projects / linux-2.6-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
networking: Update to register_net_sysctl_sz
[linux-2.6-block.git] / net / ipv4 / sysctl_net_ipv4.c
CommitLineData
b2441318 1// SPDX-License-Identifier: GPL-2.0
1da177e4
LT		 2/*
3 * sysctl_net_ipv4.c: sysctl interface to net IPV4 subsystem.
4 *
1da177e4
LT		 5 * Begun April 1, 1996, Mike Shaver.
6 * Added /proc/sys/net/ipv4 directory entry (empty =) ). [MS]
7 */
8
1da177e4 9#include <linux/sysctl.h>
227b60f5 10#include <linux/seqlock.h>
3e37c3f9 11#include <linux/init.h>
5a0e3ad6 12#include <linux/slab.h>
20380731 13#include <net/icmp.h>
1da177e4 14#include <net/ip.h>
ce5c9c20 15#include <net/ip_fib.h>
1da177e4 16#include <net/tcp.h>
95766fff 17#include <net/udp.h>
446fda4f 18#include <net/cipso_ipv4.h>
c319b4d7 19#include <net/ping.h>
dddb64bc 20#include <net/protocol.h>
3ae6ec08 21#include <net/netevent.h>
1da177e4 22
e905a9ed 23static int tcp_retr1_max = 255;
1da177e4
LT		 24static int ip_local_port_range_min[] = { 1, 1 };
25static int ip_local_port_range_max[] = { 65535, 65535 };
0147fc05
AD		 26static int tcp_adv_win_scale_min = -31;
27static int tcp_adv_win_scale_max = 31;
dc5110c2 28static int tcp_app_win_max = 31;
5f3e2bf0
ED		 29static int tcp_min_snd_mss_min = TCP_MIN_SND_MSS;
30static int tcp_min_snd_mss_max = 65535;
4548b683
KJ		 31static int ip_privileged_port_min;
32static int ip_privileged_port_max = 65535;
249fab77
ED		 33static int ip_ttl_min = 1;
34static int ip_ttl_max = 255;
651e9271
MT		 35static int tcp_syn_retries_min = 1;
36static int tcp_syn_retries_max = MAX_TCP_SYNCNT;
ccce324d 37static int tcp_syn_linear_timeouts_max = MAX_TCP_SYNCNT;
e209fee4
AS		 38static unsigned long ip_ping_group_range_min[] = { 0, 0 };
39static unsigned long ip_ping_group_range_max[] = { GID_T_MAX, GID_T_MAX };
d4ce5808 40static u32 u32_max_div_HZ = UINT_MAX / HZ;
19fad20d 41static int one_day_secs = 24 * 3600;
ce5c9c20
IS		 42static u32 fib_multipath_hash_fields_all_mask __maybe_unused =
43 FIB_MULTIPATH_HASH_FIELD_ALL_MASK;
d1e5e640 44static unsigned int tcp_child_ehash_entries_max = 16 * 1024 * 1024;
9804985b 45static unsigned int udp_child_hash_entries_max = UDP_HTABLE_SIZE_MAX;
bd456f28
MAQ		 46static int tcp_plb_max_rounds = 31;
47static int tcp_plb_max_cong_thresh = 256;
1da177e4 48
b6690b14
FW		 49/* obsolete */
50static int sysctl_tcp_low_latency __read_mostly;
51
227b60f5 52/* Update system visible IP port range */
0bbf87d8 53static void set_local_port_range(struct net *net, int range[2])
227b60f5 54{
ed2dfd90
ED		 55 bool same_parity = !((range[0] ^ range[1]) & 1);
56
4ee3bd4a 57 write_seqlock_bh(&net->ipv4.ip_local_ports.lock);
ed2dfd90
ED		 58 if (same_parity && !net->ipv4.ip_local_ports.warned) {
59 net->ipv4.ip_local_ports.warned = true;
60 pr_err_ratelimited("ip_local_port_range: prefer different parity for start/end values.\n");
61 }
c9d8f1a6
CW		 62 net->ipv4.ip_local_ports.range[0] = range[0];
63 net->ipv4.ip_local_ports.range[1] = range[1];
4ee3bd4a 64 write_sequnlock_bh(&net->ipv4.ip_local_ports.lock);
227b60f5
SH		 65}
66
67/* Validate changes from /proc interface. */
fe2c6338 68static int ipv4_local_port_range(struct ctl_table *table, int write,
32927393 69 void *buffer, size_t *lenp, loff_t *ppos)
227b60f5 70{
0bbf87d8 71 struct net *net =
c9d8f1a6 72 container_of(table->data, struct net, ipv4.ip_local_ports.range);
227b60f5 73 int ret;
3c689b73 74 int range[2];
fe2c6338 75 struct ctl_table tmp = {
227b60f5
SH		 76 .data = &range,
77 .maxlen = sizeof(range),
78 .mode = table->mode,
79 .extra1 = &ip_local_port_range_min,
80 .extra2 = &ip_local_port_range_max,
81 };
82
0bbf87d8
EB		 83 inet_get_local_port_range(net, &range[0], &range[1]);
84
8d65af78 85 ret = proc_dointvec_minmax(&tmp, write, buffer, lenp, ppos);
227b60f5
SH		 86
87 if (write && ret == 0) {
4548b683
KJ		 88 /* Ensure that the upper limit is not smaller than the lower,
89 * and that the lower does not encroach upon the privileged
90 * port limit.
91 */
92 if ((range[1] < range[0]) ||
9b55c20f 93 (range[0] < READ_ONCE(net->ipv4.sysctl_ip_prot_sock)))
227b60f5
SH		 94 ret = -EINVAL;
95 else
0bbf87d8 96 set_local_port_range(net, range);
227b60f5
SH		 97 }
98
99 return ret;
100}
101
4548b683
KJ		 102/* Validate changes from /proc interface. */
103static int ipv4_privileged_ports(struct ctl_table *table, int write,
32927393 104 void *buffer, size_t *lenp, loff_t *ppos)
4548b683
KJ		 105{
106 struct net *net = container_of(table->data, struct net,
107 ipv4.sysctl_ip_prot_sock);
108 int ret;
109 int pports;
110 int range[2];
111 struct ctl_table tmp = {
112 .data = &pports,
113 .maxlen = sizeof(pports),
114 .mode = table->mode,
115 .extra1 = &ip_privileged_port_min,
116 .extra2 = &ip_privileged_port_max,
117 };
118
9b55c20f 119 pports = READ_ONCE(net->ipv4.sysctl_ip_prot_sock);
4548b683
KJ		 120
121 ret = proc_dointvec_minmax(&tmp, write, buffer, lenp, ppos);
122
123 if (write && ret == 0) {
124 inet_get_local_port_range(net, &range[0], &range[1]);
125 /* Ensure that the local port range doesn't overlap with the
126 * privileged port range.
