[thirdparty/kernel/linux.git] / ipc / ipc_sysctl.c

// SPDX-License-Identifier: GPL-2.0-only
/*
 *  Copyright (C) 2007
 *
 *  Author: Eric Biederman <ebiederm@xmision.com>
 */

#include <linux/module.h>
#include <linux/ipc.h>
#include <linux/nsproxy.h>
#include <linux/sysctl.h>
#include <linux/uaccess.h>
#include <linux/capability.h>
#include <linux/ipc_namespace.h>
#include <linux/msg.h>
#include <linux/slab.h>
#include <linux/cred.h>
#include "util.h"

static int proc_ipc_dointvec_minmax_orphans(struct ctl_table *table, int write,
		void *buffer, size_t *lenp, loff_t *ppos)
{
	struct ipc_namespace *ns =
		container_of(table->data, struct ipc_namespace, shm_rmid_forced);
	int err;

	err = proc_dointvec_minmax(table, write, buffer, lenp, ppos);

	if (err < 0)
		return err;
	if (ns->shm_rmid_forced)
		shm_destroy_orphaned(ns);
	return err;
}

static int proc_ipc_auto_msgmni(struct ctl_table *table, int write,
		void *buffer, size_t *lenp, loff_t *ppos)
{
	struct ctl_table ipc_table;
	int dummy = 0;

	memcpy(&ipc_table, table, sizeof(ipc_table));
	ipc_table.data = &dummy;

	if (write)
		pr_info_once("writing to auto_msgmni has no effect");

	return proc_dointvec_minmax(&ipc_table, write, buffer, lenp, ppos);
}

static int proc_ipc_sem_dointvec(struct ctl_table *table, int write,
	void *buffer, size_t *lenp, loff_t *ppos)
{
	struct ipc_namespace *ns =
		container_of(table->data, struct ipc_namespace, sem_ctls);
	int ret, semmni;

	semmni = ns->sem_ctls[3];
	ret = proc_dointvec(table, write, buffer, lenp, ppos);

	if (!ret)
		ret = sem_check_semmni(ns);

	/*
	 * Reset the semmni value if an error happens.
	 */
	if (ret)
		ns->sem_ctls[3] = semmni;
	return ret;
}

int ipc_mni = IPCMNI;
int ipc_mni_shift = IPCMNI_SHIFT;
int ipc_min_cycle = RADIX_TREE_MAP_SIZE;

