proc/sysctl: add shared variables for range check
[linux-2.6-block.git] / net / sctp / sysctl.c
CommitLineData
47505b8b 1// SPDX-License-Identifier: GPL-2.0-or-later
60c778b2 2/* SCTP kernel implementation
1da177e4
LT
3 * (C) Copyright IBM Corp. 2002, 2004
4 * Copyright (c) 2002 Intel Corp.
5 *
60c778b2 6 * This file is part of the SCTP kernel implementation
1da177e4
LT
7 *
8 * Sysctl related interfaces for SCTP.
9 *
1da177e4
LT
10 * Please send any bug reports or fixes you make to the
11 * email address(es):
91705c61 12 * lksctp developers <linux-sctp@vger.kernel.org>
1da177e4 13 *
1da177e4
LT
14 * Written or modified by:
15 * Mingqin Liu <liuming@us.ibm.com>
16 * Jon Grimm <jgrimm@us.ibm.com>
17 * Ardelle Fan <ardelle.fan@intel.com>
18 * Ryan Layer <rmlayer@us.ibm.com>
19 * Sridhar Samudrala <sri@us.ibm.com>
1da177e4
LT
20 */
21
b58537a1
DB
22#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
23
1da177e4 24#include <net/sctp/structs.h>
8c5955d8 25#include <net/sctp/sctp.h>
1da177e4
LT
26#include <linux/sysctl.h>
27
3fd091e7 28static int timer_max = 86400000; /* ms in one day */
d48e074d
JMG
29static int sack_timer_min = 1;
30static int sack_timer_max = 500;
701ef3e6 31static int addr_scope_max = SCTP_SCOPE_POLICY_MAX;
90f2f531 32static int rwnd_scale_max = 16;
b58537a1
DB
33static int rto_alpha_min = 0;
34static int rto_beta_min = 0;
35static int rto_alpha_max = 1000;
36static int rto_beta_max = 1000;
37
2692ba61
XW
38static unsigned long max_autoclose_min = 0;
39static unsigned long max_autoclose_max =
40 (MAX_SCHEDULE_TIMEOUT / HZ > UINT_MAX)
41 ? UINT_MAX : MAX_SCHEDULE_TIMEOUT / HZ;
1da177e4 42
b486b228 43static int proc_sctp_do_hmac_alg(struct ctl_table *ctl, int write,
3c68198e 44 void __user *buffer, size_t *lenp,
3c68198e 45 loff_t *ppos);
4f3fdf3b 46static int proc_sctp_do_rto_min(struct ctl_table *ctl, int write,
47 void __user *buffer, size_t *lenp,
48 loff_t *ppos);
49static int proc_sctp_do_rto_max(struct ctl_table *ctl, int write,
3c68198e 50 void __user *buffer, size_t *lenp,
3c68198e 51 loff_t *ppos);
b58537a1
DB
52static int proc_sctp_do_alpha_beta(struct ctl_table *ctl, int write,
53 void __user *buffer, size_t *lenp,
54 loff_t *ppos);
b14878cc
VY
55static int proc_sctp_do_auth(struct ctl_table *ctl, int write,
56 void __user *buffer, size_t *lenp,
57 loff_t *ppos);
4f3fdf3b 58
fe2c6338 59static struct ctl_table sctp_table[] = {
e1fc3b14
EB
60 {
61 .procname = "sctp_mem",
62 .data = &sysctl_sctp_mem,
63 .maxlen = sizeof(sysctl_sctp_mem),
64 .mode = 0644,
65 .proc_handler = proc_doulongvec_minmax
66 },
67 {
68 .procname = "sctp_rmem",
69 .data = &sysctl_sctp_rmem,
70 .maxlen = sizeof(sysctl_sctp_rmem),
71 .mode = 0644,
72 .proc_handler = proc_dointvec,
73 },
74 {
75 .procname = "sctp_wmem",
76 .data = &sysctl_sctp_wmem,
77 .maxlen = sizeof(sysctl_sctp_wmem),
78 .mode = 0644,
79 .proc_handler = proc_dointvec,
80 },
81
82 { /* sentinel */ }
83};
84
fe2c6338 85static struct ctl_table sctp_net_table[] = {
1da177e4 86 {
1da177e4 87 .procname = "rto_initial",
e1fc3b14 88 .data = &init_net.sctp.rto_initial,
3fd091e7 89 .maxlen = sizeof(unsigned int),