127 */
128 if (range[0] < pports)
129 ret = -EINVAL;
130 else
9b55c20f 131 WRITE_ONCE(net->ipv4.sysctl_ip_prot_sock, pports);
4548b683
KJ		 132 }
133
134 return ret;
135}
c319b4d7 136
7064d16e 137static void inet_get_ping_group_range_table(struct ctl_table *table, kgid_t *low, kgid_t *high)
c319b4d7 138{
7064d16e 139 kgid_t *data = table->data;
0bbf87d8 140 struct net *net =
ba6b918a 141 container_of(table->data, struct net, ipv4.ping_group_range.range);
95c96174 142 unsigned int seq;
c319b4d7 143 do {
396a30cc 144 seq = read_seqbegin(&net->ipv4.ping_group_range.lock);
c319b4d7
VK		 145
146 *low = data[0];
147 *high = data[1];
396a30cc 148 } while (read_seqretry(&net->ipv4.ping_group_range.lock, seq));
c319b4d7
VK		 149}
150
151/* Update system visible IP port range */
7064d16e 152static void set_ping_group_range(struct ctl_table *table, kgid_t low, kgid_t high)
c319b4d7 153{
7064d16e 154 kgid_t *data = table->data;
0bbf87d8 155 struct net *net =
ba6b918a 156 container_of(table->data, struct net, ipv4.ping_group_range.range);
396a30cc 157 write_seqlock(&net->ipv4.ping_group_range.lock);
7064d16e
EB		 158 data[0] = low;
159 data[1] = high;
396a30cc 160 write_sequnlock(&net->ipv4.ping_group_range.lock);
c319b4d7
VK		 161}
162
163/* Validate changes from /proc interface. */
fe2c6338 164static int ipv4_ping_group_range(struct ctl_table *table, int write,
32927393 165 void *buffer, size_t *lenp, loff_t *ppos)
c319b4d7 166{
7064d16e 167 struct user_namespace *user_ns = current_user_ns();
c319b4d7 168 int ret;
e209fee4 169 unsigned long urange[2];
7064d16e 170 kgid_t low, high;
fe2c6338 171 struct ctl_table tmp = {
7064d16e
EB		 172 .data = &urange,
173 .maxlen = sizeof(urange),
c319b4d7
VK		 174 .mode = table->mode,
175 .extra1 = &ip_ping_group_range_min,
176 .extra2 = &ip_ping_group_range_max,
177 };
178
7064d16e
EB		 179 inet_get_ping_group_range_table(table, &low, &high);
180 urange[0] = from_kgid_munged(user_ns, low);
181 urange[1] = from_kgid_munged(user_ns, high);
e209fee4 182 ret = proc_doulongvec_minmax(&tmp, write, buffer, lenp, ppos);
c319b4d7 183
7064d16e
EB		 184 if (write && ret == 0) {
185 low = make_kgid(user_ns, urange[0]);
186 high = make_kgid(user_ns, urange[1]);
70ba5b6d
TH		 187 if (!gid_valid(low) || !gid_valid(high))
188 return -EINVAL;
189 if (urange[1] < urange[0] || gid_lt(high, low)) {
7064d16e
EB		 190 low = make_kgid(&init_user_ns, 1);
191 high = make_kgid(&init_user_ns, 0);
192 }
193 set_ping_group_range(table, low, high);
194 }
c319b4d7
VK		 195
196 return ret;
197}
198
d18c5d19 199static int ipv4_fwd_update_priority(struct ctl_table *table, int write,
32927393 200 void *buffer, size_t *lenp, loff_t *ppos)
d18c5d19
PM		 201{
202 struct net *net;
203 int ret;
204
205 net = container_of(table->data, struct net,
206 ipv4.sysctl_ip_fwd_update_priority);
1c69dedc 207 ret = proc_dou8vec_minmax(table, write, buffer, lenp, ppos);
d18c5d19
PM		 208 if (write && ret == 0)
209 call_netevent_notifiers(NETEVENT_IPV4_FWD_UPDATE_PRIORITY_UPDATE,
210 net);
211
212 return ret;
213}
214
fe2c6338 215static int proc_tcp_congestion_control(struct ctl_table *ctl, int write,
32927393 216 void *buffer, size_t *lenp, loff_t *ppos)
317a76f9 217{
6670e152
SH		 218 struct net *net = container_of(ctl->data, struct net,
219 ipv4.tcp_congestion_control);
317a76f9 220 char val[TCP_CA_NAME_MAX];
fe2c6338 221 struct ctl_table tbl = {
317a76f9
SH		 222 .data = val,
223 .maxlen = TCP_CA_NAME_MAX,
224 };
225 int ret;
226
6670e152 227 tcp_get_default_congestion_control(net, val);
317a76f9 228
8d65af78 229 ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
317a76f9 230 if (write && ret == 0)
6670e152 231 ret = tcp_set_default_congestion_control(net, val);
317a76f9
SH		 232 return ret;
233}
234
fe2c6338 235static int proc_tcp_available_congestion_control(struct ctl_table *ctl,
32927393
CH		 236 int write, void *buffer,
237 size_t *lenp, loff_t *ppos)
3ff825b2 238{
fe2c6338 239 struct ctl_table tbl = { .maxlen = TCP_CA_BUF_MAX, };
3ff825b2
SH		 240 int ret;
241
242 tbl.data = kmalloc(tbl.maxlen, GFP_USER);
243 if (!tbl.data)
244 return -ENOMEM;
245 tcp_get_available_congestion_control(tbl.data, TCP_CA_BUF_MAX);
8d65af78 246 ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
3ff825b2
SH		 247 kfree(tbl.data);
248 return ret;
249}
250
fe2c6338 251static int proc_allowed_congestion_control(struct ctl_table *ctl,
32927393
CH		 252 int write, void *buffer,
253 size_t *lenp, loff_t *ppos)
ce7bc3bf 254{
fe2c6338 255 struct ctl_table tbl = { .maxlen = TCP_CA_BUF_MAX };
ce7bc3bf
SH		 256 int ret;
257
258 tbl.data = kmalloc(tbl.maxlen, GFP_USER);
259 if (!tbl.data)
260 return -ENOMEM;
261
262 tcp_get_allowed_congestion_control(tbl.data, tbl.maxlen);
8d65af78 263 ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
ce7bc3bf
SH		 264 if (write && ret == 0)
265 ret = tcp_set_allowed_congestion_control(tbl.data);
266 kfree(tbl.data);
267 return ret;
268}
269
aa1236cd
JB		 270static int sscanf_key(char *buf, __le32 *key)
271{
272 u32 user_key[4];
273 int i, ret = 0;
274
275 if (sscanf(buf, "%x-%x-%x-%x", user_key, user_key + 1,
276 user_key + 2, user_key + 3) != 4) {
277 ret = -EINVAL;
278 } else {
279 for (i = 0; i < ARRAY_SIZE(user_key); i++)
280 key[i] = cpu_to_le32(user_key[i]);
281 }
282 pr_debug("proc TFO key set 0x%x-%x-%x-%x <- 0x%s: %u\n",
283 user_key[0], user_key[1], user_key[2], user_key[3], buf, ret);
284
285 return ret;
286}
287
43713848 288static int proc_tcp_fastopen_key(struct ctl_table *table, int write,
32927393 289 void *buffer, size_t *lenp, loff_t *ppos)
10467163 290{
43713848
HY		 291 struct net *net = container_of(table->data, struct net,
292 ipv4.sysctl_tcp_fastopen);
aa1236cd
JB		 293 /* maxlen to print the list of keys in hex (*2), with dashes
294 * separating doublewords and a comma in between keys.
295 */
296 struct ctl_table tbl = { .maxlen = ((TCP_FASTOPEN_KEY_LENGTH *
297 2 * TCP_FASTOPEN_KEY_MAX) +
298 (TCP_FASTOPEN_KEY_MAX * 5)) };
f19008e6
JB		 299 u32 user_key[TCP_FASTOPEN_KEY_BUF_LENGTH / sizeof(u32)];
300 __le32 key[TCP_FASTOPEN_KEY_BUF_LENGTH / sizeof(__le32)];
aa1236cd 301 char *backup_data;
f19008e6 302 int ret, i = 0, off = 0, n_keys;
10467163
JC		 303
304 tbl.data = kmalloc(tbl.maxlen, GFP_KERNEL);
305 if (!tbl.data)
306 return -ENOMEM;
307
f19008e6 308 n_keys = tcp_fastopen_get_cipher(net, NULL, (u64 *)key);
aa1236cd
JB		 309 if (!n_keys) {
310 memset(&key[0], 0, TCP_FASTOPEN_KEY_LENGTH);
311 n_keys = 1;
312 }
313
314 for (i = 0; i < n_keys * 4; i++)
c860e997
YC		 315 user_key[i] = le32_to_cpu(key[i]);
316
aa1236cd
JB		 317 for (i = 0; i < n_keys; i++) {
318 off += snprintf(tbl.data + off, tbl.maxlen - off,
319 "%08x-%08x-%08x-%08x",
320 user_key[i * 4],
321 user_key[i * 4 + 1],
322 user_key[i * 4 + 2],
323 user_key[i * 4 + 3]);
9bb59a21
HL		 324
325 if (WARN_ON_ONCE(off >= tbl.maxlen - 1))
326 break;
327
aa1236cd
JB		 328 if (i + 1 < n_keys)
329 off += snprintf(tbl.data + off, tbl.maxlen - off, ",");
330 }
331
10467163
JC		 332 ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
333
334 if (write && ret == 0) {
aa1236cd
JB		 335 backup_data = strchr(tbl.data, ',');
336 if (backup_data) {
337 *backup_data = '\0';
338 backup_data++;
339 }
340 if (sscanf_key(tbl.data, key)) {
10467163
JC		 341 ret = -EINVAL;
342 goto bad_key;
343 }
aa1236cd
JB		 344 if (backup_data) {
345 if (sscanf_key(backup_data, key + 4)) {
346 ret = -EINVAL;
347 goto bad_key;
348 }
349 }
350 tcp_fastopen_reset_cipher(net, NULL, key,
438ac880 351 backup_data ? key + 4 : NULL);
10467163
JC		 352 }
353
354bad_key:
10467163
JC		 355 kfree(tbl.data);
356 return ret;
357}
358
cf1ef3f0 359static int proc_tfo_blackhole_detect_timeout(struct ctl_table *table,
32927393 360 int write, void *buffer,
cf1ef3f0
WW		 361 size_t *lenp, loff_t *ppos)
362{
3733be14
HY		 363 struct net *net = container_of(table->data, struct net,
364 ipv4.sysctl_tcp_fastopen_blackhole_timeout);
cf1ef3f0
WW		 365 int ret;
366
367 ret = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
368 if (write && ret == 0)
3733be14 369 atomic_set(&net->ipv4.tfo_active_disable_times, 0);
734942cc
DW		 370
371 return ret;
372}
373
374static int proc_tcp_available_ulp(struct ctl_table *ctl,
32927393 375 int write, void *buffer, size_t *lenp,
734942cc
DW		 376 loff_t *ppos)
377{
378 struct ctl_table tbl = { .maxlen = TCP_ULP_BUF_MAX, };
379 int ret;
380
381 tbl.data = kmalloc(tbl.maxlen, GFP_USER);
382 if (!tbl.data)
383 return -ENOMEM;
384 tcp_get_available_ulp(tbl.data, TCP_ULP_BUF_MAX);
385 ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
386 kfree(tbl.data);
387
cf1ef3f0
WW		 388 return ret;
389}
390
d1e5e640
KI		 391static int proc_tcp_ehash_entries(struct ctl_table *table, int write,
392 void *buffer, size_t *lenp, loff_t *ppos)
393{
394 struct net *net = container_of(table->data, struct net,
395 ipv4.sysctl_tcp_child_ehash_entries);
396 struct inet_hashinfo *hinfo = net->ipv4.tcp_death_row.hashinfo;
397 int tcp_ehash_entries;
398 struct ctl_table tbl;
399
400 tcp_ehash_entries = hinfo->ehash_mask + 1;
401
402 /* A negative number indicates that the child netns
403 * shares the global ehash.