static struct ctl_table ipc_sysctls[] = {
	{
		.procname	= "shmmax",
		.data		= &init_ipc_ns.shm_ctlmax,
		.maxlen		= sizeof(init_ipc_ns.shm_ctlmax),
		.mode		= 0644,
		.proc_handler	= proc_doulongvec_minmax,
	},
	{
		.procname	= "shmall",
		.data		= &init_ipc_ns.shm_ctlall,
		.maxlen		= sizeof(init_ipc_ns.shm_ctlall),
		.mode		= 0644,
		.proc_handler	= proc_doulongvec_minmax,
	},
	{
		.procname	= "shmmni",
		.data		= &init_ipc_ns.shm_ctlmni,
		.maxlen		= sizeof(init_ipc_ns.shm_ctlmni),
		.mode		= 0644,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= SYSCTL_ZERO,
		.extra2		= &ipc_mni,
	},
	{
		.procname	= "shm_rmid_forced",
		.data		= &init_ipc_ns.shm_rmid_forced,
		.maxlen		= sizeof(init_ipc_ns.shm_rmid_forced),
		.mode		= 0644,
		.proc_handler	= proc_ipc_dointvec_minmax_orphans,
		.extra1		= SYSCTL_ZERO,
		.extra2		= SYSCTL_ONE,
	},
	{
		.procname	= "msgmax",
		.data		= &init_ipc_ns.msg_ctlmax,
		.maxlen		= sizeof(init_ipc_ns.msg_ctlmax),
		.mode		= 0644,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= SYSCTL_ZERO,
		.extra2		= SYSCTL_INT_MAX,
	},
	{
		.procname	= "msgmni",
		.data		= &init_ipc_ns.msg_ctlmni,
		.maxlen		= sizeof(init_ipc_ns.msg_ctlmni),
		.mode		= 0644,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= SYSCTL_ZERO,
		.extra2		= &ipc_mni,
	},
	{
		.procname	= "auto_msgmni",
		.data		= NULL,
		.maxlen		= sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_ipc_auto_msgmni,
		.extra1		= SYSCTL_ZERO,
		.extra2		= SYSCTL_ONE,
	},
	{
		.procname	=  "msgmnb",
		.data		= &init_ipc_ns.msg_ctlmnb,
		.maxlen		= sizeof(init_ipc_ns.msg_ctlmnb),
		.mode		= 0644,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= SYSCTL_ZERO,
		.extra2		= SYSCTL_INT_MAX,
	},
	{
		.procname	= "sem",
		.data		= &init_ipc_ns.sem_ctls,
		.maxlen		= 4*sizeof(int),
		.mode		= 0644,
		.proc_handler	= proc_ipc_sem_dointvec,
	},
#ifdef CONFIG_CHECKPOINT_RESTORE
	{
		.procname	= "sem_next_id",
		.data		= &init_ipc_ns.ids[IPC_SEM_IDS].next_id,
		.maxlen		= sizeof(init_ipc_ns.ids[IPC_SEM_IDS].next_id),
		.mode		= 0444,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= SYSCTL_ZERO,
		.extra2		= SYSCTL_INT_MAX,
	},
	{
		.procname	= "msg_next_id",
		.data		= &init_ipc_ns.ids[IPC_MSG_IDS].next_id,
		.maxlen		= sizeof(init_ipc_ns.ids[IPC_MSG_IDS].next_id),
		.mode		= 0444,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= SYSCTL_ZERO,
		.extra2		= SYSCTL_INT_MAX,
	},
	{
		.procname	= "shm_next_id",
		.data		= &init_ipc_ns.ids[IPC_SHM_IDS].next_id,
		.maxlen		= sizeof(init_ipc_ns.ids[IPC_SHM_IDS].next_id),
		.mode		= 0444,
		.proc_handler	= proc_dointvec_minmax,
		.extra1		= SYSCTL_ZERO,
		.extra2		= SYSCTL_INT_MAX,
	},
#endif
	{}
};

static struct ctl_table_set *set_lookup(struct ctl_table_root *root)
{
	return &current->nsproxy->ipc_ns->ipc_set;
}

static int set_is_seen(struct ctl_table_set *set)
{
	return &current->nsproxy->ipc_ns->ipc_set == set;
}

static void ipc_set_ownership(struct ctl_table_header *head,
			      struct ctl_table *table,
			      kuid_t *uid, kgid_t *gid)
{
	struct ipc_namespace *ns =
		container_of(head->set, struct ipc_namespace, ipc_set);

	kuid_t ns_root_uid = make_kuid(ns->user_ns, 0);
	kgid_t ns_root_gid = make_kgid(ns->user_ns, 0);

	*uid = uid_valid(ns_root_uid) ? ns_root_uid : GLOBAL_ROOT_UID;
	*gid = gid_valid(ns_root_gid) ? ns_root_gid : GLOBAL_ROOT_GID;
}

static int ipc_permissions(struct ctl_table_header *head, struct ctl_table *table)
{
	int mode = table->mode;

#ifdef CONFIG_CHECKPOINT_RESTORE
	struct ipc_namespace *ns =
		container_of(head->set, struct ipc_namespace, ipc_set);

	if (((table->data == &ns->ids[IPC_SEM_IDS].next_id) ||
	     (table->data == &ns->ids[IPC_MSG_IDS].next_id) ||
	     (table->data == &ns->ids[IPC_SHM_IDS].next_id)) &&
	    checkpoint_restore_ns_capable(ns->user_ns))
		mode = 0666;
	else
#endif
	{
		kuid_t ns_root_uid;
		kgid_t ns_root_gid;

		ipc_set_ownership(head, table, &ns_root_uid, &ns_root_gid);

		if (uid_eq(current_euid(), ns_root_uid))
			mode >>= 6;

		else if (in_egroup_p(ns_root_gid))
			mode >>= 3;
	}

	mode &= 7;

	return (mode << 6) | (mode << 3) | mode;
}

static struct ctl_table_root set_root = {
	.lookup = set_lookup,
	.permissions = ipc_permissions,
	.set_ownership = ipc_set_ownership,
};

