projects/linux·blob v5.13-rc5 · refs

3434 lines · 80.0 KiB

1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * sysctl.c: General linux system control interface
4 *
5 * Begun 24 March 1995, Stephen Tweedie
6 * Added /proc support, Dec 1995
7 * Added bdflush entry and intvec min/max checking, 2/23/96, Tom Dyas.
8 * Added hooks for /proc/sys/net (minor, minor patch), 96/4/1, Mike Shaver.
9 * Added kernel/java-{interpreter,appletviewer}, 96/5/10, Mike Shaver.
10 * Dynamic registration fixes, Stephen Tweedie.
11 * Added kswapd-interval, ctrl-alt-del, printk stuff, 1/8/97, Chris Horn.
12 * Made sysctl support optional via CONFIG_SYSCTL, 1/10/97, Chris
13 * Horn.
14 * Added proc_doulongvec_ms_jiffies_minmax, 09/08/99, Carlos H. Bauer.
15 * Added proc_doulongvec_minmax, 09/08/99, Carlos H. Bauer.
16 * Changed linked lists to use list.h instead of lists.h, 02/24/00, Bill
17 * Wendling.
18 * The list_for_each() macro wasn't appropriate for the sysctl loop.
19 * Removed it and replaced it with older style, 03/23/00, Bill Wendling
20 */
21
22#include <linux/module.h>
23#include <linux/aio.h>
24#include <linux/mm.h>
25#include <linux/swap.h>
26#include <linux/slab.h>
27#include <linux/sysctl.h>
28#include <linux/bitmap.h>
29#include <linux/signal.h>
30#include <linux/printk.h>
31#include <linux/proc_fs.h>
32#include <linux/security.h>
33#include <linux/ctype.h>
34#include <linux/kmemleak.h>
35#include <linux/fs.h>
36#include <linux/init.h>
37#include <linux/kernel.h>
38#include <linux/kobject.h>
39#include <linux/net.h>
40#include <linux/sysrq.h>
41#include <linux/highuid.h>
42#include <linux/writeback.h>
43#include <linux/ratelimit.h>
44#include <linux/compaction.h>
45#include <linux/hugetlb.h>
46#include <linux/initrd.h>
47#include <linux/key.h>
48#include <linux/times.h>
49#include <linux/limits.h>
50#include <linux/dcache.h>
51#include <linux/dnotify.h>
52#include <linux/syscalls.h>
53#include <linux/vmstat.h>
54#include <linux/nfs_fs.h>
55#include <linux/acpi.h>
56#include <linux/reboot.h>
57#include <linux/ftrace.h>
58#include <linux/perf_event.h>
59#include <linux/kprobes.h>
60#include <linux/pipe_fs_i.h>
61#include <linux/oom.h>
62#include <linux/kmod.h>
63#include <linux/capability.h>
64#include <linux/binfmts.h>
65#include <linux/sched/sysctl.h>
66#include <linux/sched/coredump.h>
67#include <linux/kexec.h>
68#include <linux/bpf.h>
69#include <linux/mount.h>
70#include <linux/userfaultfd_k.h>
71#include <linux/coredump.h>
72#include <linux/latencytop.h>
73#include <linux/pid.h>
74
75#include "../lib/kstrtox.h"
76
77#include <linux/uaccess.h>
78#include <asm/processor.h>
79
80#ifdef CONFIG_X86
81#include <asm/nmi.h>
82#include <asm/stacktrace.h>
83#include <asm/io.h>
84#endif
85#ifdef CONFIG_SPARC
86#include <asm/setup.h>
87#endif
88#ifdef CONFIG_BSD_PROCESS_ACCT
89#include <linux/acct.h>
90#endif
91#ifdef CONFIG_RT_MUTEXES
92#include <linux/rtmutex.h>
93#endif
94#if defined(CONFIG_PROVE_LOCKING) || defined(CONFIG_LOCK_STAT)
95#include <linux/lockdep.h>
96#endif
97#ifdef CONFIG_CHR_DEV_SG
98#include <scsi/sg.h>
99#endif
100#ifdef CONFIG_STACKLEAK_RUNTIME_DISABLE
101#include <linux/stackleak.h>
102#endif
103#ifdef CONFIG_LOCKUP_DETECTOR
104#include <linux/nmi.h>
105#endif
106
107#if defined(CONFIG_SYSCTL)
108
109/* Constants used for minimum and maximum */
110#ifdef CONFIG_LOCKUP_DETECTOR
111static int sixty = 60;
112#endif
113
114static int __maybe_unused neg_one = -1;
115static int __maybe_unused two = 2;
116static int __maybe_unused four = 4;
117static unsigned long zero_ul;
118static unsigned long one_ul = 1;
119static unsigned long long_max = LONG_MAX;
120static int one_hundred = 100;
121static int two_hundred = 200;
122static int one_thousand = 1000;
123#ifdef CONFIG_PRINTK
124static int ten_thousand = 10000;
125#endif
126#ifdef CONFIG_PERF_EVENTS
127static int six_hundred_forty_kb = 640 * 1024;
128#endif
129
130/* this is needed for the proc_doulongvec_minmax of vm_dirty_bytes */
131static unsigned long dirty_bytes_min = 2 * PAGE_SIZE;
