)
138d0be3 YS	102	{
	103	#ifdef CONFIG_NET_NS
	104	struct seq_net_private *p = priv_data;
	105
	106	p->net = get_net(current->nsproxy->net_ns);
	107	#endif
	108	return 0;
	109	}
	110
	111	void bpf_iter_fini_seq_net(void *priv_data)
	112	{
	113	#ifdef CONFIG_NET_NS
	114	struct seq_net_private *p = priv_data;
	115
	116	put_net(p->net);
	117	#endif
	118	}
	119
c3506372 CH	120	struct proc_dir_entry proc_create_net_data(const char name, umode_t mode,
	121	struct proc_dir_entry parent, const struct seq_operations ops,
	122	unsigned int state_size, void *data)
	123	{
	124	struct proc_dir_entry *p;
	125
	126	p = proc_create_reg(name, mode, &parent, data);
	127	if (!p)
	128	return NULL;
1fde6f21	129	pde_force_lookup(p);
d56c0d45	130	p->proc_ops = &proc_net_seq_ops;
c3506372 CH	131	p->seq_ops = ops;
	132	p->state_size = state_size;
	133	return proc_register(parent, p);
	134	}
	135	EXPORT_SYMBOL_GPL(proc_create_net_data);
e372c414	136
564def71 DH	137	/**
	138	* proc_create_net_data_write - Create a writable net_ns-specific proc file
	139	* @name: The name of the file.
	140	* @mode: The file's access mode.
	141	* @parent: The parent directory in which to create.
	142	* @ops: The seq_file ops with which to read the file.
	143	* @write: The write method which which to 'modify' the file.
	144	* @data: Data for retrieval by PDE_DATA().
	145	*
	146	* Create a network namespaced proc file in the @parent directory with the
	147	* specified @name and @mode that allows reading of a file that displays a
	148	* series of elements and also provides for the file accepting writes that have
	149	* some arbitrary effect.
	150	*
	151	* The functions in the @ops table are used to iterate over items to be
	152	* presented and extract the readable content using the seq_file interface.
	153	*
	154	* The @write function is called with the data copied into a kernel space
	155	* scratch buffer and has a NUL appended for convenience. The buffer may be
	156	* modified by the @write function. @write should return 0 on success.
	157	*
	158	* The @data value is accessible from the @show and @write functions by calling
	159	* PDE_DATA() on the file inode. The network namespace must be accessed by
	160	* calling seq_file_net() on the seq_file struct.
	161	*/
	162	struct proc_dir_entry proc_create_net_data_write(const char name, umode_t mode,
	163	struct proc_dir_entry *parent,
	164	const struct seq_operations *ops,
	165	proc_write_t write,
	166	unsigned int state_size, void *data)
	167	{
	168	struct proc_dir_entry *p;
	169
	170	p = proc_create_reg(name, mode, &parent, data);
	171	if (!p)
	172	return NULL;
1fde6f21	173	pde_force_lookup(p);
d56c0d45	174	p->proc_ops = &proc_net_seq_ops;
564def71 DH	175	p->seq_ops = ops;
	176	p->state_size = state_size;
	177	p->write = write;
	178	return proc_register(parent, p);
	179	}
	180	EXPORT_SYMBOL_GPL(proc_create_net_data_write);
	181
3617d949	182	static int single_open_net(struct inode inode, struct file file)
de05c557	183	{
3617d949	184	struct proc_dir_entry *de = PDE(inode);
de05c557	185	struct net *net;
3617d949	186	int err;
de05c557	187
de05c557	188	net = get_proc_net(inode);
3617d949 CH	189	if (!net)
3617d949 CH	190	return -ENXIO;
de05c557	191
3617d949 CH	192	err = single_open(file, de->single_show, net);
	193	if (err)
	194	put_net(net);
de05c557 PE	195	return err;
de05c557 PE	196	}
de05c557	197
3617d949	198	static int single_release_net(struct inode ino, struct file f)
b6fcbdb4 PE	199	{
	200	struct seq_file *seq = f->private_data;
	201	put_net(seq->private);
	202	return single_release(ino, f);
	203	}
3617d949	204
d56c0d45 AD	205	static const struct proc_ops proc_net_single_ops = {
	206	.proc_open = single_open_net,
	207	.proc_read = seq_read,
	208	.proc_write = proc_simple_write,
	209	.proc_lseek = seq_lseek,
	210	.proc_release = single_release_net,
3617d949 CH	211	};
	212
	213	struct proc_dir_entry proc_create_net_single(const char name, umode_t mode,
	214	struct proc_dir_entry *parent,
	215	int (show)(struct seq_file , void ), void data)
	216	{
	217	struct proc_dir_entry *p;
	218
	219	p = proc_create_reg(name, mode, &parent, data);
	220	if (!p)
	221	return NULL;
1fde6f21	222	pde_force_lookup(p);
d56c0d45	223	p->proc_ops = &proc_net_single_ops;
3617d949 CH	224	p->single_show = show;
	225	return proc_register(parent, p);
	226	}
	227	EXPORT_SYMBOL_GPL(proc_create_net_single);
b6fcbdb4	228
564def71 DH	229	/**
	230	* proc_create_net_single_write - Create a writable net_ns-specific proc file
	231	* @name: The name of the file.