bool setup_ipc_sysctls(struct ipc_namespace *ns)
{
	struct ctl_table *tbl;

	setup_sysctl_set(&ns->ipc_set, &set_root, set_is_seen);

	tbl = kmemdup(ipc_sysctls, sizeof(ipc_sysctls), GFP_KERNEL);
	if (tbl) {
		int i;

		for (i = 0; i < ARRAY_SIZE(ipc_sysctls); i++) {
			if (tbl[i].data == &init_ipc_ns.shm_ctlmax)
				tbl[i].data = &ns->shm_ctlmax;

			else if (tbl[i].data == &init_ipc_ns.shm_ctlall)
				tbl[i].data = &ns->shm_ctlall;

			else if (tbl[i].data == &init_ipc_ns.shm_ctlmni)
				tbl[i].data = &ns->shm_ctlmni;

			else if (tbl[i].data == &init_ipc_ns.shm_rmid_forced)
				tbl[i].data = &ns->shm_rmid_forced;

			else if (tbl[i].data == &init_ipc_ns.msg_ctlmax)
				tbl[i].data = &ns->msg_ctlmax;

			else if (tbl[i].data == &init_ipc_ns.msg_ctlmni)
				tbl[i].data = &ns->msg_ctlmni;

			else if (tbl[i].data == &init_ipc_ns.msg_ctlmnb)
				tbl[i].data = &ns->msg_ctlmnb;

			else if (tbl[i].data == &init_ipc_ns.sem_ctls)
				tbl[i].data = &ns->sem_ctls;
#ifdef CONFIG_CHECKPOINT_RESTORE
			else if (tbl[i].data == &init_ipc_ns.ids[IPC_SEM_IDS].next_id)
				tbl[i].data = &ns->ids[IPC_SEM_IDS].next_id;

			else if (tbl[i].data == &init_ipc_ns.ids[IPC_MSG_IDS].next_id)
				tbl[i].data = &ns->ids[IPC_MSG_IDS].next_id;

			else if (tbl[i].data == &init_ipc_ns.ids[IPC_SHM_IDS].next_id)
				tbl[i].data = &ns->ids[IPC_SHM_IDS].next_id;
#endif
			else
				tbl[i].data = NULL;
		}

		ns->ipc_sysctls = __register_sysctl_table(&ns->ipc_set, "kernel", tbl,
							  ARRAY_SIZE(ipc_sysctls));
	}
	if (!ns->ipc_sysctls) {
		kfree(tbl);
		retire_sysctl_set(&ns->ipc_set);
		return false;
	}

	return true;
}

void retire_ipc_sysctls(struct ipc_namespace *ns)
{
	struct ctl_table *tbl;

	tbl = ns->ipc_sysctls->ctl_table_arg;
	unregister_sysctl_table(ns->ipc_sysctls);
	retire_sysctl_set(&ns->ipc_set);
	kfree(tbl);
}

static int __init ipc_sysctl_init(void)
{
	if (!setup_ipc_sysctls(&init_ipc_ns)) {
		pr_warn("ipc sysctl registration failed\n");
		return -ENOMEM;
	}
	return 0;
}

device_initcall(ipc_sysctl_init);