404 */
405 if (!net_eq(net, &init_net) && !hinfo->pernet)
406 tcp_ehash_entries *= -1;
407
9804985b 408 memset(&tbl, 0, sizeof(tbl));
d1e5e640
KI		 409 tbl.data = &tcp_ehash_entries;
410 tbl.maxlen = sizeof(int);
411
412 return proc_dointvec(&tbl, write, buffer, lenp, ppos);
413}
414
9804985b
KI		 415static int proc_udp_hash_entries(struct ctl_table *table, int write,
416 void *buffer, size_t *lenp, loff_t *ppos)
417{
418 struct net *net = container_of(table->data, struct net,
419 ipv4.sysctl_udp_child_hash_entries);
420 int udp_hash_entries;
421 struct ctl_table tbl;
422
423 udp_hash_entries = net->ipv4.udp_table->mask + 1;
424
425 /* A negative number indicates that the child netns
426 * shares the global udp_table.
427 */
428 if (!net_eq(net, &init_net) && net->ipv4.udp_table == &udp_table)
429 udp_hash_entries *= -1;
430
431 memset(&tbl, 0, sizeof(tbl));
432 tbl.data = &udp_hash_entries;
433 tbl.maxlen = sizeof(int);
434
435 return proc_dointvec(&tbl, write, buffer, lenp, ppos);
436}
437
3ae6ec08
IS		 438#ifdef CONFIG_IP_ROUTE_MULTIPATH
439static int proc_fib_multipath_hash_policy(struct ctl_table *table, int write,
32927393 440 void *buffer, size_t *lenp,
3ae6ec08
IS		 441 loff_t *ppos)
442{
443 struct net *net = container_of(table->data, struct net,
444 ipv4.sysctl_fib_multipath_hash_policy);
445 int ret;
446
be205fe6 447 ret = proc_dou8vec_minmax(table, write, buffer, lenp, ppos);
3ae6ec08 448 if (write && ret == 0)
3192dac6 449 call_netevent_notifiers(NETEVENT_IPV4_MPATH_HASH_UPDATE, net);
3ae6ec08
IS		 450
451 return ret;
452}
eb0e4d59
IS		 453
454static int proc_fib_multipath_hash_fields(struct ctl_table *table, int write,
455 void *buffer, size_t *lenp,
456 loff_t *ppos)
457{
458 struct net *net;
459 int ret;
460
461 net = container_of(table->data, struct net,
462 ipv4.sysctl_fib_multipath_hash_fields);
463 ret = proc_douintvec_minmax(table, write, buffer, lenp, ppos);
464 if (write && ret == 0)
465 call_netevent_notifiers(NETEVENT_IPV4_MPATH_HASH_UPDATE, net);
466
467 return ret;
468}
3ae6ec08
IS		 469#endif
470
3e37c3f9 471static struct ctl_table ipv4_table[] = {
1da177e4 472 {
1da177e4
LT		 473 .procname = "tcp_max_orphans",
474 .data = &sysctl_tcp_max_orphans,
475 .maxlen = sizeof(int),
476 .mode = 0644,
6d9f239a 477 .proc_handler = proc_dointvec
1da177e4 478 },
1da177e4 479 {
1da177e4
LT		 480 .procname = "inet_peer_threshold",
481 .data = &inet_peer_threshold,
482 .maxlen = sizeof(int),
483 .mode = 0644,
6d9f239a 484 .proc_handler = proc_dointvec
1da177e4
LT		 485 },
486 {
1da177e4
LT		 487 .procname = "inet_peer_minttl",
488 .data = &inet_peer_minttl,
489 .maxlen = sizeof(int),
490 .mode = 0644,
6d9f239a 491 .proc_handler = proc_dointvec_jiffies,
1da177e4
LT		 492 },
493 {
1da177e4
LT		 494 .procname = "inet_peer_maxttl",
495 .data = &inet_peer_maxttl,
496 .maxlen = sizeof(int),
497 .mode = 0644,
6d9f239a 498 .proc_handler = proc_dointvec_jiffies,
1da177e4 499 },
a4fe34bf
EB		 500 {
501 .procname = "tcp_mem",
502 .maxlen = sizeof(sysctl_tcp_mem),
503 .data = &sysctl_tcp_mem,
504 .mode = 0644,
505 .proc_handler = proc_doulongvec_minmax,
506 },
1da177e4 507 {
1da177e4
LT		 508 .procname = "tcp_low_latency",
509 .data = &sysctl_tcp_low_latency,
510 .maxlen = sizeof(int),
511 .mode = 0644,
6d9f239a 512 .proc_handler = proc_dointvec
1da177e4 513 },
446fda4f
PM		 514#ifdef CONFIG_NETLABEL
515 {
446fda4f
PM		 516 .procname = "cipso_cache_enable",
517 .data = &cipso_v4_cache_enabled,
518 .maxlen = sizeof(int),
519 .mode = 0644,
6d9f239a 520 .proc_handler = proc_dointvec,
446fda4f
PM		 521 },
522 {
446fda4f
PM		 523 .procname = "cipso_cache_bucket_size",
524 .data = &cipso_v4_cache_bucketsize,
525 .maxlen = sizeof(int),
526 .mode = 0644,
6d9f239a 527 .proc_handler = proc_dointvec,
446fda4f
PM		 528 },
529 {
446fda4f
PM		 530 .procname = "cipso_rbm_optfmt",
531 .data = &cipso_v4_rbm_optfmt,
532 .maxlen = sizeof(int),
533 .mode = 0644,
6d9f239a 534 .proc_handler = proc_dointvec,
446fda4f
PM		 535 },
536 {
446fda4f
PM		 537 .procname = "cipso_rbm_strictvalid",
538 .data = &cipso_v4_rbm_strictvalid,
539 .maxlen = sizeof(int),
540 .mode = 0644,
6d9f239a 541 .proc_handler = proc_dointvec,
446fda4f
PM		 542 },
543#endif /* CONFIG_NETLABEL */
734942cc
DW		 544 {
545 .procname = "tcp_available_ulp",
546 .maxlen = TCP_ULP_BUF_MAX,
547 .mode = 0444,
548 .proc_handler = proc_tcp_available_ulp,
549 },
4cdf507d
ED		 550 {
551 .procname = "icmp_msgs_per_sec",
552 .data = &sysctl_icmp_msgs_per_sec,
553 .maxlen = sizeof(int),
554 .mode = 0644,
555 .proc_handler = proc_dointvec_minmax,
eec4844f 556 .extra1 = SYSCTL_ZERO,
4cdf507d
ED		 557 },
558 {
559 .procname = "icmp_msgs_burst",
560 .data = &sysctl_icmp_msgs_burst,
561 .maxlen = sizeof(int),
562 .mode = 0644,
563 .proc_handler = proc_dointvec_minmax,
eec4844f 564 .extra1 = SYSCTL_ZERO,
4cdf507d 565 },
95766fff 566 {
95766fff
HA		 567 .procname = "udp_mem",
568 .data = &sysctl_udp_mem,
569 .maxlen = sizeof(sysctl_udp_mem),
570 .mode = 0644,
8d987e5c 571 .proc_handler = proc_doulongvec_minmax,
95766fff 572 },
9ab948a9
DA		 573 {
574 .procname = "fib_sync_mem",
575 .data = &sysctl_fib_sync_mem,
576 .maxlen = sizeof(sysctl_fib_sync_mem),
577 .mode = 0644,
578 .proc_handler = proc_douintvec_minmax,
579 .extra1 = &sysctl_fib_sync_mem_min,
580 .extra2 = &sysctl_fib_sync_mem_max,
581 },
f8572d8f 582 { }
1da177e4 583};
3e37c3f9 584
68528f09 585static struct ctl_table ipv4_net_table[] = {
fbb82952
ED		 586 {
587 .procname = "tcp_max_tw_buckets",
e9bd0cca 588 .data = &init_net.ipv4.tcp_death_row.sysctl_max_tw_buckets,
fbb82952
ED		 589 .maxlen = sizeof(int),
590 .mode = 0644,
591 .proc_handler = proc_dointvec
592 },
68528f09 593 {
68528f09
PE		 594 .procname = "icmp_echo_ignore_all",
595 .data = &init_net.ipv4.sysctl_icmp_echo_ignore_all,
4b6bbf17 596 .maxlen = sizeof(u8),
68528f09 597 .mode = 0644,
4b6bbf17 598 .proc_handler = proc_dou8vec_minmax,
bb7bb35a
KI		 599 .extra1 = SYSCTL_ZERO,
600 .extra2 = SYSCTL_ONE
68528f09 601 },
f1b8fa9f
AR		 602 {
603 .procname = "icmp_echo_enable_probe",
604 .data = &init_net.ipv4.sysctl_icmp_echo_enable_probe,
b8128656 605 .maxlen = sizeof(u8),
f1b8fa9f 606 .mode = 0644,
b8128656 607 .proc_handler = proc_dou8vec_minmax,
f1b8fa9f
AR		 608 .extra1 = SYSCTL_ZERO,
609 .extra2 = SYSCTL_ONE
610 },
68528f09 611 {
68528f09
PE		 612 .procname = "icmp_echo_ignore_broadcasts",
613 .data = &init_net.ipv4.sysctl_icmp_echo_ignore_broadcasts,
4b6bbf17 614 .maxlen = sizeof(u8),
68528f09 615 .mode = 0644,
4b6bbf17 616 .proc_handler = proc_dou8vec_minmax,
66484bb9
KI		 617 .extra1 = SYSCTL_ZERO,
618 .extra2 = SYSCTL_ONE
68528f09
PE		 619 },
620 {
68528f09
PE		 621 .procname = "icmp_ignore_bogus_error_responses",