1da177e4 90 .mode = 0644,
6d9f239a 91 .proc_handler = proc_dointvec_minmax,
eec4844f 92 .extra1 = SYSCTL_ONE,
3fd091e7 93 .extra2 = &timer_max
1da177e4
LT
94 },
95 {
1da177e4 96 .procname = "rto_min",
e1fc3b14 97 .data = &init_net.sctp.rto_min,
3fd091e7 98 .maxlen = sizeof(unsigned int),
1da177e4 99 .mode = 0644,
4f3fdf3b 100 .proc_handler = proc_sctp_do_rto_min,
eec4844f 101 .extra1 = SYSCTL_ONE,
4f3fdf3b 102 .extra2 = &init_net.sctp.rto_max
1da177e4
LT
103 },
104 {
1da177e4 105 .procname = "rto_max",
e1fc3b14 106 .data = &init_net.sctp.rto_max,
3fd091e7 107 .maxlen = sizeof(unsigned int),
1da177e4 108 .mode = 0644,
4f3fdf3b 109 .proc_handler = proc_sctp_do_rto_max,
110 .extra1 = &init_net.sctp.rto_min,
3fd091e7 111 .extra2 = &timer_max
1da177e4
LT
112 },
113 {
e1fc3b14
EB
114 .procname = "rto_alpha_exp_divisor",
115 .data = &init_net.sctp.rto_alpha,
116 .maxlen = sizeof(int),
b58537a1
DB
117 .mode = 0644,
118 .proc_handler = proc_sctp_do_alpha_beta,
119 .extra1 = &rto_alpha_min,
120 .extra2 = &rto_alpha_max,
e1fc3b14
EB
121 },
122 {
123 .procname = "rto_beta_exp_divisor",
124 .data = &init_net.sctp.rto_beta,
125 .maxlen = sizeof(int),
b58537a1
DB
126 .mode = 0644,
127 .proc_handler = proc_sctp_do_alpha_beta,
128 .extra1 = &rto_beta_min,
129 .extra2 = &rto_beta_max,
1da177e4
LT
130 },
131 {
1da177e4 132 .procname = "max_burst",
e1fc3b14 133 .data = &init_net.sctp.max_burst,
1da177e4
LT
134 .maxlen = sizeof(int),
135 .mode = 0644,
6d9f239a 136 .proc_handler = proc_dointvec_minmax,
eec4844f
MC
137 .extra1 = SYSCTL_ZERO,
138 .extra2 = SYSCTL_INT_MAX,
1da177e4
LT
139 },
140 {
e1fc3b14
EB
141 .procname = "cookie_preserve_enable",
142 .data = &init_net.sctp.cookie_preserve_enable,
1da177e4
LT
143 .maxlen = sizeof(int),
144 .mode = 0644,
e1fc3b14
EB
145 .proc_handler = proc_dointvec,
146 },
3c68198e
NH
147 {
148 .procname = "cookie_hmac_alg",
22a1f514 149 .data = &init_net.sctp.sctp_hmac_alg,
3c68198e
NH
150 .maxlen = 8,
151 .mode = 0644,
152 .proc_handler = proc_sctp_do_hmac_alg,
153 },
e1fc3b14
EB
154 {
155 .procname = "valid_cookie_life",
156 .data = &init_net.sctp.valid_cookie_life,
157 .maxlen = sizeof(unsigned int),
158 .mode = 0644,
6d9f239a 159 .proc_handler = proc_dointvec_minmax,
eec4844f 160 .extra1 = SYSCTL_ONE,
e1fc3b14 161 .extra2 = &timer_max
1da177e4 162 },
4eb701df 163 {
e1fc3b14
EB
164 .procname = "sack_timeout",
165 .data = &init_net.sctp.sack_timeout,
4eb701df
NH
166 .maxlen = sizeof(int),
167 .mode = 0644,
e1fc3b14
EB
168 .proc_handler = proc_dointvec_minmax,
169 .extra1 = &sack_timer_min,
170 .extra2 = &sack_timer_max,
4eb701df 171 },
049b3ff5 172 {
e1fc3b14
EB
173 .procname = "hb_interval",
174 .data = &init_net.sctp.hb_interval,
175 .maxlen = sizeof(unsigned int),
049b3ff5 176 .mode = 0644,
e1fc3b14 177 .proc_handler = proc_dointvec_minmax,
eec4844f 178 .extra1 = SYSCTL_ONE,
e1fc3b14 179 .extra2 = &timer_max
049b3ff5 180 },
1da177e4 181 {
e1fc3b14
EB
182 .procname = "association_max_retrans",
183 .data = &init_net.sctp.max_retrans_association,
1da177e4
LT
184 .maxlen = sizeof(int),
185 .mode = 0644,
6d9f239a 186 .proc_handler = proc_dointvec_minmax,