	232	* @mode: The file's access mode.
	233	* @parent: The parent directory in which to create.
	234	* @show: The seqfile show method with which to read the file.
	235	* @write: The write method which which to 'modify' the file.
	236	* @data: Data for retrieval by PDE_DATA().
	237	*
	238	* Create a network-namespaced proc file in the @parent directory with the
	239	* specified @name and @mode that allows reading of a file that displays a
	240	* single element rather than a series and also provides for the file accepting
	241	* writes that have some arbitrary effect.
	242	*
	243	* The @show function is called to extract the readable content via the
	244	* seq_file interface.
	245	*
	246	* The @write function is called with the data copied into a kernel space
	247	* scratch buffer and has a NUL appended for convenience. The buffer may be
	248	* modified by the @write function. @write should return 0 on success.
	249	*
	250	* The @data value is accessible from the @show and @write functions by calling
	251	* PDE_DATA() on the file inode. The network namespace must be accessed by
	252	* calling seq_file_single_net() on the seq_file struct.
	253	*/
	254	struct proc_dir_entry proc_create_net_single_write(const char name, umode_t mode,
	255	struct proc_dir_entry *parent,
	256	int (show)(struct seq_file , void *),
	257	proc_write_t write,
	258	void *data)
	259	{
	260	struct proc_dir_entry *p;
	261
	262	p = proc_create_reg(name, mode, &parent, data);
	263	if (!p)
	264	return NULL;
1fde6f21	265	pde_force_lookup(p);
d56c0d45	266	p->proc_ops = &proc_net_single_ops;
564def71 DH	267	p->single_show = show;
	268	p->write = write;
	269	return proc_register(parent, p);
	270	}
	271	EXPORT_SYMBOL_GPL(proc_create_net_single_write);
	272
e9720acd PE	273	static struct net get_proc_task_net(struct inode dir)
	274	{
	275	struct task_struct *task;
	276	struct nsproxy *ns;
	277	struct net *net = NULL;
	278
	279	rcu_read_lock();
	280	task = pid_task(proc_pid(dir), PIDTYPE_PID);
	281	if (task != NULL) {
728dba3a EB	282	task_lock(task);
728dba3a EB	283	ns = task->nsproxy;
e9720acd PE	284	if (ns != NULL)
e9720acd PE	285	net = get_net(ns->net_ns);
728dba3a	286	task_unlock(task);
e9720acd PE	287	}
	288	rcu_read_unlock();
	289
	290	return net;
	291	}
	292
	293	static struct dentry proc_tgid_net_lookup(struct inode dir,
00cd8dd3	294	struct dentry *dentry, unsigned int flags)
e9720acd PE	295	{
	296	struct dentry *de;
	297	struct net *net;
	298
	299	de = ERR_PTR(-ENOENT);
	300	net = get_proc_task_net(dir);
	301	if (net != NULL) {
93ad5bc6	302	de = proc_lookup_de(dir, dentry, net->proc_net);
e9720acd PE	303	put_net(net);
	304	}
	305	return de;
	306	}
	307
a528d35e DH	308	static int proc_tgid_net_getattr(const struct path path, struct kstat stat,
a528d35e DH	309	u32 request_mask, unsigned int query_flags)
e9720acd	310	{
a528d35e	311	struct inode *inode = d_inode(path->dentry);
