net/sctp/sysctl.c

   1 /* SCTP kernel implementation
   2  * (C) Copyright IBM Corp. 2002, 2004
   3  * Copyright (c) 2002 Intel Corp.
   4  *
   5  * This file is part of the SCTP kernel implementation
   6  *
   7  * Sysctl related interfaces for SCTP.
   8  *
   9  * This SCTP implementation is free software;
  10  * you can redistribute it and/or modify it under the terms of
  11  * the GNU General Public License as published by
  12  * the Free Software Foundation; either version 2, or (at your option)
  13  * any later version.
  14  *
  15  * This SCTP implementation is distributed in the hope that it
  16  * will be useful, but WITHOUT ANY WARRANTY; without even the implied
  17  *                 ************************
  18  * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  19  * See the GNU General Public License for more details.
  20  *
  21  * You should have received a copy of the GNU General Public License
  22  * along with GNU CC; see the file COPYING.  If not, see
  23  * <http://www.gnu.org/licenses/>.
  24  *
  25  * Please send any bug reports or fixes you make to the
  26  * email address(es):
  27  *    lksctp developers <linux-sctp@vger.kernel.org>
  28  *
  29  * Written or modified by:
  30  *    Mingqin Liu           <liuming@us.ibm.com>
  31  *    Jon Grimm             <jgrimm@us.ibm.com>
  32  *    Ardelle Fan           <ardelle.fan@intel.com>
  33  *    Ryan Layer            <rmlayer@us.ibm.com>
  34  *    Sridhar Samudrala     <sri@us.ibm.com>
  35  */
  36
  37 #include <net/sctp/structs.h>
  38 #include <net/sctp/sctp.h>
  39 #include <linux/sysctl.h>
  40
  41 static int zero = 0;
  42 static int one = 1;
  43 static int timer_max = 86400000; /* ms in one day */
  44 static int int_max = INT_MAX;
  45 static int sack_timer_min = 1;
  46 static int sack_timer_max = 500;
  47 static int addr_scope_max = 3; /* check sctp_scope_policy_t in include/net/sctp/constants.h for max entries */
  48 static int rwnd_scale_max = 16;
  49 static unsigned long max_autoclose_min = 0;
  50 static unsigned long max_autoclose_max =
  51         (MAX_SCHEDULE_TIMEOUT / HZ > UINT_MAX)
  52         ? UINT_MAX : MAX_SCHEDULE_TIMEOUT / HZ;
  53
  54 extern long sysctl_sctp_mem[3];
  55 extern int sysctl_sctp_rmem[3];
  56 extern int sysctl_sctp_wmem[3];
  57
  58 static int proc_sctp_do_hmac_alg(struct ctl_table *ctl, int write,
  59                                 void __user *buffer, size_t *lenp,
  60                                 loff_t *ppos);
  61 static int proc_sctp_do_rto_min(struct ctl_table *ctl, int write,
  62                                 void __user *buffer, size_t *lenp,
  63                                 loff_t *ppos);
  64 static int proc_sctp_do_rto_max(struct ctl_table *ctl, int write,
  65                                 void __user *buffer, size_t *lenp,
  66                                 loff_t *ppos);
  67 static int proc_sctp_do_auth(struct ctl_table *ctl, int write,
  68                              void __user *buffer, size_t *lenp,
  69                              loff_t *ppos);
  70
  71 static struct ctl_table sctp_table[] = {
  72         {
  73                 .procname       = "sctp_mem",
  74                 .data           = &sysctl_sctp_mem,
  75                 .maxlen         = sizeof(sysctl_sctp_mem),
  76                 .mode           = 0644,
  77                 .proc_handler   = proc_doulongvec_minmax
  78         },
  79         {
  80                 .procname       = "sctp_rmem",
  81                 .data           = &sysctl_sctp_rmem,
  82                 .maxlen         = sizeof(sysctl_sctp_rmem),
  83                 .mode           = 0644,
  84                 .proc_handler   = proc_dointvec,
  85         },
  86         {
  87                 .procname       = "sctp_wmem",
  88                 .data           = &sysctl_sctp_wmem,
  89                 .maxlen         = sizeof(sysctl_sctp_wmem),
  90                 .mode           = 0644,
  91                 .proc_handler   = proc_dointvec,
  92         },
  93
  94         { /* sentinel */ }
  95 };
  96
  97 static struct ctl_table sctp_net_table[] = {
  98         {
  99                 .procname       = "rto_initial",
 100                 .data           = &init_net.sctp.rto_initial,
 101                 .maxlen         = sizeof(unsigned int),
 102                 .mode           = 0644,
 103                 .proc_handler   = proc_dointvec_minmax,
 104                 .extra1         = &one,
 105                 .extra2         = &timer_max
 106         },
 107         {
 108                 .procname       = "rto_min",
 109                 .data           = &init_net.sctp.rto_min,
 110                 .maxlen         = sizeof(unsigned int),
 111                 .mode           = 0644,
 112                 .proc_handler   = proc_sctp_do_rto_min,