eec4844f
MC
187 .extra1 = SYSCTL_ONE,
188 .extra2 = SYSCTL_INT_MAX,
1da177e4 189 },
5aa93bcf 190 {
e1fc3b14
EB
191 .procname = "path_max_retrans",
192 .data = &init_net.sctp.max_retrans_path,
5aa93bcf
NH
193 .maxlen = sizeof(int),
194 .mode = 0644,
195 .proc_handler = proc_dointvec_minmax,
eec4844f
MC
196 .extra1 = SYSCTL_ONE,
197 .extra2 = SYSCTL_INT_MAX,
5aa93bcf 198 },
1da177e4 199 {
1da177e4 200 .procname = "max_init_retransmits",
e1fc3b14 201 .data = &init_net.sctp.max_retrans_init,
1da177e4
LT
202 .maxlen = sizeof(int),
203 .mode = 0644,
6d9f239a 204 .proc_handler = proc_dointvec_minmax,
eec4844f
MC
205 .extra1 = SYSCTL_ONE,
206 .extra2 = SYSCTL_INT_MAX,
1da177e4
LT
207 },
208 {
e1fc3b14
EB
209 .procname = "pf_retrans",
210 .data = &init_net.sctp.pf_retrans,
211 .maxlen = sizeof(int),
1da177e4 212 .mode = 0644,
6d9f239a 213 .proc_handler = proc_dointvec_minmax,
eec4844f
MC
214 .extra1 = SYSCTL_ZERO,
215 .extra2 = SYSCTL_INT_MAX,
1da177e4
LT
216 },
217 {
e1fc3b14
EB
218 .procname = "sndbuf_policy",
219 .data = &init_net.sctp.sndbuf_policy,
8116ffad 220 .maxlen = sizeof(int),
1da177e4 221 .mode = 0644,
6d9f239a 222 .proc_handler = proc_dointvec,
1da177e4
LT
223 },
224 {
e1fc3b14
EB
225 .procname = "rcvbuf_policy",
226 .data = &init_net.sctp.rcvbuf_policy,
dd51be0f
MH
227 .maxlen = sizeof(int),
228 .mode = 0644,
229 .proc_handler = proc_dointvec,
230 },
231 {
232 .procname = "default_auto_asconf",
e1fc3b14 233 .data = &init_net.sctp.default_auto_asconf,
1da177e4
LT
234 .maxlen = sizeof(int),
235 .mode = 0644,
6d9f239a 236 .proc_handler = proc_dointvec,
1da177e4
LT
237 },
238 {
e1fc3b14
EB
239 .procname = "addip_enable",
240 .data = &init_net.sctp.addip_enable,
1da177e4
LT
241 .maxlen = sizeof(int),
242 .mode = 0644,
6d9f239a 243 .proc_handler = proc_dointvec,
1da177e4 244 },
2f85a429 245 {
e1fc3b14
EB
246 .procname = "addip_noauth_enable",
247 .data = &init_net.sctp.addip_noauth,
d48e074d 248 .maxlen = sizeof(int),
2f85a429 249 .mode = 0644,
6d9f239a 250 .proc_handler = proc_dointvec,
4d93df0a
NH
251 },
252 {
e1fc3b14
EB
253 .procname = "prsctp_enable",
254 .data = &init_net.sctp.prsctp_enable,
a29a5bd4
VY
255 .maxlen = sizeof(int),
256 .mode = 0644,
6d9f239a 257 .proc_handler = proc_dointvec,
a29a5bd4 258 },
c0d8bab6
XL
259 {
260 .procname = "reconf_enable",
261 .data = &init_net.sctp.reconf_enable,
262 .maxlen = sizeof(int),
263 .mode = 0644,
264 .proc_handler = proc_dointvec,
265 },
73d9c4fd 266 {
e1fc3b14
EB
267 .procname = "auth_enable",
268 .data = &init_net.sctp.auth_enable,
73d9c4fd
VY
269 .maxlen = sizeof(int),
270 .mode = 0644,
b14878cc 271 .proc_handler = proc_sctp_do_auth,
73d9c4fd 272 },
463118c3
XL
273 {
274 .procname = "intl_enable",
275 .data = &init_net.sctp.intl_enable,
276 .maxlen = sizeof(int),
277 .mode = 0644,
278 .proc_handler = proc_dointvec,
279 },
72388433 280 {
72388433 281 .procname = "addr_scope_policy",
e1fc3b14 282 .data = &init_net.sctp.scope_policy,
72388433
BD
283 .maxlen = sizeof(int),
284 .mode = 0644,
6d456111 285 .proc_handler = proc_dointvec_minmax,
eec4844f 286 .extra1 = SYSCTL_ZERO,
72388433
BD
287 .extra2 = &addr_scope_max,