e9720acd PE	312	struct net *net;
	313
	314	net = get_proc_task_net(inode);
	315
	316	generic_fillattr(inode, stat);
	317
	318	if (net != NULL) {
	319	stat->nlink = net->proc_net->nlink;
	320	put_net(net);
	321	}
	322
	323	return 0;
	324	}
	325
	326	const struct inode_operations proc_net_inode_operations = {
	327	.lookup = proc_tgid_net_lookup,
	328	.getattr = proc_tgid_net_getattr,
	329	};
	330
f0c3b509	331	static int proc_tgid_net_readdir(struct file file, struct dir_context ctx)
e9720acd PE	332	{
	333	int ret;
	334	struct net *net;
	335
	336	ret = -EINVAL;
f0c3b509	337	net = get_proc_task_net(file_inode(file));
e9720acd	338	if (net != NULL) {
93ad5bc6	339	ret = proc_readdir_de(file, ctx, net->proc_net);
e9720acd PE	340	put_net(net);
	341	}
	342	return ret;
	343	}
	344
	345	const struct file_operations proc_net_operations = {
b4df2b92	346	.llseek = generic_file_llseek,
e9720acd	347	.read = generic_read_dir,
f50752ea	348	.iterate_shared = proc_tgid_net_readdir,
e9720acd PE	349	};
e9720acd PE	350
4665079c	351	static __net_init int proc_net_ns_init(struct net *net)
3c12afe7	352	{
e9720acd	353	struct proc_dir_entry netd, net_statd;
c110486f DT	354	kuid_t uid;
c110486f DT	355	kgid_t gid;
3c12afe7 DM	356	int err;
	357
	358	err = -ENOMEM;
b4884f23	359	netd = kmem_cache_zalloc(proc_dir_entry_cache, GFP_KERNEL);
e9720acd	360	if (!netd)
3c12afe7 DM	361	goto out;
3c12afe7 DM	362
4f113437	363	netd->subdir = RB_ROOT;
e9720acd PE	364	netd->data = net;
e9720acd PE	365	netd->nlink = 2;
e9720acd PE	366	netd->namelen = 3;
e9720acd PE	367	netd->parent = &proc_root;
b4884f23	368	netd->name = netd->inline_name;
09570f91	369	memcpy(netd->name, "net", 4);
3c12afe7	370
c110486f DT	371	uid = make_kuid(net->user_ns, 0);
	372	if (!uid_valid(uid))
	373	uid = netd->uid;
	374
	375	gid = make_kgid(net->user_ns, 0);
	376	if (!gid_valid(gid))
	377	gid = netd->gid;
	378
	379	proc_set_user(netd, uid, gid);
	380
3c12afe7	381	err = -EEXIST;
e5d69b9f	382	net_statd = proc_net_mkdir(net, "stat", netd);
3c12afe7 DM	383	if (!net_statd)
	384	goto free_net;
	385
3c12afe7 DM	386	net->proc_net = netd;
3c12afe7 DM	387	net->proc_net_stat = net_statd;
e9720acd	388	return 0;
3c12afe7	389
e9720acd	390	free_net:
b4884f23	391	pde_free(netd);
3c12afe7 DM	392	out:
3c12afe7 DM	393	return err;
3c12afe7 DM	394	}
3c12afe7 DM	395
4665079c	396	static __net_exit void proc_net_ns_exit(struct net *net)
3c12afe7 DM	397	{
3c12afe7 DM	398	remove_proc_entry("stat", net->proc_net);
b4884f23	399	pde_free(net->proc_net);
3c12afe7 DM	400	}
3c12afe7 DM	401
022cbae6	402	static struct pernet_operations __net_initdata proc_net_ns_ops = {
3c12afe7 DM	403	.init = proc_net_ns_init,
	404	.exit = proc_net_ns_exit,
	405	};
	406
4665079c	407	int __init proc_net_init(void)
3c12afe7	408	{
155134fe	409	proc_symlink("net", NULL, "self/net");
3c12afe7 DM	410
	411	return register_pernet_subsys(&proc_net_ns_ops);
	412	}