 113                 .extra1         = &one,
 114                 .extra2         = &init_net.sctp.rto_max
 115         },
 116         {
 117                 .procname       = "rto_max",
 118                 .data           = &init_net.sctp.rto_max,
 119                 .maxlen         = sizeof(unsigned int),
 120                 .mode           = 0644,
 121                 .proc_handler   = proc_sctp_do_rto_max,
 122                 .extra1         = &init_net.sctp.rto_min,
 123                 .extra2         = &timer_max
 124         },
 125         {
 126                 .procname       = "rto_alpha_exp_divisor",
 127                 .data           = &init_net.sctp.rto_alpha,
 128                 .maxlen         = sizeof(int),
 129                 .mode           = 0444,
 130                 .proc_handler   = proc_dointvec,
 131         },
 132         {
 133                 .procname       = "rto_beta_exp_divisor",
 134                 .data           = &init_net.sctp.rto_beta,
 135                 .maxlen         = sizeof(int),
 136                 .mode           = 0444,
 137                 .proc_handler   = proc_dointvec,
 138         },
 139         {
 140                 .procname       = "max_burst",
 141                 .data           = &init_net.sctp.max_burst,
 142                 .maxlen         = sizeof(int),
 143                 .mode           = 0644,
 144                 .proc_handler   = proc_dointvec_minmax,
 145                 .extra1         = &zero,
 146                 .extra2         = &int_max
 147         },
 148         {
 149                 .procname       = "cookie_preserve_enable",
 150                 .data           = &init_net.sctp.cookie_preserve_enable,
 151                 .maxlen         = sizeof(int),
 152                 .mode           = 0644,
 153                 .proc_handler   = proc_dointvec,
 154         },
 155         {
 156                 .procname       = "cookie_hmac_alg",
 157                 .data           = &init_net.sctp.sctp_hmac_alg,
 158                 .maxlen         = 8,
 159                 .mode           = 0644,
 160                 .proc_handler   = proc_sctp_do_hmac_alg,
 161         },
 162         {
 163                 .procname       = "valid_cookie_life",
 164                 .data           = &init_net.sctp.valid_cookie_life,
 165                 .maxlen         = sizeof(unsigned int),
 166                 .mode           = 0644,
 167                 .proc_handler   = proc_dointvec_minmax,
 168                 .extra1         = &one,
 169                 .extra2         = &timer_max
 170         },
 171         {
 172                 .procname       = "sack_timeout",
 173                 .data           = &init_net.sctp.sack_timeout,
 174                 .maxlen         = sizeof(int),
 175                 .mode           = 0644,
 176                 .proc_handler   = proc_dointvec_minmax,
 177                 .extra1         = &sack_timer_min,
 178                 .extra2         = &sack_timer_max,
 179         },
 180         {
 181                 .procname       = "hb_interval",
 182                 .data           = &init_net.sctp.hb_interval,
 183                 .maxlen         = sizeof(unsigned int),
 184                 .mode           = 0644,
 185                 .proc_handler   = proc_dointvec_minmax,
 186                 .extra1         = &one,
 187                 .extra2         = &timer_max
 188         },
 189         {
 190                 .procname       = "association_max_retrans",
 191                 .data           = &init_net.sctp.max_retrans_association,
 192                 .maxlen         = sizeof(int),
 193                 .mode           = 0644,
 194                 .proc_handler   = proc_dointvec_minmax,
 195                 .extra1         = &one,
 196                 .extra2         = &int_max
 197         },
 198         {
 199                 .procname       = "path_max_retrans",
 200                 .data           = &init_net.sctp.max_retrans_path,
 201                 .maxlen         = sizeof(int),
 202                 .mode           = 0644,
 203                 .proc_handler   = proc_dointvec_minmax,
 204                 .extra1         = &one,
 205                 .extra2         = &int_max
 206         },
 207         {
 208                 .procname       = "max_init_retransmits",
 209                 .data           = &init_net.sctp.max_retrans_init,
 210                 .maxlen         = sizeof(int),
 211                 .mode           = 0644,
 212                 .proc_handler   = proc_dointvec_minmax,
 213                 .extra1         = &one,
 214                 .extra2         = &int_max
 215         },
 216         {
 217                 .procname       = "pf_retrans",
 218                 .data           = &init_net.sctp.pf_retrans,
 219                 .maxlen         = sizeof(int),