288 },
90f2f531 289 {
90f2f531 290 .procname = "rwnd_update_shift",
e1fc3b14 291 .data = &init_net.sctp.rwnd_upd_shift,
90f2f531
VY
292 .maxlen = sizeof(int),
293 .mode = 0644,
294 .proc_handler = &proc_dointvec_minmax,
eec4844f 295 .extra1 = SYSCTL_ONE,
90f2f531
VY
296 .extra2 = &rwnd_scale_max,
297 },
2692ba61
XW
298 {
299 .procname = "max_autoclose",
e1fc3b14 300 .data = &init_net.sctp.max_autoclose,
2692ba61
XW
301 .maxlen = sizeof(unsigned long),
302 .mode = 0644,
303 .proc_handler = &proc_doulongvec_minmax,
304 .extra1 = &max_autoclose_min,
305 .extra2 = &max_autoclose_max,
306 },
566178f8
ZY
307 {
308 .procname = "pf_enable",
309 .data = &init_net.sctp.pf_enable,
310 .maxlen = sizeof(int),
311 .mode = 0644,
312 .proc_handler = proc_dointvec,
313 },
71acc0dd 314
d7fc02c7 315 { /* sentinel */ }
1da177e4
LT
316};
317
b486b228 318static int proc_sctp_do_hmac_alg(struct ctl_table *ctl, int write,
3c68198e
NH
319 void __user *buffer, size_t *lenp,
320 loff_t *ppos)
321{
322 struct net *net = current->nsproxy->net_ns;
fe2c6338 323 struct ctl_table tbl;
ff5e92c1 324 bool changed = false;
3c68198e 325 char *none = "none";
320f1a4a 326 char tmp[8] = {0};
ff5e92c1 327 int ret;
3c68198e
NH
328
329 memset(&tbl, 0, sizeof(struct ctl_table));
330
331 if (write) {
332 tbl.data = tmp;
ff5e92c1 333 tbl.maxlen = sizeof(tmp);
3c68198e
NH
334 } else {
335 tbl.data = net->sctp.sctp_hmac_alg ? : none;
336 tbl.maxlen = strlen(tbl.data);
337 }
3c68198e 338
ff5e92c1
DB
339 ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
340 if (write && ret == 0) {
3c68198e
NH
341#ifdef CONFIG_CRYPTO_MD5
342 if (!strncmp(tmp, "md5", 3)) {
343 net->sctp.sctp_hmac_alg = "md5";
ff5e92c1 344 changed = true;
3c68198e
NH
345 }
346#endif
347#ifdef CONFIG_CRYPTO_SHA1
348 if (!strncmp(tmp, "sha1", 4)) {
349 net->sctp.sctp_hmac_alg = "sha1";
ff5e92c1 350 changed = true;
3c68198e
NH
351 }
352#endif
353 if (!strncmp(tmp, "none", 4)) {
354 net->sctp.sctp_hmac_alg = NULL;
ff5e92c1 355 changed = true;
3c68198e 356 }
3c68198e
NH
357 if (!changed)
358 ret = -EINVAL;
359 }
360
361 return ret;
362}
363
4f3fdf3b 364static int proc_sctp_do_rto_min(struct ctl_table *ctl, int write,
365 void __user *buffer, size_t *lenp,
366 loff_t *ppos)
367{
368 struct net *net = current->nsproxy->net_ns;
4f3fdf3b 369 unsigned int min = *(unsigned int *) ctl->extra1;
370 unsigned int max = *(unsigned int *) ctl->extra2;
ff5e92c1
DB
371 struct ctl_table tbl;
372 int ret, new_value;
4f3fdf3b 373
374 memset(&tbl, 0, sizeof(struct ctl_table));
375 tbl.maxlen = sizeof(unsigned int);
376
377 if (write)
378 tbl.data = &new_value;
379 else
380 tbl.data = &net->sctp.rto_min;
ff5e92c1 381
4f3fdf3b 382 ret = proc_dointvec(&tbl, write, buffer, lenp, ppos);
ff5e92c1
DB
383 if (write && ret == 0) {
384 if (new_value > max || new_value < min)
4f3fdf3b 385 return -EINVAL;
ff5e92c1 386
4f3fdf3b 387 net->sctp.rto_min = new_value;
388 }
ff5e92c1 389
4f3fdf3b 390 return ret;
391}
392
393static int proc_sctp_do_rto_max(struct ctl_table *ctl, int write,
394 void __user *buffer, size_t *lenp,
395 loff_t *ppos)
396{
397 struct net *net = current->nsproxy->net_ns;