static int __init ipc_mni_extend(char *str)
{
	ipc_mni = IPCMNI_EXTEND;
	ipc_mni_shift = IPCMNI_EXTEND_SHIFT;
	ipc_min_cycle = IPCMNI_EXTEND_MIN_CYCLE;
	pr_info("IPCMNI extended to %d.\n", ipc_mni);
	return 0;
}
early_param("ipcmni_extend", ipc_mni_extend);
Commit	Line	Data
b886d83c	1	// SPDX-License-Identifier: GPL-2.0-only
a5494dcd EB	2	/*
	3	* Copyright (C) 2007
	4	*
	5	* Author: Eric Biederman <ebiederm@xmision.com>
a5494dcd EB	6	*/
	7
	8	#include <linux/module.h>
	9	#include <linux/ipc.h>
	10	#include <linux/nsproxy.h>
	11	#include <linux/sysctl.h>
	12	#include <linux/uaccess.h>
5563cabd	13	#include <linux/capability.h>
ae5e1b22	14	#include <linux/ipc_namespace.h>
6546bc42	15	#include <linux/msg.h>
1f5c135e	16	#include <linux/slab.h>
50ec499b	17	#include <linux/cred.h>
6546bc42	18	#include "util.h"
a5494dcd	19
1f5c135e	20	static int proc_ipc_dointvec_minmax_orphans(struct ctl_table *table, int write,
32927393	21	void buffer, size_t lenp, loff_t *ppos)
b34a6b1d	22	{
dd141a49 AG	23	struct ipc_namespace *ns =
dd141a49 AG	24	container_of(table->data, struct ipc_namespace, shm_rmid_forced);
1f5c135e	25	int err;
b34a6b1d	26
dd141a49	27	err = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
b34a6b1d VK	28
	29	if (err < 0)
	30	return err;
	31	if (ns->shm_rmid_forced)
	32	shm_destroy_orphaned(ns);
	33	return err;
	34	}
	35
0050ee05	36	static int proc_ipc_auto_msgmni(struct ctl_table *table, int write,
32927393	37	void buffer, size_t lenp, loff_t *ppos)
9eefe520 ND	38	{
9eefe520 ND	39	struct ctl_table ipc_table;
0050ee05	40	int dummy = 0;
9eefe520 ND	41
9eefe520 ND	42	memcpy(&ipc_table, table, sizeof(ipc_table));
0050ee05 MS	43	ipc_table.data = &dummy;
	44
	45	if (write)
	46	pr_info_once("writing to auto_msgmni has no effect");
	47
	48	return proc_dointvec_minmax(&ipc_table, write, buffer, lenp, ppos);
9eefe520 ND	49	}
9eefe520 ND	50
8c81ddd2	51	static int proc_ipc_sem_dointvec(struct ctl_table *table, int write,
fff1662c	52	void buffer, size_t lenp, loff_t *ppos)
8c81ddd2	53	{
dd141a49 AG	54	struct ipc_namespace *ns =
dd141a49 AG	55	container_of(table->data, struct ipc_namespace, sem_ctls);
8c81ddd2	56	int ret, semmni;
1f5c135e	57
8c81ddd2	58	semmni = ns->sem_ctls[3];
1f5c135e	59	ret = proc_dointvec(table, write, buffer, lenp, ppos);
8c81ddd2 WL	60
8c81ddd2 WL	61	if (!ret)
def7343f	62	ret = sem_check_semmni(ns);
8c81ddd2 WL	63
	64	/*
	65	* Reset the semmni value if an error happens.
	66	*/
	67	if (ret)
	68	ns->sem_ctls[3] = semmni;
	69	return ret;
	70	}
	71
5ac893b8 WL	72	int ipc_mni = IPCMNI;
5ac893b8 WL	73	int ipc_mni_shift = IPCMNI_SHIFT;
99db46ea	74	int ipc_min_cycle = RADIX_TREE_MAP_SIZE;
9eefe520	75
1f5c135e	76	static struct ctl_table ipc_sysctls[] = {
a5494dcd	77	{
a5494dcd EB	78	.procname = "shmmax",
a5494dcd EB	79	.data = &init_ipc_ns.shm_ctlmax,
239521f3	80	.maxlen = sizeof(init_ipc_ns.shm_ctlmax),