132
133/* this is needed for the proc_dointvec_minmax for [fs_]overflow UID and GID */
134static int maxolduid = 65535;
135static int minolduid;
136
137static int ngroups_max = NGROUPS_MAX;
138static const int cap_last_cap = CAP_LAST_CAP;
139
140/*
141 * This is needed for proc_doulongvec_minmax of sysctl_hung_task_timeout_secs
142 * and hung_task_check_interval_secs
143 */
144#ifdef CONFIG_DETECT_HUNG_TASK
145static unsigned long hung_task_timeout_max = (LONG_MAX/HZ);
146#endif
147
148#ifdef CONFIG_INOTIFY_USER
149#include <linux/inotify.h>
150#endif
151#ifdef CONFIG_FANOTIFY
152#include <linux/fanotify.h>
153#endif
154
155#ifdef CONFIG_PROC_SYSCTL
156
157/**
158 * enum sysctl_writes_mode - supported sysctl write modes
159 *
160 * @SYSCTL_WRITES_LEGACY: each write syscall must fully contain the sysctl value
161 * to be written, and multiple writes on the same sysctl file descriptor
162 * will rewrite the sysctl value, regardless of file position. No warning
163 * is issued when the initial position is not 0.
164 * @SYSCTL_WRITES_WARN: same as above but warn when the initial file position is
165 * not 0.
166 * @SYSCTL_WRITES_STRICT: writes to numeric sysctl entries must always be at
167 * file position 0 and the value must be fully contained in the buffer
168 * sent to the write syscall. If dealing with strings respect the file
169 * position, but restrict this to the max length of the buffer, anything
170 * passed the max length will be ignored. Multiple writes will append
171 * to the buffer.
172 *
173 * These write modes control how current file position affects the behavior of
174 * updating sysctl values through the proc interface on each write.
175 */
176enum sysctl_writes_mode {
177 SYSCTL_WRITES_LEGACY = -1,
178 SYSCTL_WRITES_WARN = 0,
179 SYSCTL_WRITES_STRICT = 1,
180};
181
182static enum sysctl_writes_mode sysctl_writes_strict = SYSCTL_WRITES_STRICT;
183#endif /* CONFIG_PROC_SYSCTL */
184
185#if defined(HAVE_ARCH_PICK_MMAP_LAYOUT) || \
186 defined(CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT)
187int sysctl_legacy_va_layout;
188#endif
189
190#ifdef CONFIG_COMPACTION
191static int min_extfrag_threshold;
192static int max_extfrag_threshold = 1000;
193#endif
194
195#endif /* CONFIG_SYSCTL */
196
197#if defined(CONFIG_BPF_SYSCALL) && defined(CONFIG_SYSCTL)
198static int bpf_stats_handler(struct ctl_table *table, int write,
199 void *buffer, size_t *lenp, loff_t *ppos)
200{
201 struct static_key *key = (struct static_key *)table->data;
202 static int saved_val;
203 int val, ret;
204 struct ctl_table tmp = {
205 .data = &val,
206 .maxlen = sizeof(val),
207 .mode = table->mode,
208 .extra1 = SYSCTL_ZERO,
209 .extra2 = SYSCTL_ONE,
210 };
211
212 if (write && !capable(CAP_SYS_ADMIN))
213 return -EPERM;
214
215 mutex_lock(&bpf_stats_enabled_mutex);
216 val = saved_val;
217 ret = proc_dointvec_minmax(&tmp, write, buffer, lenp, ppos);
218 if (write && !ret && val != saved_val) {
219 if (val)
220 static_key_slow_inc(key);
221 else
222 static_key_slow_dec(key);
223 saved_val = val;
224 }
225 mutex_unlock(&bpf_stats_enabled_mutex);
226 return ret;
227}
228
229static int bpf_unpriv_handler(struct ctl_table *table, int write,
230 void *buffer, size_t *lenp, loff_t *ppos)
231{
232 int ret, unpriv_enable = *(int *)table->data;
233 bool locked_state = unpriv_enable == 1;
234 struct ctl_table tmp = *table;
235
236 if (write && !capable(CAP_SYS_ADMIN))
237 return -EPERM;
238
239 tmp.data = &unpriv_enable;
240 ret = proc_dointvec_minmax(&tmp, write, buffer, lenp, ppos);
241 if (write && !ret) {
242 if (locked_state && unpriv_enable != 1)
243 return -EPERM;
244 *(int *)table->data = unpriv_enable;
245 }
246 return ret;
247}
248#endif /* CONFIG_BPF_SYSCALL && CONFIG_SYSCTL */
249
250/*
251 * /proc/sys support
252 */
253
254#ifdef CONFIG_PROC_SYSCTL
255
256static int _proc_do_string(char *data, int maxlen, int write,
257 char *buffer, size_t *lenp, loff_t *ppos)
258{
259 size_t len;
260 char c, *p;
261