 220                 .mode           = 0644,
 221                 .proc_handler   = proc_dointvec_minmax,
 222                 .extra1         = &zero,
 223                 .extra2         = &int_max
 224         },
 225         {
 226                 .procname       = "sndbuf_policy",
 227                 .data           = &init_net.sctp.sndbuf_policy,
 228                 .maxlen         = sizeof(int),
 229                 .mode           = 0644,
 230                 .proc_handler   = proc_dointvec,
 231         },
 232         {
 233                 .procname       = "rcvbuf_policy",
 234                 .data           = &init_net.sctp.rcvbuf_policy,
 235                 .maxlen         = sizeof(int),
 236                 .mode           = 0644,
 237                 .proc_handler   = proc_dointvec,
 238         },
 239         {
 240                 .procname       = "default_auto_asconf",
 241                 .data           = &init_net.sctp.default_auto_asconf,
 242                 .maxlen         = sizeof(int),
 243                 .mode           = 0644,
 244                 .proc_handler   = proc_dointvec,
 245         },
 246         {
 247                 .procname       = "addip_enable",
 248                 .data           = &init_net.sctp.addip_enable,
 249                 .maxlen         = sizeof(int),
 250                 .mode           = 0644,
 251                 .proc_handler   = proc_dointvec,
 252         },
 253         {
 254                 .procname       = "addip_noauth_enable",
 255                 .data           = &init_net.sctp.addip_noauth,
 256                 .maxlen         = sizeof(int),
 257                 .mode           = 0644,
 258                 .proc_handler   = proc_dointvec,
 259         },
 260         {
 261                 .procname       = "prsctp_enable",
 262                 .data           = &init_net.sctp.prsctp_enable,
 263                 .maxlen         = sizeof(int),
 264                 .mode           = 0644,
 265                 .proc_handler   = proc_dointvec,
 266         },
 267         {
 268                 .procname       = "auth_enable",
 269                 .data           = &init_net.sctp.auth_enable,
 270                 .maxlen         = sizeof(int),
 271                 .mode           = 0644,
 272                 .proc_handler   = proc_sctp_do_auth,
 273         },
 274         {
 275                 .procname       = "addr_scope_policy",
 276                 .data           = &init_net.sctp.scope_policy,
 277                 .maxlen         = sizeof(int),
 278                 .mode           = 0644,
 279                 .proc_handler   = proc_dointvec_minmax,
 280                 .extra1         = &zero,
 281                 .extra2         = &addr_scope_max,
 282         },
 283         {
 284                 .procname       = "rwnd_update_shift",
 285                 .data           = &init_net.sctp.rwnd_upd_shift,
 286                 .maxlen         = sizeof(int),
 287                 .mode           = 0644,
 288                 .proc_handler   = &proc_dointvec_minmax,
 289                 .extra1         = &one,
 290                 .extra2         = &rwnd_scale_max,
 291         },
 292         {
 293                 .procname       = "max_autoclose",
 294                 .data           = &init_net.sctp.max_autoclose,
 295                 .maxlen         = sizeof(unsigned long),
 296                 .mode           = 0644,
 297                 .proc_handler   = &proc_doulongvec_minmax,
 298                 .extra1         = &max_autoclose_min,
 299                 .extra2         = &max_autoclose_max,
 300         },
 301
 302         { /* sentinel */ }
 303 };
 304
 305 static int proc_sctp_do_hmac_alg(struct ctl_table *ctl, int write,
 306                                 void __user *buffer, size_t *lenp,
 307                                 loff_t *ppos)
 308 {
 309         struct net *net = current->nsproxy->net_ns;
 310         struct ctl_table tbl;
 311         bool changed = false;
 312         char *none = "none";
 313         char tmp[8];
 314         int ret;
 315
 316         memset(&tbl, 0, sizeof(struct ctl_table));
 317
 318         if (write) {
 319                 tbl.data = tmp;
 320                 tbl.maxlen = sizeof(tmp);
 321         } else {
 322                 tbl.data = net->sctp.sctp_hmac_alg ? : none;
 323                 tbl.maxlen = strlen(tbl.data);
 324         }
 325
 326         ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
 327         if (write && ret == 0) {
 328 #ifdef CONFIG_CRYPTO_MD5
 329                 if (!strncmp(tmp, "md5", 3)) {
 330                         net->sctp.sctp_hmac_alg = "md5";
 331                         changed = true;
 332                 }
 333 #endif
 334 #ifdef CONFIG_CRYPTO_SHA1
 335                 if (!strncmp(tmp, "sha1", 4)) {