622 .data = &init_net.ipv4.sysctl_icmp_ignore_bogus_error_responses,
4b6bbf17 623 .maxlen = sizeof(u8),
68528f09 624 .mode = 0644,
4b6bbf17 625 .proc_handler = proc_dou8vec_minmax,
b04f9b7e
KI		 626 .extra1 = SYSCTL_ZERO,
627 .extra2 = SYSCTL_ONE
68528f09
PE		 628 },
629 {
68528f09
PE		 630 .procname = "icmp_errors_use_inbound_ifaddr",
631 .data = &init_net.ipv4.sysctl_icmp_errors_use_inbound_ifaddr,
4b6bbf17 632 .maxlen = sizeof(u8),
68528f09 633 .mode = 0644,
4b6bbf17 634 .proc_handler = proc_dou8vec_minmax,
d2efabce
KI		 635 .extra1 = SYSCTL_ZERO,
636 .extra2 = SYSCTL_ONE
68528f09
PE		 637 },
638 {
68528f09
PE		 639 .procname = "icmp_ratelimit",
640 .data = &init_net.ipv4.sysctl_icmp_ratelimit,
641 .maxlen = sizeof(int),
642 .mode = 0644,
6d9f239a 643 .proc_handler = proc_dointvec_ms_jiffies,
68528f09
PE		 644 },
645 {
68528f09
PE		 646 .procname = "icmp_ratemask",
647 .data = &init_net.ipv4.sysctl_icmp_ratemask,
648 .maxlen = sizeof(int),
649 .mode = 0644,
6d9f239a 650 .proc_handler = proc_dointvec
68528f09 651 },
c319b4d7
VK		 652 {
653 .procname = "ping_group_range",
ba6b918a 654 .data = &init_net.ipv4.ping_group_range.range,
7064d16e 655 .maxlen = sizeof(gid_t)*2,
c319b4d7
VK		 656 .mode = 0644,
657 .proc_handler = ipv4_ping_group_range,
658 },
6897445f
MM		 659#ifdef CONFIG_NET_L3_MASTER_DEV
660 {
661 .procname = "raw_l3mdev_accept",
662 .data = &init_net.ipv4.sysctl_raw_l3mdev_accept,
4b6bbf17 663 .maxlen = sizeof(u8),
6897445f 664 .mode = 0644,
4b6bbf17 665 .proc_handler = proc_dou8vec_minmax,
eec4844f
MC		 666 .extra1 = SYSCTL_ZERO,
667 .extra2 = SYSCTL_ONE,
6897445f
MM		 668 },
669#endif
5d134f1c
HFS		 670 {
671 .procname = "tcp_ecn",
672 .data = &init_net.ipv4.sysctl_tcp_ecn,
4b6bbf17 673 .maxlen = sizeof(u8),
5d134f1c 674 .mode = 0644,
4b6bbf17 675 .proc_handler = proc_dou8vec_minmax,
4785a667
KI		 676 .extra1 = SYSCTL_ZERO,
677 .extra2 = SYSCTL_TWO,
5d134f1c 678 },
49213555
DB		 679 {
680 .procname = "tcp_ecn_fallback",
681 .data = &init_net.ipv4.sysctl_tcp_ecn_fallback,
4b6bbf17 682 .maxlen = sizeof(u8),
49213555 683 .mode = 0644,
4b6bbf17 684 .proc_handler = proc_dou8vec_minmax,
12b8d9ca
KI		 685 .extra1 = SYSCTL_ZERO,
686 .extra2 = SYSCTL_ONE,
49213555 687 },
287b7f38
NB		 688 {
689 .procname = "ip_dynaddr",
690 .data = &init_net.ipv4.sysctl_ip_dynaddr,
4b6bbf17 691 .maxlen = sizeof(u8),
287b7f38 692 .mode = 0644,
4b6bbf17 693 .proc_handler = proc_dou8vec_minmax,
287b7f38 694 },
e21145a9
NB		 695 {
696 .procname = "ip_early_demux",
697 .data = &init_net.ipv4.sysctl_ip_early_demux,
4b6bbf17 698 .maxlen = sizeof(u8),
e21145a9 699 .mode = 0644,
4b6bbf17 700 .proc_handler = proc_dou8vec_minmax,
e21145a9 701 },
dddb64bc 702 {
703 .procname = "udp_early_demux",
704 .data = &init_net.ipv4.sysctl_udp_early_demux,
2932bcda 705 .maxlen = sizeof(u8),
dddb64bc 706 .mode = 0644,
11052589 707 .proc_handler = proc_dou8vec_minmax,
dddb64bc 708 },
709 {
710 .procname = "tcp_early_demux",
711 .data = &init_net.ipv4.sysctl_tcp_early_demux,
2932bcda 712 .maxlen = sizeof(u8),
dddb64bc 713 .mode = 0644,
11052589 714 .proc_handler = proc_dou8vec_minmax,
dddb64bc 715 },
4f80116d
RP		 716 {
717 .procname = "nexthop_compat_mode",
718 .data = &init_net.ipv4.sysctl_nexthop_compat_mode,
4b6bbf17 719 .maxlen = sizeof(u8),
4f80116d 720 .mode = 0644,
4b6bbf17 721 .proc_handler = proc_dou8vec_minmax,
4f80116d
RP		 722 .extra1 = SYSCTL_ZERO,
723 .extra2 = SYSCTL_ONE,
724 },
fa50d974
NB		 725 {
726 .procname = "ip_default_ttl",
727 .data = &init_net.ipv4.sysctl_ip_default_ttl,
4b6bbf17 728 .maxlen = sizeof(u8),
fa50d974 729 .mode = 0644,
4b6bbf17 730 .proc_handler = proc_dou8vec_minmax,
fa50d974
NB		 731 .extra1 = &ip_ttl_min,
732 .extra2 = &ip_ttl_max,
733 },
0bbf87d8
EB		 734 {
735 .procname = "ip_local_port_range",
c9d8f1a6
CW		 736 .maxlen = sizeof(init_net.ipv4.ip_local_ports.range),
737 .data = &init_net.ipv4.ip_local_ports.range,
0bbf87d8
EB		 738 .mode = 0644,
739 .proc_handler = ipv4_local_port_range,
740 },
122ff243
WC		 741 {
742 .procname = "ip_local_reserved_ports",
743 .data = &init_net.ipv4.sysctl_local_reserved_ports,
744 .maxlen = 65536,
745 .mode = 0644,
746 .proc_handler = proc_do_large_bitmap,
747 },
974eda11
HFS		 748 {
749 .procname = "ip_no_pmtu_disc",
750 .data = &init_net.ipv4.sysctl_ip_no_pmtu_disc,
4b6bbf17 751 .maxlen = sizeof(u8),
974eda11 752 .mode = 0644,
4b6bbf17 753 .proc_handler = proc_dou8vec_minmax,
974eda11 754 },
f87c10a8
HFS		 755 {
756 .procname = "ip_forward_use_pmtu",
757 .data = &init_net.ipv4.sysctl_ip_fwd_use_pmtu,
4b6bbf17 758 .maxlen = sizeof(u8),
f87c10a8 759 .mode = 0644,
4b6bbf17 760 .proc_handler = proc_dou8vec_minmax,
f87c10a8 761 },
432e05d3
PM		 762 {
763 .procname = "ip_forward_update_priority",
764 .data = &init_net.ipv4.sysctl_ip_fwd_update_priority,
1c69dedc 765 .maxlen = sizeof(u8),
432e05d3 766 .mode = 0644,
d18c5d19 767 .proc_handler = ipv4_fwd_update_priority,
eec4844f
MC		 768 .extra1 = SYSCTL_ZERO,
769 .extra2 = SYSCTL_ONE,
432e05d3 770 },
49a60158
VB		 771 {
772 .procname = "ip_nonlocal_bind",
773 .data = &init_net.ipv4.sysctl_ip_nonlocal_bind,
4b6bbf17 774 .maxlen = sizeof(u8),
49a60158 775 .mode = 0644,
4b6bbf17 776 .proc_handler = proc_dou8vec_minmax,
49a60158 777 },
4b01a967
KI		 778 {
779 .procname = "ip_autobind_reuse",
780 .data = &init_net.ipv4.sysctl_ip_autobind_reuse,
4b6bbf17 781 .maxlen = sizeof(u8),
4b01a967 782 .mode = 0644,
4b6bbf17 783 .proc_handler = proc_dou8vec_minmax,
4b01a967
KI		 784 .extra1 = SYSCTL_ZERO,
785 .extra2 = SYSCTL_ONE,
786 },
e110861f
LC		 787 {
788 .procname = "fwmark_reflect",
789 .data = &init_net.ipv4.sysctl_fwmark_reflect,
4b6bbf17 790 .maxlen = sizeof(u8),
e110861f 791 .mode = 0644,
4b6bbf17 792 .proc_handler = proc_dou8vec_minmax,
e110861f 793 },
84f39b08
LC		 794 {
795 .procname = "tcp_fwmark_accept",
796 .data = &init_net.ipv4.sysctl_tcp_fwmark_accept,
4ecc1baf 797 .maxlen = sizeof(u8),
84f39b08 798 .mode = 0644,
4ecc1baf 799 .proc_handler = proc_dou8vec_minmax,
84f39b08 800 },
6dd9a14e
DA		 801#ifdef CONFIG_NET_L3_MASTER_DEV
802 {
803 .procname = "tcp_l3mdev_accept",
804 .data = &init_net.ipv4.sysctl_tcp_l3mdev_accept,
4ecc1baf 805 .maxlen = sizeof(u8),
6dd9a14e 806 .mode = 0644,
4ecc1baf 807 .proc_handler = proc_dou8vec_minmax,
eec4844f
MC		 808 .extra1 = SYSCTL_ZERO,
809 .extra2 = SYSCTL_ONE,
6dd9a14e
DA		 810 },
811#endif
b0f9ca53
FD		 812 {
813 .procname = "tcp_mtu_probing",
814 .data = &init_net.ipv4.sysctl_tcp_mtu_probing,
4ecc1baf 815 .maxlen = sizeof(u8),
b0f9ca53 816 .mode = 0644,
4ecc1baf 817 .proc_handler = proc_dou8vec_minmax,
b0f9ca53
FD		 818 },
819 {
820 .procname = "tcp_base_mss",
821 .data = &init_net.ipv4.sysctl_tcp_base_mss,