a5494dcd	81	.mode = 0644,
1f5c135e	82	.proc_handler = proc_doulongvec_minmax,
a5494dcd EB	83	},
a5494dcd EB	84	{
a5494dcd EB	85	.procname = "shmall",
a5494dcd EB	86	.data = &init_ipc_ns.shm_ctlall,
239521f3	87	.maxlen = sizeof(init_ipc_ns.shm_ctlall),
a5494dcd	88	.mode = 0644,
1f5c135e	89	.proc_handler = proc_doulongvec_minmax,
a5494dcd EB	90	},
a5494dcd EB	91	{
a5494dcd EB	92	.procname = "shmmni",
a5494dcd EB	93	.data = &init_ipc_ns.shm_ctlmni,
239521f3	94	.maxlen = sizeof(init_ipc_ns.shm_ctlmni),
a5494dcd	95	.mode = 0644,
1f5c135e	96	.proc_handler = proc_dointvec_minmax,
eec4844f	97	.extra1 = SYSCTL_ZERO,
6730e658	98	.extra2 = &ipc_mni,
a5494dcd	99	},
b34a6b1d VK	100	{
	101	.procname = "shm_rmid_forced",
	102	.data = &init_ipc_ns.shm_rmid_forced,
	103	.maxlen = sizeof(init_ipc_ns.shm_rmid_forced),
	104	.mode = 0644,
	105	.proc_handler = proc_ipc_dointvec_minmax_orphans,
dd141a49 AG	106	.extra1 = SYSCTL_ZERO,
dd141a49 AG	107	.extra2 = SYSCTL_ONE,
b34a6b1d	108	},
a5494dcd	109	{
a5494dcd EB	110	.procname = "msgmax",
a5494dcd EB	111	.data = &init_ipc_ns.msg_ctlmax,
239521f3	112	.maxlen = sizeof(init_ipc_ns.msg_ctlmax),
a5494dcd	113	.mode = 0644,
1f5c135e	114	.proc_handler = proc_dointvec_minmax,
eec4844f MC	115	.extra1 = SYSCTL_ZERO,
eec4844f MC	116	.extra2 = SYSCTL_INT_MAX,
a5494dcd EB	117	},
a5494dcd EB	118	{
a5494dcd EB	119	.procname = "msgmni",
a5494dcd EB	120	.data = &init_ipc_ns.msg_ctlmni,
239521f3	121	.maxlen = sizeof(init_ipc_ns.msg_ctlmni),
a5494dcd	122	.mode = 0644,
1f5c135e	123	.proc_handler = proc_dointvec_minmax,
eec4844f	124	.extra1 = SYSCTL_ZERO,
6730e658	125	.extra2 = &ipc_mni,
a5494dcd	126	},
0050ee05 MS	127	{
	128	.procname = "auto_msgmni",
	129	.data = NULL,
	130	.maxlen = sizeof(int),
	131	.mode = 0644,
	132	.proc_handler = proc_ipc_auto_msgmni,
eec4844f MC	133	.extra1 = SYSCTL_ZERO,
eec4844f MC	134	.extra2 = SYSCTL_ONE,
0050ee05	135	},
a5494dcd	136	{
a5494dcd EB	137	.procname = "msgmnb",
a5494dcd EB	138	.data = &init_ipc_ns.msg_ctlmnb,
239521f3	139	.maxlen = sizeof(init_ipc_ns.msg_ctlmnb),
a5494dcd	140	.mode = 0644,
1f5c135e	141	.proc_handler = proc_dointvec_minmax,
eec4844f MC	142	.extra1 = SYSCTL_ZERO,
eec4844f MC	143	.extra2 = SYSCTL_INT_MAX,
a5494dcd EB	144	},
a5494dcd EB	145	{
a5494dcd EB	146	.procname = "sem",
a5494dcd EB	147	.data = &init_ipc_ns.sem_ctls,
239521f3	148	.maxlen = 4*sizeof(int),
a5494dcd	149	.mode = 0644,
8c81ddd2	150	.proc_handler = proc_ipc_sem_dointvec,
a5494dcd	151	},
03f59566 SK	152	#ifdef CONFIG_CHECKPOINT_RESTORE
	153	{
	154	.procname = "sem_next_id",
	155	.data = &init_ipc_ns.ids[IPC_SEM_IDS].next_id,
	156	.maxlen = sizeof(init_ipc_ns.ids[IPC_SEM_IDS].next_id),
0889f44e AG	157	.mode = 0444,
	158	.proc_handler = proc_dointvec_minmax,
	159	.extra1 = SYSCTL_ZERO,
	160	.extra2 = SYSCTL_INT_MAX,
03f59566 SK	161	},
	162	{