 336                         net->sctp.sctp_hmac_alg = "sha1";
 337                         changed = true;
 338                 }
 339 #endif
 340                 if (!strncmp(tmp, "none", 4)) {
 341                         net->sctp.sctp_hmac_alg = NULL;
 342                         changed = true;
 343                 }
 344                 if (!changed)
 345                         ret = -EINVAL;
 346         }
 347
 348         return ret;
 349 }
 350
 351 static int proc_sctp_do_rto_min(struct ctl_table *ctl, int write,
 352                                 void __user *buffer, size_t *lenp,
 353                                 loff_t *ppos)
 354 {
 355         struct net *net = current->nsproxy->net_ns;
 356         unsigned int min = *(unsigned int *) ctl->extra1;
 357         unsigned int max = *(unsigned int *) ctl->extra2;
 358         struct ctl_table tbl;
 359         int ret, new_value;
 360
 361         memset(&tbl, 0, sizeof(struct ctl_table));
 362         tbl.maxlen = sizeof(unsigned int);
 363
 364         if (write)
 365                 tbl.data = &new_value;
 366         else
 367                 tbl.data = &net->sctp.rto_min;
 368
 369         ret = proc_dointvec(&tbl, write, buffer, lenp, ppos);
 370         if (write && ret == 0) {
 371                 if (new_value > max || new_value < min)
 372                         return -EINVAL;
 373
 374                 net->sctp.rto_min = new_value;
 375         }
 376
 377         return ret;
 378 }
 379
 380 static int proc_sctp_do_rto_max(struct ctl_table *ctl, int write,
 381                                 void __user *buffer, size_t *lenp,
 382                                 loff_t *ppos)
 383 {
 384         struct net *net = current->nsproxy->net_ns;
 385         unsigned int min = *(unsigned int *) ctl->extra1;
 386         unsigned int max = *(unsigned int *) ctl->extra2;
 387         struct ctl_table tbl;
 388         int ret, new_value;
 389
 390         memset(&tbl, 0, sizeof(struct ctl_table));
 391         tbl.maxlen = sizeof(unsigned int);
 392
 393         if (write)
 394                 tbl.data = &new_value;
 395         else
 396                 tbl.data = &net->sctp.rto_max;
 397
 398         ret = proc_dointvec(&tbl, write, buffer, lenp, ppos);
 399         if (write && ret == 0) {
 400                 if (new_value > max || new_value < min)
 401                         return -EINVAL;
 402
 403                 net->sctp.rto_max = new_value;
 404         }
 405
 406         return ret;
 407 }
 408
 409 static int proc_sctp_do_auth(struct ctl_table *ctl, int write,
 410                              void __user *buffer, size_t *lenp,
 411                              loff_t *ppos)
 412 {
 413         struct net *net = current->nsproxy->net_ns;
 414         struct ctl_table tbl;
 415         int new_value, ret;
 416
 417         memset(&tbl, 0, sizeof(struct ctl_table));
 418         tbl.maxlen = sizeof(unsigned int);
 419
 420         if (write)
 421                 tbl.data = &new_value;
 422         else
 423                 tbl.data = &net->sctp.auth_enable;
 424
 425         ret = proc_dointvec(&tbl, write, buffer, lenp, ppos);
 426         if (write && ret == 0) {
 427                 struct sock *sk = net->sctp.ctl_sock;
 428
 429                 net->sctp.auth_enable = new_value;
 430                 /* Update the value in the control socket */
 431                 lock_sock(sk);
 432                 sctp_sk(sk)->ep->auth_enable = new_value;
 433                 release_sock(sk);
 434         }
 435
 436         return ret;
 437 }
 438
 439 int sctp_sysctl_net_register(struct net *net)
 440 {
 441         struct ctl_table *table = sctp_net_table;
 442
 443         if (!net_eq(net, &init_net)) {
 444                 int i;
 445
 446                 table = kmemdup(sctp_net_table, sizeof(sctp_net_table), GFP_KERNEL);
 447                 if (!table)
 448                         return -ENOMEM;
 449
 450                 for (i = 0; table[i].data; i++)
 451                         table[i].data += (char *)(&net->sctp) - (char *)&init_net.sctp;
 452         }
 453
 454         net->sctp.sysctl_header = register_net_sysctl(net, "net/sctp", table);
 455         return 0;
 456 }
 457
 458 void sctp_sysctl_net_unregister(struct net *net)
 459 {
 460         struct ctl_table *table;
 461
 462         table = net->sctp.sysctl_header->ctl_table_arg;
 463         unregister_net_sysctl_table(net->sctp.sysctl_header);
 464         kfree(table);
 465 }
 466
 467 static struct ctl_table_header *sctp_sysctl_header;
 468
 469 /* Sysctl registration.  */
 470 void sctp_sysctl_register(void)
 471 {
 472         sctp_sysctl_header = register_net_sysctl(&init_net, "net/sctp", sctp_table);
 473 }
 474
 475 /* Sysctl deregistration.  */
 476 void sctp_sysctl_unregister(void)
 477 {
 478         unregister_net_sysctl_table(sctp_sysctl_header);
 479 }