822 .maxlen = sizeof(int),
823 .mode = 0644,
824 .proc_handler = proc_dointvec,
825 },
5f3e2bf0
ED		 826 {
827 .procname = "tcp_min_snd_mss",
828 .data = &init_net.ipv4.sysctl_tcp_min_snd_mss,
829 .maxlen = sizeof(int),
830 .mode = 0644,
831 .proc_handler = proc_dointvec_minmax,
832 .extra1 = &tcp_min_snd_mss_min,
833 .extra2 = &tcp_min_snd_mss_max,
834 },
c04b79b6
JH		 835 {
836 .procname = "tcp_mtu_probe_floor",
837 .data = &init_net.ipv4.sysctl_tcp_mtu_probe_floor,
838 .maxlen = sizeof(int),
839 .mode = 0644,
840 .proc_handler = proc_dointvec_minmax,
841 .extra1 = &tcp_min_snd_mss_min,
842 .extra2 = &tcp_min_snd_mss_max,
843 },
6b58e0a5
FD		 844 {
845 .procname = "tcp_probe_threshold",
846 .data = &init_net.ipv4.sysctl_tcp_probe_threshold,
847 .maxlen = sizeof(int),
848 .mode = 0644,
849 .proc_handler = proc_dointvec,
850 },
05cbc0db
FD		 851 {
852 .procname = "tcp_probe_interval",
853 .data = &init_net.ipv4.sysctl_tcp_probe_interval,
d4ce5808 854 .maxlen = sizeof(u32),
05cbc0db 855 .mode = 0644,
d4ce5808
MŻ		 856 .proc_handler = proc_douintvec_minmax,
857 .extra2 = &u32_max_div_HZ,
05cbc0db 858 },
df2cf4a7
PD		 859 {
860 .procname = "igmp_link_local_mcast_reports",
87a8a2ae 861 .data = &init_net.ipv4.sysctl_igmp_llm_reports,
7d4b37eb 862 .maxlen = sizeof(u8),
df2cf4a7 863 .mode = 0644,
7d4b37eb 864 .proc_handler = proc_dou8vec_minmax,
df2cf4a7 865 },
815c5270
NB		 866 {
867 .procname = "igmp_max_memberships",
868 .data = &init_net.ipv4.sysctl_igmp_max_memberships,
869 .maxlen = sizeof(int),
870 .mode = 0644,
871 .proc_handler = proc_dointvec
872 },
166b6b2d
NB		 873 {
874 .procname = "igmp_max_msf",
875 .data = &init_net.ipv4.sysctl_igmp_max_msf,
876 .maxlen = sizeof(int),
877 .mode = 0644,
878 .proc_handler = proc_dointvec
879 },
165094af
NB		 880#ifdef CONFIG_IP_MULTICAST
881 {
882 .procname = "igmp_qrv",
883 .data = &init_net.ipv4.sysctl_igmp_qrv,
884 .maxlen = sizeof(int),
885 .mode = 0644,
886 .proc_handler = proc_dointvec_minmax,
eec4844f 887 .extra1 = SYSCTL_ONE
165094af
NB		 888 },
889#endif
6670e152
SH		 890 {
891 .procname = "tcp_congestion_control",
892 .data = &init_net.ipv4.tcp_congestion_control,
893 .mode = 0644,
894 .maxlen = TCP_CA_NAME_MAX,
895 .proc_handler = proc_tcp_congestion_control,
896 },
9cb8e048
CB		 897 {
898 .procname = "tcp_available_congestion_control",
899 .maxlen = TCP_CA_BUF_MAX,
900 .mode = 0444,
901 .proc_handler = proc_tcp_available_congestion_control,
902 },
903 {
904 .procname = "tcp_allowed_congestion_control",
905 .maxlen = TCP_CA_BUF_MAX,
906 .mode = 0644,
907 .proc_handler = proc_allowed_congestion_control,
908 },
13b287e8
NB		 909 {
910 .procname = "tcp_keepalive_time",
911 .data = &init_net.ipv4.sysctl_tcp_keepalive_time,
912 .maxlen = sizeof(int),
913 .mode = 0644,
914 .proc_handler = proc_dointvec_jiffies,
915 },
9bd6861b
NB		 916 {
917 .procname = "tcp_keepalive_probes",
918 .data = &init_net.ipv4.sysctl_tcp_keepalive_probes,
4ecc1baf 919 .maxlen = sizeof(u8),
9bd6861b 920 .mode = 0644,
4ecc1baf 921 .proc_handler = proc_dou8vec_minmax,
9bd6861b 922 },
b840d15d
NB		 923 {
924 .procname = "tcp_keepalive_intvl",
925 .data = &init_net.ipv4.sysctl_tcp_keepalive_intvl,
926 .maxlen = sizeof(int),
927 .mode = 0644,
928 .proc_handler = proc_dointvec_jiffies,
929 },
6fa25166
NB		 930 {
931 .procname = "tcp_syn_retries",
932 .data = &init_net.ipv4.sysctl_tcp_syn_retries,
4ecc1baf 933 .maxlen = sizeof(u8),
6fa25166 934 .mode = 0644,
4ecc1baf 935 .proc_handler = proc_dou8vec_minmax,
6fa25166
NB		 936 .extra1 = &tcp_syn_retries_min,
937 .extra2 = &tcp_syn_retries_max
938 },
7c083ecb
NB		 939 {
940 .procname = "tcp_synack_retries",
941 .data = &init_net.ipv4.sysctl_tcp_synack_retries,
4ecc1baf 942 .maxlen = sizeof(u8),
7c083ecb 943 .mode = 0644,
4ecc1baf 944 .proc_handler = proc_dou8vec_minmax,
7c083ecb 945 },
12ed8244
NB		 946#ifdef CONFIG_SYN_COOKIES
947 {
948 .procname = "tcp_syncookies",
949 .data = &init_net.ipv4.sysctl_tcp_syncookies,
4ecc1baf 950 .maxlen = sizeof(u8),
12ed8244 951 .mode = 0644,
4ecc1baf 952 .proc_handler = proc_dou8vec_minmax,
12ed8244
NB		 953 },
954#endif
f9ac779f
KI		 955 {
956 .procname = "tcp_migrate_req",
957 .data = &init_net.ipv4.sysctl_tcp_migrate_req,
958 .maxlen = sizeof(u8),
959 .mode = 0644,
960 .proc_handler = proc_dou8vec_minmax,
961 .extra1 = SYSCTL_ZERO,
962 .extra2 = SYSCTL_ONE
963 },
1043e25f
NB		 964 {
965 .procname = "tcp_reordering",
966 .data = &init_net.ipv4.sysctl_tcp_reordering,
967 .maxlen = sizeof(int),
968 .mode = 0644,
969 .proc_handler = proc_dointvec
970 },
ae5c3f40
NB		 971 {
972 .procname = "tcp_retries1",
973 .data = &init_net.ipv4.sysctl_tcp_retries1,
4ecc1baf 974 .maxlen = sizeof(u8),
ae5c3f40 975 .mode = 0644,
4ecc1baf 976 .proc_handler = proc_dou8vec_minmax,
ae5c3f40
NB		 977 .extra2 = &tcp_retr1_max
978 },
c6214a97
NB		 979 {
980 .procname = "tcp_retries2",
981 .data = &init_net.ipv4.sysctl_tcp_retries2,
4ecc1baf 982 .maxlen = sizeof(u8),
c6214a97 983 .mode = 0644,
4ecc1baf 984 .proc_handler = proc_dou8vec_minmax,
c6214a97 985 },
c402d9be
NB		 986 {
987 .procname = "tcp_orphan_retries",
988 .data = &init_net.ipv4.sysctl_tcp_orphan_retries,
4ecc1baf 989 .maxlen = sizeof(u8),
c402d9be 990 .mode = 0644,
4ecc1baf 991 .proc_handler = proc_dou8vec_minmax,
c402d9be 992 },
1e579caa
NB		 993 {
994 .procname = "tcp_fin_timeout",
995 .data = &init_net.ipv4.sysctl_tcp_fin_timeout,
996 .maxlen = sizeof(int),
997 .mode = 0644,
998 .proc_handler = proc_dointvec_jiffies,
999 },
4979f2d9
NB		 1000 {
1001 .procname = "tcp_notsent_lowat",
1002 .data = &init_net.ipv4.sysctl_tcp_notsent_lowat,
1003 .maxlen = sizeof(unsigned int),
1004 .mode = 0644,
b007f090 1005 .proc_handler = proc_douintvec,
4979f2d9 1006 },
56ab6b93
HY		 1007 {
1008 .procname = "tcp_tw_reuse",
1009 .data = &init_net.ipv4.sysctl_tcp_tw_reuse,
4ecc1baf 1010 .maxlen = sizeof(u8),
56ab6b93 1011 .mode = 0644,
4ecc1baf 1012 .proc_handler = proc_dou8vec_minmax,
eec4844f 1013 .extra1 = SYSCTL_ZERO,
bd8a5367 1014 .extra2 = SYSCTL_TWO,
56ab6b93 1015 },
fee83d09
HY		 1016 {
1017 .procname = "tcp_max_syn_backlog",
1018 .data = &init_net.ipv4.sysctl_max_syn_backlog,
1019 .maxlen = sizeof(int),
1020 .mode = 0644,
1021 .proc_handler = proc_dointvec
1022 },
e1cfcbe8
HY		 1023 {
1024 .procname = "tcp_fastopen",
1025 .data = &init_net.ipv4.sysctl_tcp_fastopen,
1026 .maxlen = sizeof(int),
1027 .mode = 0644,
1028 .proc_handler = proc_dointvec,
1029 },
43713848
HY		 1030 {
1031 .procname = "tcp_fastopen_key",
1032 .mode = 0600,
1033 .data = &init_net.ipv4.sysctl_tcp_fastopen,
aa1236cd
JB		 1034 /* maxlen to print the list of keys in hex (*2), with dashes
1035 * separating doublewords and a comma in between keys.