	163	.procname = "msg_next_id",
	164	.data = &init_ipc_ns.ids[IPC_MSG_IDS].next_id,
	165	.maxlen = sizeof(init_ipc_ns.ids[IPC_MSG_IDS].next_id),
0889f44e AG	166	.mode = 0444,
	167	.proc_handler = proc_dointvec_minmax,
	168	.extra1 = SYSCTL_ZERO,
	169	.extra2 = SYSCTL_INT_MAX,
03f59566 SK	170	},
	171	{
	172	.procname = "shm_next_id",
	173	.data = &init_ipc_ns.ids[IPC_SHM_IDS].next_id,
	174	.maxlen = sizeof(init_ipc_ns.ids[IPC_SHM_IDS].next_id),
0889f44e AG	175	.mode = 0444,
	176	.proc_handler = proc_dointvec_minmax,
	177	.extra1 = SYSCTL_ZERO,
	178	.extra2 = SYSCTL_INT_MAX,
03f59566 SK	179	},
03f59566 SK	180	#endif
a5494dcd EB	181	{}
	182	};
	183
1f5c135e AG	184	static struct ctl_table_set set_lookup(struct ctl_table_root root)
	185	{
	186	return &current->nsproxy->ipc_ns->ipc_set;
	187	}
	188
	189	static int set_is_seen(struct ctl_table_set *set)
	190	{
	191	return &current->nsproxy->ipc_ns->ipc_set == set;
	192	}
	193
50ec499b AG	194	static void ipc_set_ownership(struct ctl_table_header *head,
	195	struct ctl_table *table,
	196	kuid_t uid, kgid_t gid)
	197	{
	198	struct ipc_namespace *ns =
	199	container_of(head->set, struct ipc_namespace, ipc_set);
	200
	201	kuid_t ns_root_uid = make_kuid(ns->user_ns, 0);
	202	kgid_t ns_root_gid = make_kgid(ns->user_ns, 0);
	203
	204	*uid = uid_valid(ns_root_uid) ? ns_root_uid : GLOBAL_ROOT_UID;
	205	*gid = gid_valid(ns_root_gid) ? ns_root_gid : GLOBAL_ROOT_GID;
	206	}
	207
0889f44e AG	208	static int ipc_permissions(struct ctl_table_header head, struct ctl_table table)
	209	{
	210	int mode = table->mode;
	211
	212	#ifdef CONFIG_CHECKPOINT_RESTORE
50ec499b AG	213	struct ipc_namespace *ns =
50ec499b AG	214	container_of(head->set, struct ipc_namespace, ipc_set);
0889f44e AG	215
	216	if (((table->data == &ns->ids[IPC_SEM_IDS].next_id) \|\|
	217	(table->data == &ns->ids[IPC_MSG_IDS].next_id) \|\|
	218	(table->data == &ns->ids[IPC_SHM_IDS].next_id)) &&
	219	checkpoint_restore_ns_capable(ns->user_ns))
	220	mode = 0666;
50ec499b	221	else
0889f44e	222	#endif
50ec499b AG	223	{
	224	kuid_t ns_root_uid;
	225	kgid_t ns_root_gid;
	226
	227	ipc_set_ownership(head, table, &ns_root_uid, &ns_root_gid);
	228
	229	if (uid_eq(current_euid(), ns_root_uid))
	230	mode >>= 6;
	231
	232	else if (in_egroup_p(ns_root_gid))
	233	mode >>= 3;
	234	}
	235
	236	mode &= 7;
	237
	238	return (mode << 6) \| (mode << 3) \| mode;
0889f44e AG	239	}
0889f44e AG	240
1f5c135e AG	241	static struct ctl_table_root set_root = {
1f5c135e AG	242	.lookup = set_lookup,
0889f44e	243	.permissions = ipc_permissions,
50ec499b	244	.set_ownership = ipc_set_ownership,
a5494dcd EB	245	};
a5494dcd EB	246
1f5c135e AG	247	bool setup_ipc_sysctls(struct ipc_namespace *ns)
	248	{
	249	struct ctl_table *tbl;
	250
	251	setup_sysctl_set(&ns->ipc_set, &set_root, set_is_seen);
	252
	253	tbl = kmemdup(ipc_sysctls, sizeof(ipc_sysctls), GFP_KERNEL);
