1 // SPDX-License-Identifier: GPL-2.0-only
5 * Author: Eric Biederman <ebiederm@xmision.com>
8 #include <linux/module.h>
10 #include <linux/nsproxy.h>
11 #include <linux/sysctl.h>
12 #include <linux/uaccess.h>
13 #include <linux/capability.h>
14 #include <linux/ipc_namespace.h>
15 #include <linux/msg.h>
18 static void *get_ipc(struct ctl_table
*table
)
20 char *which
= table
->data
;
21 struct ipc_namespace
*ipc_ns
= current
->nsproxy
->ipc_ns
;
22 which
= (which
- (char *)&init_ipc_ns
) + (char *)ipc_ns
;
26 static int proc_ipc_dointvec(struct ctl_table
*table
, int write
,
27 void *buffer
, size_t *lenp
, loff_t
*ppos
)
29 struct ctl_table ipc_table
;
31 memcpy(&ipc_table
, table
, sizeof(ipc_table
));
32 ipc_table
.data
= get_ipc(table
);
34 return proc_dointvec(&ipc_table
, write
, buffer
, lenp
, ppos
);
37 static int proc_ipc_dointvec_minmax(struct ctl_table
*table
, int write
,
38 void *buffer
, size_t *lenp
, loff_t
*ppos
)
40 struct ctl_table ipc_table
;
42 memcpy(&ipc_table
, table
, sizeof(ipc_table
));
43 ipc_table
.data
= get_ipc(table
);
45 return proc_dointvec_minmax(&ipc_table
, write
, buffer
, lenp
, ppos
);
48 static int proc_ipc_dointvec_minmax_orphans(struct ctl_table
*table
, int write
,
49 void *buffer
, size_t *lenp
, loff_t
*ppos
)
51 struct ipc_namespace
*ns
= current
->nsproxy
->ipc_ns
;
52 int err
= proc_ipc_dointvec_minmax(table
, write
, buffer
, lenp
, ppos
);
56 if (ns
->shm_rmid_forced
)
57 shm_destroy_orphaned(ns
);
61 static int proc_ipc_doulongvec_minmax(struct ctl_table
*table
, int write
,
62 void *buffer
, size_t *lenp
, loff_t
*ppos
)
64 struct ctl_table ipc_table
;
65 memcpy(&ipc_table
, table
, sizeof(ipc_table
));
66 ipc_table
.data
= get_ipc(table
);
68 return proc_doulongvec_minmax(&ipc_table
, write
, buffer
,
72 static int proc_ipc_auto_msgmni(struct ctl_table
*table
, int write
,
73 void *buffer
, size_t *lenp
, loff_t
*ppos
)
75 struct ctl_table ipc_table
;
78 memcpy(&ipc_table
, table
, sizeof(ipc_table
));
79 ipc_table
.data
= &dummy
;
82 pr_info_once("writing to auto_msgmni has no effect");
84 return proc_dointvec_minmax(&ipc_table
, write
, buffer
, lenp
, ppos
);
87 static int proc_ipc_sem_dointvec(struct ctl_table
*table
, int write
,
88 void *buffer
, size_t *lenp
, loff_t
*ppos
)
91 struct ipc_namespace
*ns
= current
->nsproxy
->ipc_ns
;
93 semmni
= ns
->sem_ctls
[3];
94 ret
= proc_ipc_dointvec(table
, write
, buffer
, lenp
, ppos
);
97 ret
= sem_check_semmni(current
->nsproxy
->ipc_ns
);
100 * Reset the semmni value if an error happens.