1036 */
1037 .maxlen = ((TCP_FASTOPEN_KEY_LENGTH *
1038 2 * TCP_FASTOPEN_KEY_MAX) +
1039 (TCP_FASTOPEN_KEY_MAX * 5)),
43713848
HY		 1040 .proc_handler = proc_tcp_fastopen_key,
1041 },
3733be14
HY		 1042 {
1043 .procname = "tcp_fastopen_blackhole_timeout_sec",
1044 .data = &init_net.ipv4.sysctl_tcp_fastopen_blackhole_timeout,
1045 .maxlen = sizeof(int),
1046 .mode = 0644,
1047 .proc_handler = proc_tfo_blackhole_detect_timeout,
eec4844f 1048 .extra1 = SYSCTL_ZERO,
3733be14 1049 },
a6db4494
DA		 1050#ifdef CONFIG_IP_ROUTE_MULTIPATH
1051 {
1052 .procname = "fib_multipath_use_neigh",
1053 .data = &init_net.ipv4.sysctl_fib_multipath_use_neigh,
be205fe6 1054 .maxlen = sizeof(u8),
a6db4494 1055 .mode = 0644,
be205fe6 1056 .proc_handler = proc_dou8vec_minmax,
eec4844f
MC		 1057 .extra1 = SYSCTL_ZERO,
1058 .extra2 = SYSCTL_ONE,
bf4e0a3d
NA		 1059 },
1060 {
1061 .procname = "fib_multipath_hash_policy",
1062 .data = &init_net.ipv4.sysctl_fib_multipath_hash_policy,
be205fe6 1063 .maxlen = sizeof(u8),
bf4e0a3d 1064 .mode = 0644,
3ae6ec08 1065 .proc_handler = proc_fib_multipath_hash_policy,
eec4844f 1066 .extra1 = SYSCTL_ZERO,
4c7f24f8 1067 .extra2 = SYSCTL_THREE,
a6db4494 1068 },
ce5c9c20
IS		 1069 {
1070 .procname = "fib_multipath_hash_fields",
1071 .data = &init_net.ipv4.sysctl_fib_multipath_hash_fields,
1072 .maxlen = sizeof(u32),
1073 .mode = 0644,
eb0e4d59 1074 .proc_handler = proc_fib_multipath_hash_fields,
ce5c9c20
IS		 1075 .extra1 = SYSCTL_ONE,
1076 .extra2 = &fib_multipath_hash_fields_all_mask,
1077 },
a6db4494 1078#endif
4548b683
KJ		 1079 {
1080 .procname = "ip_unprivileged_port_start",
1081 .maxlen = sizeof(int),
1082 .data = &init_net.ipv4.sysctl_ip_prot_sock,
1083 .mode = 0644,
1084 .proc_handler = ipv4_privileged_ports,
1085 },
63a6fff3
RS		 1086#ifdef CONFIG_NET_L3_MASTER_DEV
1087 {
1088 .procname = "udp_l3mdev_accept",
1089 .data = &init_net.ipv4.sysctl_udp_l3mdev_accept,
cd04bd02 1090 .maxlen = sizeof(u8),
63a6fff3 1091 .mode = 0644,
cd04bd02 1092 .proc_handler = proc_dou8vec_minmax,
eec4844f
MC		 1093 .extra1 = SYSCTL_ZERO,
1094 .extra2 = SYSCTL_ONE,
63a6fff3
RS		 1095 },
1096#endif
f9301034
ED		 1097 {
1098 .procname = "tcp_sack",
1099 .data = &init_net.ipv4.sysctl_tcp_sack,
4ecc1baf 1100 .maxlen = sizeof(u8),
f9301034 1101 .mode = 0644,
4ecc1baf 1102 .proc_handler = proc_dou8vec_minmax,
f9301034 1103 },
9bb37ef0
ED		 1104 {
1105 .procname = "tcp_window_scaling",
1106 .data = &init_net.ipv4.sysctl_tcp_window_scaling,
4ecc1baf 1107 .maxlen = sizeof(u8),
9bb37ef0 1108 .mode = 0644,
4ecc1baf 1109 .proc_handler = proc_dou8vec_minmax,
9bb37ef0 1110 },
5d2ed052
ED		 1111 {
1112 .procname = "tcp_timestamps",
1113 .data = &init_net.ipv4.sysctl_tcp_timestamps,
4ecc1baf 1114 .maxlen = sizeof(u8),
5d2ed052 1115 .mode = 0644,
4ecc1baf 1116 .proc_handler = proc_dou8vec_minmax,
5d2ed052 1117 },
2ae21cf5
ED		 1118 {
1119 .procname = "tcp_early_retrans",
1120 .data = &init_net.ipv4.sysctl_tcp_early_retrans,
4ecc1baf 1121 .maxlen = sizeof(u8),
2ae21cf5 1122 .mode = 0644,
4ecc1baf 1123 .proc_handler = proc_dou8vec_minmax,
eec4844f 1124 .extra1 = SYSCTL_ZERO,
bd8a5367 1125 .extra2 = SYSCTL_FOUR,
2ae21cf5 1126 },
e20223f1
ED		 1127 {
1128 .procname = "tcp_recovery",
1129 .data = &init_net.ipv4.sysctl_tcp_recovery,
4ecc1baf 1130 .maxlen = sizeof(u8),
e20223f1 1131 .mode = 0644,
4ecc1baf 1132 .proc_handler = proc_dou8vec_minmax,
e20223f1 1133 },
2c04ac8a
ED		 1134 {
1135 .procname = "tcp_thin_linear_timeouts",
1136 .data = &init_net.ipv4.sysctl_tcp_thin_linear_timeouts,
4ecc1baf 1137 .maxlen = sizeof(u8),
2c04ac8a 1138 .mode = 0644,
4ecc1baf 1139 .proc_handler = proc_dou8vec_minmax,
2c04ac8a 1140 },
b510f0d2
ED		 1141 {
1142 .procname = "tcp_slow_start_after_idle",
1143 .data = &init_net.ipv4.sysctl_tcp_slow_start_after_idle,
4ecc1baf 1144 .maxlen = sizeof(u8),
b510f0d2 1145 .mode = 0644,
4ecc1baf 1146 .proc_handler = proc_dou8vec_minmax,
b510f0d2 1147 },
e0a1e5b5
ED		 1148 {
1149 .procname = "tcp_retrans_collapse",
1150 .data = &init_net.ipv4.sysctl_tcp_retrans_collapse,
4ecc1baf 1151 .maxlen = sizeof(u8),
e0a1e5b5 1152 .mode = 0644,
4ecc1baf 1153 .proc_handler = proc_dou8vec_minmax,
e0a1e5b5 1154 },
3f4c7c6f
ED		 1155 {
1156 .procname = "tcp_stdurg",
1157 .data = &init_net.ipv4.sysctl_tcp_stdurg,
4ecc1baf 1158 .maxlen = sizeof(u8),
3f4c7c6f 1159 .mode = 0644,
4ecc1baf 1160 .proc_handler = proc_dou8vec_minmax,
3f4c7c6f 1161 },
625357aa
ED		 1162 {
1163 .procname = "tcp_rfc1337",
1164 .data = &init_net.ipv4.sysctl_tcp_rfc1337,
4ecc1baf 1165 .maxlen = sizeof(u8),
625357aa 1166 .mode = 0644,
4ecc1baf 1167 .proc_handler = proc_dou8vec_minmax,
625357aa 1168 },
65c9410c
ED		 1169 {
1170 .procname = "tcp_abort_on_overflow",
1171 .data = &init_net.ipv4.sysctl_tcp_abort_on_overflow,
4ecc1baf 1172 .maxlen = sizeof(u8),
65c9410c 1173 .mode = 0644,
4ecc1baf 1174 .proc_handler = proc_dou8vec_minmax,
65c9410c 1175 },
0bc65a28
ED		 1176 {
1177 .procname = "tcp_fack",
1178 .data = &init_net.ipv4.sysctl_tcp_fack,
4ecc1baf 1179 .maxlen = sizeof(u8),
0bc65a28 1180 .mode = 0644,
4ecc1baf 1181 .proc_handler = proc_dou8vec_minmax,
0bc65a28 1182 },
c6e21803
ED		 1183 {
1184 .procname = "tcp_max_reordering",
1185 .data = &init_net.ipv4.sysctl_tcp_max_reordering,
1186 .maxlen = sizeof(int),
1187 .mode = 0644,
1188 .proc_handler = proc_dointvec
1189 },
6496f6bd
ED		 1190 {
1191 .procname = "tcp_dsack",
1192 .data = &init_net.ipv4.sysctl_tcp_dsack,
4ecc1baf 1193 .maxlen = sizeof(u8),
6496f6bd 1194 .mode = 0644,
4ecc1baf 1195 .proc_handler = proc_dou8vec_minmax,
6496f6bd 1196 },
0c12654a
ED		 1197 {
1198 .procname = "tcp_app_win",
1199 .data = &init_net.ipv4.sysctl_tcp_app_win,
4ecc1baf 1200 .maxlen = sizeof(u8),
0c12654a 1201 .mode = 0644,
4ecc1baf 1202 .proc_handler = proc_dou8vec_minmax,
dc5110c2
Y		 1203 .extra1 = SYSCTL_ZERO,
1204 .extra2 = &tcp_app_win_max,
0c12654a 1205 },
94f0893e
ED		 1206 {
1207 .procname = "tcp_adv_win_scale",