4f3fdf3b 398 unsigned int min = *(unsigned int *) ctl->extra1;
399 unsigned int max = *(unsigned int *) ctl->extra2;
ff5e92c1
DB
400 struct ctl_table tbl;
401 int ret, new_value;
4f3fdf3b 402
403 memset(&tbl, 0, sizeof(struct ctl_table));
404 tbl.maxlen = sizeof(unsigned int);
405
406 if (write)
407 tbl.data = &new_value;
408 else
409 tbl.data = &net->sctp.rto_max;
ff5e92c1 410
4f3fdf3b 411 ret = proc_dointvec(&tbl, write, buffer, lenp, ppos);
ff5e92c1
DB
412 if (write && ret == 0) {
413 if (new_value > max || new_value < min)
4f3fdf3b 414 return -EINVAL;
ff5e92c1 415
4f3fdf3b 416 net->sctp.rto_max = new_value;
417 }
ff5e92c1 418
4f3fdf3b 419 return ret;
420}
421
b58537a1
DB
422static int proc_sctp_do_alpha_beta(struct ctl_table *ctl, int write,
423 void __user *buffer, size_t *lenp,
424 loff_t *ppos)
425{
eaea2da7
DB
426 if (write)
427 pr_warn_once("Changing rto_alpha or rto_beta may lead to "
428 "suboptimal rtt/srtt estimations!\n");
b58537a1
DB
429
430 return proc_dointvec_minmax(ctl, write, buffer, lenp, ppos);
431}
432
b14878cc
VY
433static int proc_sctp_do_auth(struct ctl_table *ctl, int write,
434 void __user *buffer, size_t *lenp,
435 loff_t *ppos)
436{
437 struct net *net = current->nsproxy->net_ns;
438 struct ctl_table tbl;
439 int new_value, ret;
440
441 memset(&tbl, 0, sizeof(struct ctl_table));
442 tbl.maxlen = sizeof(unsigned int);
443
444 if (write)
445 tbl.data = &new_value;
446 else
447 tbl.data = &net->sctp.auth_enable;
448
449 ret = proc_dointvec(&tbl, write, buffer, lenp, ppos);
24599e61 450 if (write && ret == 0) {
b14878cc
VY
451 struct sock *sk = net->sctp.ctl_sock;
452
453 net->sctp.auth_enable = new_value;
454 /* Update the value in the control socket */
455 lock_sock(sk);
456 sctp_sk(sk)->ep->auth_enable = new_value;
457 release_sock(sk);
458 }
459
460 return ret;
461}
462
ebb7e95d
EB
463int sctp_sysctl_net_register(struct net *net)
464{
eb9f3705 465 struct ctl_table *table;
466 int i;
ebb7e95d 467
eb9f3705 468 table = kmemdup(sctp_net_table, sizeof(sctp_net_table), GFP_KERNEL);
469 if (!table)
470 return -ENOMEM;
ebb7e95d 471
eb9f3705 472 for (i = 0; table[i].data; i++)
473 table[i].data += (char *)(&net->sctp) - (char *)&init_net.sctp;
e1fc3b14 474
ebb7e95d 475 net->sctp.sysctl_header = register_net_sysctl(net, "net/sctp", table);
f66138c8 476 if (net->sctp.sysctl_header == NULL) {
477 kfree(table);
478 return -ENOMEM;
479 }
ebb7e95d
EB
480 return 0;
481}
482
483void sctp_sysctl_net_unregister(struct net *net)
484{
5f19d121
VY
485 struct ctl_table *table;
486
487 table = net->sctp.sysctl_header->ctl_table_arg;
ebb7e95d 488 unregister_net_sysctl_table(net->sctp.sysctl_header);
5f19d121 489 kfree(table);
ebb7e95d
EB
490}
491
26ac8e5f 492static struct ctl_table_header *sctp_sysctl_header;
1da177e4
LT
493
494/* Sysctl registration. */
495void sctp_sysctl_register(void)
496{
ec8f23ce 497 sctp_sysctl_header = register_net_sysctl(&init_net, "net/sctp", sctp_table);
1da177e4
LT
498}
499
500/* Sysctl deregistration. */
501void sctp_sysctl_unregister(void)
502{
5dd3df10 503 unregister_net_sysctl_table(sctp_sysctl_header);
1da177e4 504}