	254	if (tbl) {
	255	int i;
	256
	257	for (i = 0; i < ARRAY_SIZE(ipc_sysctls); i++) {
38cd5b12	258	if (tbl[i].data == &init_ipc_ns.shm_ctlmax)
1f5c135e AG	259	tbl[i].data = &ns->shm_ctlmax;
1f5c135e AG	260
38cd5b12	261	else if (tbl[i].data == &init_ipc_ns.shm_ctlall)
1f5c135e AG	262	tbl[i].data = &ns->shm_ctlall;
1f5c135e AG	263
38cd5b12	264	else if (tbl[i].data == &init_ipc_ns.shm_ctlmni)
1f5c135e AG	265	tbl[i].data = &ns->shm_ctlmni;
1f5c135e AG	266
38cd5b12	267	else if (tbl[i].data == &init_ipc_ns.shm_rmid_forced)
1f5c135e	268	tbl[i].data = &ns->shm_rmid_forced;
1f5c135e	269
38cd5b12	270	else if (tbl[i].data == &init_ipc_ns.msg_ctlmax)
1f5c135e AG	271	tbl[i].data = &ns->msg_ctlmax;
1f5c135e AG	272
38cd5b12	273	else if (tbl[i].data == &init_ipc_ns.msg_ctlmni)
1f5c135e AG	274	tbl[i].data = &ns->msg_ctlmni;
1f5c135e AG	275
38cd5b12	276	else if (tbl[i].data == &init_ipc_ns.msg_ctlmnb)
1f5c135e AG	277	tbl[i].data = &ns->msg_ctlmnb;
1f5c135e AG	278
38cd5b12	279	else if (tbl[i].data == &init_ipc_ns.sem_ctls)
1f5c135e	280	tbl[i].data = &ns->sem_ctls;
1f5c135e	281	#ifdef CONFIG_CHECKPOINT_RESTORE
38cd5b12	282	else if (tbl[i].data == &init_ipc_ns.ids[IPC_SEM_IDS].next_id)
1f5c135e	283	tbl[i].data = &ns->ids[IPC_SEM_IDS].next_id;
1f5c135e	284
38cd5b12	285	else if (tbl[i].data == &init_ipc_ns.ids[IPC_MSG_IDS].next_id)
1f5c135e	286	tbl[i].data = &ns->ids[IPC_MSG_IDS].next_id;
1f5c135e	287
38cd5b12	288	else if (tbl[i].data == &init_ipc_ns.ids[IPC_SHM_IDS].next_id)
1f5c135e	289	tbl[i].data = &ns->ids[IPC_SHM_IDS].next_id;
1f5c135e	290	#endif
38cd5b12	291	else
1f5c135e	292	tbl[i].data = NULL;
1f5c135e AG	293	}
1f5c135e AG	294
8e882910	295	ns->ipc_sysctls = __register_sysctl_table(&ns->ipc_set, "kernel", tbl,
bff97cf1	296	ARRAY_SIZE(ipc_sysctls));
1f5c135e AG	297	}
	298	if (!ns->ipc_sysctls) {
	299	kfree(tbl);
	300	retire_sysctl_set(&ns->ipc_set);
	301	return false;
	302	}
	303
	304	return true;
	305	}
	306
	307	void retire_ipc_sysctls(struct ipc_namespace *ns)
	308	{
	309	struct ctl_table *tbl;
	310
	311	tbl = ns->ipc_sysctls->ctl_table_arg;
	312	unregister_sysctl_table(ns->ipc_sysctls);
	313	retire_sysctl_set(&ns->ipc_set);
	314	kfree(tbl);
	315	}
	316
a5494dcd EB	317	static int __init ipc_sysctl_init(void)
a5494dcd EB	318	{
1f5c135e AG	319	if (!setup_ipc_sysctls(&init_ipc_ns)) {
	320	pr_warn("ipc sysctl registration failed\n");
	321	return -ENOMEM;
	322	}
a5494dcd EB	323	return 0;
	324	}
	325
6d08a256	326	device_initcall(ipc_sysctl_init);
5ac893b8 WL	327
	328	static int __init ipc_mni_extend(char *str)
	329	{
	330	ipc_mni = IPCMNI_EXTEND;
	331	ipc_mni_shift = IPCMNI_EXTEND_SHIFT;
99db46ea	332	ipc_min_cycle = IPCMNI_EXTEND_MIN_CYCLE;
5ac893b8 WL	333	pr_info("IPCMNI extended to %d.\n", ipc_mni);
	334	return 0;
	335	}
	336	early_param("ipcmni_extend", ipc_mni_extend);