1208 .data = &init_net.ipv4.sysctl_tcp_adv_win_scale,
1209 .maxlen = sizeof(int),
1210 .mode = 0644,
1211 .proc_handler = proc_dointvec_minmax,
1212 .extra1 = &tcp_adv_win_scale_min,
1213 .extra2 = &tcp_adv_win_scale_max,
1214 },
af9b69a7
ED		 1215 {
1216 .procname = "tcp_frto",
1217 .data = &init_net.ipv4.sysctl_tcp_frto,
4ecc1baf 1218 .maxlen = sizeof(u8),
af9b69a7 1219 .mode = 0644,
4ecc1baf 1220 .proc_handler = proc_dou8vec_minmax,
af9b69a7 1221 },
ec36e416
ED		 1222 {
1223 .procname = "tcp_no_metrics_save",
1224 .data = &init_net.ipv4.sysctl_tcp_nometrics_save,
4ecc1baf 1225 .maxlen = sizeof(u8),
ec36e416 1226 .mode = 0644,
4ecc1baf 1227 .proc_handler = proc_dou8vec_minmax,
ec36e416 1228 },
65e6d901
KYY		 1229 {
1230 .procname = "tcp_no_ssthresh_metrics_save",
1231 .data = &init_net.ipv4.sysctl_tcp_no_ssthresh_metrics_save,
4ecc1baf 1232 .maxlen = sizeof(u8),
65e6d901 1233 .mode = 0644,
4ecc1baf 1234 .proc_handler = proc_dou8vec_minmax,
65e6d901
KYY		 1235 .extra1 = SYSCTL_ZERO,
1236 .extra2 = SYSCTL_ONE,
1237 },
4540c0cf
ED		 1238 {
1239 .procname = "tcp_moderate_rcvbuf",
1240 .data = &init_net.ipv4.sysctl_tcp_moderate_rcvbuf,
4ecc1baf 1241 .maxlen = sizeof(u8),
4540c0cf 1242 .mode = 0644,
4ecc1baf 1243 .proc_handler = proc_dou8vec_minmax,
4540c0cf 1244 },
d06a9904
ED		 1245 {
1246 .procname = "tcp_tso_win_divisor",
1247 .data = &init_net.ipv4.sysctl_tcp_tso_win_divisor,
4ecc1baf 1248 .maxlen = sizeof(u8),
d06a9904 1249 .mode = 0644,
4ecc1baf 1250 .proc_handler = proc_dou8vec_minmax,
d06a9904 1251 },
ceef9ab6
ED		 1252 {
1253 .procname = "tcp_workaround_signed_windows",
1254 .data = &init_net.ipv4.sysctl_tcp_workaround_signed_windows,
4ecc1baf 1255 .maxlen = sizeof(u8),
ceef9ab6 1256 .mode = 0644,
4ecc1baf 1257 .proc_handler = proc_dou8vec_minmax,
ceef9ab6 1258 },
9184d8bb
ED		 1259 {
1260 .procname = "tcp_limit_output_bytes",
1261 .data = &init_net.ipv4.sysctl_tcp_limit_output_bytes,
1262 .maxlen = sizeof(int),
1263 .mode = 0644,
1264 .proc_handler = proc_dointvec
1265 },
b530b681
ED		 1266 {
1267 .procname = "tcp_challenge_ack_limit",
1268 .data = &init_net.ipv4.sysctl_tcp_challenge_ack_limit,
1269 .maxlen = sizeof(int),
1270 .mode = 0644,
1271 .proc_handler = proc_dointvec
1272 },
26e9596e
ED		 1273 {
1274 .procname = "tcp_min_tso_segs",
1275 .data = &init_net.ipv4.sysctl_tcp_min_tso_segs,
4ecc1baf 1276 .maxlen = sizeof(u8),
26e9596e 1277 .mode = 0644,
4ecc1baf 1278 .proc_handler = proc_dou8vec_minmax,
eec4844f 1279 .extra1 = SYSCTL_ONE,
26e9596e 1280 },
65466904
ED		 1281 {
1282 .procname = "tcp_tso_rtt_log",
1283 .data = &init_net.ipv4.sysctl_tcp_tso_rtt_log,
1284 .maxlen = sizeof(u8),
1285 .mode = 0644,
1286 .proc_handler = proc_dou8vec_minmax,
1287 },
bd239704
ED		 1288 {
1289 .procname = "tcp_min_rtt_wlen",
1290 .data = &init_net.ipv4.sysctl_tcp_min_rtt_wlen,
1291 .maxlen = sizeof(int),
1292 .mode = 0644,
19fad20d 1293 .proc_handler = proc_dointvec_minmax,
eec4844f 1294 .extra1 = SYSCTL_ZERO,
19fad20d 1295 .extra2 = &one_day_secs
bd239704 1296 },
790f00e1
ED		 1297 {
1298 .procname = "tcp_autocorking",
1299 .data = &init_net.ipv4.sysctl_tcp_autocorking,
4ecc1baf 1300 .maxlen = sizeof(u8),
790f00e1 1301 .mode = 0644,
4ecc1baf 1302 .proc_handler = proc_dou8vec_minmax,
eec4844f
MC		 1303 .extra1 = SYSCTL_ZERO,
1304 .extra2 = SYSCTL_ONE,
790f00e1 1305 },
4170ba6b
ED		 1306 {
1307 .procname = "tcp_invalid_ratelimit",
1308 .data = &init_net.ipv4.sysctl_tcp_invalid_ratelimit,
1309 .maxlen = sizeof(int),
1310 .mode = 0644,
1311 .proc_handler = proc_dointvec_ms_jiffies,
1312 },
23a7102a
ED		 1313 {
1314 .procname = "tcp_pacing_ss_ratio",
1315 .data = &init_net.ipv4.sysctl_tcp_pacing_ss_ratio,
1316 .maxlen = sizeof(int),
1317 .mode = 0644,
1318 .proc_handler = proc_dointvec_minmax,
eec4844f 1319 .extra1 = SYSCTL_ZERO,
bd8a5367 1320 .extra2 = SYSCTL_ONE_THOUSAND,
23a7102a 1321 },
c26e91f8
ED		 1322 {
1323 .procname = "tcp_pacing_ca_ratio",
1324 .data = &init_net.ipv4.sysctl_tcp_pacing_ca_ratio,
1325 .maxlen = sizeof(int),
1326 .mode = 0644,
1327 .proc_handler = proc_dointvec_minmax,
eec4844f 1328 .extra1 = SYSCTL_ZERO,
bd8a5367 1329 .extra2 = SYSCTL_ONE_THOUSAND,
c26e91f8 1330 },
356d1833
ED		 1331 {
1332 .procname = "tcp_wmem",
1333 .data = &init_net.ipv4.sysctl_tcp_wmem,
1334 .maxlen = sizeof(init_net.ipv4.sysctl_tcp_wmem),
1335 .mode = 0644,
1336 .proc_handler = proc_dointvec_minmax,
eec4844f 1337 .extra1 = SYSCTL_ONE,
356d1833
ED		 1338 },
1339 {
1340 .procname = "tcp_rmem",
1341 .data = &init_net.ipv4.sysctl_tcp_rmem,
1342 .maxlen = sizeof(init_net.ipv4.sysctl_tcp_rmem),
1343 .mode = 0644,
1344 .proc_handler = proc_dointvec_minmax,
eec4844f 1345 .extra1 = SYSCTL_ONE,
356d1833 1346 },
6d82aa24
ED		 1347 {
1348 .procname = "tcp_comp_sack_delay_ns",
1349 .data = &init_net.ipv4.sysctl_tcp_comp_sack_delay_ns,
1350 .maxlen = sizeof(unsigned long),
1351 .mode = 0644,
1352 .proc_handler = proc_doulongvec_minmax,
1353 },
a70437cc
ED		 1354 {
1355 .procname = "tcp_comp_sack_slack_ns",
1356 .data = &init_net.ipv4.sysctl_tcp_comp_sack_slack_ns,
1357 .maxlen = sizeof(unsigned long),
1358 .mode = 0644,
1359 .proc_handler = proc_doulongvec_minmax,
1360 },
9c21d2fc
ED		 1361 {
1362 .procname = "tcp_comp_sack_nr",
1363 .data = &init_net.ipv4.sysctl_tcp_comp_sack_nr,
1c3289c9 1364 .maxlen = sizeof(u8),
9c21d2fc 1365 .mode = 0644,
1c3289c9 1366 .proc_handler = proc_dou8vec_minmax,
eec4844f 1367 .extra1 = SYSCTL_ZERO,
9c21d2fc 1368 },
ac8f1710
WW		 1369 {
1370 .procname = "tcp_reflect_tos",
1371 .data = &init_net.ipv4.sysctl_tcp_reflect_tos,
4ecc1baf 1372 .maxlen = sizeof(u8),
ac8f1710 1373 .mode = 0644,
4ecc1baf 1374 .proc_handler = proc_dou8vec_minmax,
ac8f1710
WW		 1375 .extra1 = SYSCTL_ZERO,
1376 .extra2 = SYSCTL_ONE,
1377 },
d1e5e640
KI		 1378 {
1379 .procname = "tcp_ehash_entries",
1380 .data = &init_net.ipv4.sysctl_tcp_child_ehash_entries,
1381 .mode = 0444,
1382 .proc_handler = proc_tcp_ehash_entries,
1383 },
1384 {