103 ns
->sem_ctls
[3] = semmni
;
107 #ifdef CONFIG_CHECKPOINT_RESTORE
108 static int proc_ipc_dointvec_minmax_checkpoint_restore(struct ctl_table
*table
,
109 int write
, void *buffer
, size_t *lenp
, loff_t
*ppos
)
111 struct user_namespace
*user_ns
= current
->nsproxy
->ipc_ns
->user_ns
;
113 if (write
&& !checkpoint_restore_ns_capable(user_ns
))
116 return proc_ipc_dointvec_minmax(table
, write
, buffer
, lenp
, ppos
);
120 int ipc_mni
= IPCMNI
;
121 int ipc_mni_shift
= IPCMNI_SHIFT
;
122 int ipc_min_cycle
= RADIX_TREE_MAP_SIZE
;
124 static struct ctl_table ipc_kern_table
[] = {
126 .procname
= "shmmax",
127 .data
= &init_ipc_ns
.shm_ctlmax
,
128 .maxlen
= sizeof(init_ipc_ns
.shm_ctlmax
),
130 .proc_handler
= proc_ipc_doulongvec_minmax
,
133 .procname
= "shmall",
134 .data
= &init_ipc_ns
.shm_ctlall
,
135 .maxlen
= sizeof(init_ipc_ns
.shm_ctlall
),
137 .proc_handler
= proc_ipc_doulongvec_minmax
,
140 .procname
= "shmmni",
141 .data
= &init_ipc_ns
.shm_ctlmni
,
142 .maxlen
= sizeof(init_ipc_ns
.shm_ctlmni
),
144 .proc_handler
= proc_ipc_dointvec_minmax
,
145 .extra1
= SYSCTL_ZERO
,
149 .procname
= "shm_rmid_forced",
150 .data
= &init_ipc_ns
.shm_rmid_forced
,
151 .maxlen
= sizeof(init_ipc_ns
.shm_rmid_forced
),
153 .proc_handler
= proc_ipc_dointvec_minmax_orphans
,
154 .extra1
= SYSCTL_ZERO
,
155 .extra2
= SYSCTL_ONE
,
158 .procname
= "msgmax",
159 .data
= &init_ipc_ns
.msg_ctlmax
,
160 .maxlen
= sizeof(init_ipc_ns
.msg_ctlmax
),
162 .proc_handler
= proc_ipc_dointvec_minmax
,
163 .extra1
= SYSCTL_ZERO
,
164 .extra2
= SYSCTL_INT_MAX
,
167 .procname
= "msgmni",
168 .data
= &init_ipc_ns
.msg_ctlmni
,
169 .maxlen
= sizeof(init_ipc_ns
.msg_ctlmni
),
171 .proc_handler
= proc_ipc_dointvec_minmax
,
172 .extra1
= SYSCTL_ZERO
,
176 .procname
= "auto_msgmni",
178 .maxlen
= sizeof(int),
180 .proc_handler
= proc_ipc_auto_msgmni
,
181 .extra1
= SYSCTL_ZERO
,
182 .extra2
= SYSCTL_ONE
,
185 .procname
= "msgmnb",
186 .data
= &init_ipc_ns
.msg_ctlmnb
,
187 .maxlen
= sizeof(init_ipc_ns
.msg_ctlmnb
),
189 .proc_handler
= proc_ipc_dointvec_minmax
,
190 .extra1
= SYSCTL_ZERO
,
191 .extra2
= SYSCTL_INT_MAX
,
195 .data
= &init_ipc_ns
.sem_ctls
,
196 .maxlen
= 4*sizeof(int),
198 .proc_handler
= proc_ipc_sem_dointvec
,
200 #ifdef CONFIG_CHECKPOINT_RESTORE
202 .procname
= "sem_next_id",
203 .data
= &init_ipc_ns
.ids
[IPC_SEM_IDS
].next_id
,
204 .maxlen
= sizeof(init_ipc_ns
.ids
[IPC_SEM_IDS
].next_id
),
206 .proc_handler
= proc_ipc_dointvec_minmax_checkpoint_restore
,
207 .extra1
= SYSCTL_ZERO
,
208 .extra2
= SYSCTL_INT_MAX
,
211 .procname
= "msg_next_id",
212 .data
= &init_ipc_ns
.ids
[IPC_MSG_IDS
].next_id
,
213 .maxlen
= sizeof(init_ipc_ns
.ids
[IPC_MSG_IDS
].next_id
),
215 .proc_handler
= proc_ipc_dointvec_minmax_checkpoint_restore
,
216 .extra1
= SYSCTL_ZERO
,
217 .extra2
= SYSCTL_INT_MAX
,
220 .procname
= "shm_next_id",
221 .data
= &init_ipc_ns
.ids
[IPC_SHM_IDS
].next_id
,
222 .maxlen
= sizeof(init_ipc_ns
.ids
[IPC_SHM_IDS
].next_id
),
224 .proc_handler
= proc_ipc_dointvec_minmax_checkpoint_restore
,
225 .extra1
= SYSCTL_ZERO
,
226 .extra2
= SYSCTL_INT_MAX
,
232 static struct ctl_table ipc_root_table
[] = {
234 .procname
= "kernel",
236 .child
= ipc_kern_table
,
241 static int __init
ipc_sysctl_init(void)
243 register_sysctl_table(ipc_root_table
);
247 device_initcall(ipc_sysctl_init
);
249 static int __init
ipc_mni_extend(char *str
)
251 ipc_mni
= IPCMNI_EXTEND
;
252 ipc_mni_shift
= IPCMNI_EXTEND_SHIFT
;
253 ipc_min_cycle
= IPCMNI_EXTEND_MIN_CYCLE
;
254 pr_info("IPCMNI extended to %d.\n", ipc_mni
);
257 early_param("ipcmni_extend", ipc_mni_extend
);