1385 .procname = "tcp_child_ehash_entries",
1386 .data = &init_net.ipv4.sysctl_tcp_child_ehash_entries,
1387 .maxlen = sizeof(unsigned int),
1388 .mode = 0644,
1389 .proc_handler = proc_douintvec_minmax,
1390 .extra1 = SYSCTL_ZERO,
1391 .extra2 = &tcp_child_ehash_entries_max,
1392 },
9804985b
KI		 1393 {
1394 .procname = "udp_hash_entries",
1395 .data = &init_net.ipv4.sysctl_udp_child_hash_entries,
1396 .mode = 0444,
1397 .proc_handler = proc_udp_hash_entries,
1398 },
1399 {
1400 .procname = "udp_child_hash_entries",
1401 .data = &init_net.ipv4.sysctl_udp_child_hash_entries,
1402 .maxlen = sizeof(unsigned int),
1403 .mode = 0644,
1404 .proc_handler = proc_douintvec_minmax,
1405 .extra1 = SYSCTL_ZERO,
1406 .extra2 = &udp_child_hash_entries_max,
1407 },
1e802951
TZ		 1408 {
1409 .procname = "udp_rmem_min",
1410 .data = &init_net.ipv4.sysctl_udp_rmem_min,
1411 .maxlen = sizeof(init_net.ipv4.sysctl_udp_rmem_min),
1412 .mode = 0644,
1413 .proc_handler = proc_dointvec_minmax,
eec4844f 1414 .extra1 = SYSCTL_ONE
1e802951
TZ		 1415 },
1416 {
1417 .procname = "udp_wmem_min",
1418 .data = &init_net.ipv4.sysctl_udp_wmem_min,
1419 .maxlen = sizeof(init_net.ipv4.sysctl_udp_wmem_min),
1420 .mode = 0644,
1421 .proc_handler = proc_dointvec_minmax,
eec4844f 1422 .extra1 = SYSCTL_ONE
1e802951 1423 },
680aea08
AC		 1424 {
1425 .procname = "fib_notify_on_flag_change",
1426 .data = &init_net.ipv4.sysctl_fib_notify_on_flag_change,
b2908fac 1427 .maxlen = sizeof(u8),
680aea08 1428 .mode = 0644,
b2908fac 1429 .proc_handler = proc_dou8vec_minmax,
680aea08 1430 .extra1 = SYSCTL_ZERO,
bd8a5367 1431 .extra2 = SYSCTL_TWO,
680aea08 1432 },
bd456f28
MAQ		 1433 {
1434 .procname = "tcp_plb_enabled",
1435 .data = &init_net.ipv4.sysctl_tcp_plb_enabled,
1436 .maxlen = sizeof(u8),
1437 .mode = 0644,
1438 .proc_handler = proc_dou8vec_minmax,
1439 .extra1 = SYSCTL_ZERO,
1440 .extra2 = SYSCTL_ONE,
1441 },
1442 {
1443 .procname = "tcp_plb_idle_rehash_rounds",
1444 .data = &init_net.ipv4.sysctl_tcp_plb_idle_rehash_rounds,
1445 .maxlen = sizeof(u8),
1446 .mode = 0644,
1447 .proc_handler = proc_dou8vec_minmax,
1448 .extra2 = &tcp_plb_max_rounds,
1449 },
1450 {
1451 .procname = "tcp_plb_rehash_rounds",
1452 .data = &init_net.ipv4.sysctl_tcp_plb_rehash_rounds,
1453 .maxlen = sizeof(u8),
1454 .mode = 0644,
1455 .proc_handler = proc_dou8vec_minmax,
1456 .extra2 = &tcp_plb_max_rounds,
1457 },
1458 {
1459 .procname = "tcp_plb_suspend_rto_sec",
1460 .data = &init_net.ipv4.sysctl_tcp_plb_suspend_rto_sec,
1461 .maxlen = sizeof(u8),
1462 .mode = 0644,
1463 .proc_handler = proc_dou8vec_minmax,
1464 },
1465 {
1466 .procname = "tcp_plb_cong_thresh",
1467 .data = &init_net.ipv4.sysctl_tcp_plb_cong_thresh,
1468 .maxlen = sizeof(int),
1469 .mode = 0644,
1470 .proc_handler = proc_dointvec_minmax,
1471 .extra1 = SYSCTL_ZERO,
1472 .extra2 = &tcp_plb_max_cong_thresh,
1473 },
ccce324d 1474 {
0824a987
DM		 1475 .procname = "tcp_syn_linear_timeouts",
1476 .data = &init_net.ipv4.sysctl_tcp_syn_linear_timeouts,
1477 .maxlen = sizeof(u8),
1478 .mode = 0644,
1479 .proc_handler = proc_dou8vec_minmax,
1480 .extra1 = SYSCTL_ZERO,
1481 .extra2 = &tcp_syn_linear_timeouts_max,
ccce324d 1482 },
b650d953 1483 {
1484 .procname = "tcp_shrink_window",
1485 .data = &init_net.ipv4.sysctl_tcp_shrink_window,
1486 .maxlen = sizeof(u8),
1487 .mode = 0644,
1488 .proc_handler = proc_dou8vec_minmax,
1489 .extra1 = SYSCTL_ZERO,
1490 .extra2 = SYSCTL_ONE,
1491 },
68528f09
PE		 1492 { }
1493};
1494
1577519d
PE		 1495static __net_init int ipv4_sysctl_init_net(struct net *net)
1496{
68528f09
PE		 1497 struct ctl_table *table;
1498
1499 table = ipv4_net_table;
09ad9bc7 1500 if (!net_eq(net, &init_net)) {
0a6fa23d
EB		 1501 int i;
1502
68528f09 1503 table = kmemdup(table, sizeof(ipv4_net_table), GFP_KERNEL);
51456b29 1504 if (!table)
68528f09
PE		 1505 goto err_alloc;
1506
e9bd0cca 1507 for (i = 0; i < ARRAY_SIZE(ipv4_net_table) - 1; i++) {
97684f09
JR		 1508 if (table[i].data) {
1509 /* Update the variables to point into
1510 * the current struct net
1511 */
1512 table[i].data += (void *)net - (void *)&init_net;
1513 } else {
1514 /* Entries without data pointer are global;
1515 * Make them read-only in non-init_net ns
1516 */
1517 table[i].mode &= ~0222;
1518 }
1519 }
68528f09
PE		 1520 }
1521
c899710f
JG		 1522 net->ipv4.ipv4_hdr = register_net_sysctl_sz(net, "net/ipv4", table,
1523 ARRAY_SIZE(ipv4_net_table));
51456b29 1524 if (!net->ipv4.ipv4_hdr)
68528f09
PE		 1525 goto err_reg;
1526
122ff243
WC		 1527 net->ipv4.sysctl_local_reserved_ports = kzalloc(65536 / 8, GFP_KERNEL);
1528 if (!net->ipv4.sysctl_local_reserved_ports)
1529 goto err_ports;
1530
1577519d 1531 return 0;
68528f09 1532
122ff243
WC		 1533err_ports:
1534 unregister_net_sysctl_table(net->ipv4.ipv4_hdr);
68528f09 1535err_reg:
09ad9bc7 1536 if (!net_eq(net, &init_net))
68528f09
PE		 1537 kfree(table);
1538err_alloc:
1539 return -ENOMEM;
1577519d
PE		 1540}
1541
1542static __net_exit void ipv4_sysctl_exit_net(struct net *net)
1543{
68528f09
PE		 1544 struct ctl_table *table;
1545
122ff243 1546 kfree(net->ipv4.sysctl_local_reserved_ports);
68528f09
PE		 1547 table = net->ipv4.ipv4_hdr->ctl_table_arg;
1548 unregister_net_sysctl_table(net->ipv4.ipv4_hdr);
1549 kfree(table);
1577519d
PE		 1550}
1551
1552static __net_initdata struct pernet_operations ipv4_sysctl_ops = {
1553 .init = ipv4_sysctl_init_net,
1554 .exit = ipv4_sysctl_exit_net,
1555};
1556
3e37c3f9
PE		 1557static __init int sysctl_ipv4_init(void)
1558{
1559 struct ctl_table_header *hdr;
1560
ec8f23ce 1561 hdr = register_net_sysctl(&init_net, "net/ipv4", ipv4_table);
51456b29 1562 if (!hdr)
1577519d
PE		 1563 return -ENOMEM;
1564
1565 if (register_pernet_subsys(&ipv4_sysctl_ops)) {
5dd3df10 1566 unregister_net_sysctl_table(hdr);
1577519d
PE		 1567 return -ENOMEM;
1568 }
1569
1570 return 0;
3e37c3f9
PE		 1571}
1572
1573__initcall(sysctl_ipv4_init);
Linux 6.x block layer and io_uring tree(s)