262 if (!data || !maxlen || !*lenp) {
263 *lenp = 0;
264 return 0;
265 }
266
267 if (write) {
268 if (sysctl_writes_strict == SYSCTL_WRITES_STRICT) {
269 /* Only continue writes not past the end of buffer. */
270 len = strlen(data);
271 if (len > maxlen - 1)
272 len = maxlen - 1;
273
274 if (*ppos > len)
275 return 0;
276 len = *ppos;
277 } else {
278 /* Start writing from beginning of buffer. */
279 len = 0;
280 }
281
282 *ppos += *lenp;
283 p = buffer;
284 while ((p - buffer) < *lenp && len < maxlen - 1) {
285 c = *(p++);
286 if (c == 0 || c == '\n')
287 break;
288 data[len++] = c;
289 }
290 data[len] = 0;
291 } else {
292 len = strlen(data);
293 if (len > maxlen)
294 len = maxlen;
295
296 if (*ppos > len) {
297 *lenp = 0;
298 return 0;
299 }
300
301 data += *ppos;
302 len -= *ppos;
303
304 if (len > *lenp)
305 len = *lenp;
306 if (len)
307 memcpy(buffer, data, len);
308 if (len < *lenp) {
309 buffer[len] = '\n';
310 len++;
311 }
312 *lenp = len;
313 *ppos += len;
314 }
315 return 0;
316}
317
318static void warn_sysctl_write(struct ctl_table *table)
319{
320 pr_warn_once("%s wrote to %s when file position was not 0!\n"
321 "This will not be supported in the future. To silence this\n"
322 "warning, set kernel.sysctl_writes_strict = -1\n",
323 current->comm, table->procname);
324}
325
326/**
327 * proc_first_pos_non_zero_ignore - check if first position is allowed
328 * @ppos: file position
329 * @table: the sysctl table
330 *
331 * Returns true if the first position is non-zero and the sysctl_writes_strict
332 * mode indicates this is not allowed for numeric input types. String proc
333 * handlers can ignore the return value.
334 */
335static bool proc_first_pos_non_zero_ignore(loff_t *ppos,
336 struct ctl_table *table)
337{
338 if (!*ppos)
339 return false;
340
341 switch (sysctl_writes_strict) {
342 case SYSCTL_WRITES_STRICT:
343 return true;
344 case SYSCTL_WRITES_WARN:
345 warn_sysctl_write(table);
346 return false;
347 default:
348 return false;
349 }
350}
351
352/**
353 * proc_dostring - read a string sysctl
354 * @table: the sysctl table
355 * @write: %TRUE if this is a write to the sysctl file
356 * @buffer: the user buffer
357 * @lenp: the size of the user buffer
358 * @ppos: file position
359 *
360 * Reads/writes a string from/to the user buffer. If the kernel
361 * buffer provided is not large enough to hold the string, the
362 * string is truncated. The copied string is %NULL-terminated.
363 * If the string is being read by the user process, it is copied
364 * and a newline '\n' is added. It is truncated if the buffer is
365 * not large enough.
366 *
367 * Returns 0 on success.
368 */
369int proc_dostring(struct ctl_table *table, int write,
370 void *buffer, size_t *lenp, loff_t *ppos)
371{
372 if (write)
373 proc_first_pos_non_zero_ignore(ppos, table);
374
375 return _proc_do_string(table->data, table->maxlen, write, buffer, lenp,
376 ppos);
377}
378
379static size_t proc_skip_spaces(char **buf)
380{
381 size_t ret;
382 char *tmp = skip_spaces(*buf);
383 ret = tmp - *buf;
384 *buf = tmp;
385 return ret;
386}
387
388static void proc_skip_char(char **buf, size_t *size, const char v)
389{
390 while (*size) {
391 if (**buf != v)
392 break;
393 (*size)--;
394 (*buf)++;
395 }
396}
397
398/**
399 * strtoul_lenient - parse an ASCII formatted integer from a buffer and only
400 * fail on overflow
401 *
402 * @cp: kernel buffer containing the string to parse
403 * @endp: pointer to store the trailing characters
404 * @base: the base to use
405 * @res: where the parsed integer will be stored
406 *
407 * In case of success 0 is returned and @res will contain the parsed integer,
408 * @endp will hold any trailing characters.
409 * This function will fail the parse on overflow. If there wasn't an overflow
410 * the function will defer the decision what characters count as invalid to the
411 * caller.
412 */
413static int strtoul_lenient(const char *cp, char **endp, unsigned int base,
414 unsigned long *res)
415{
416 unsigned long long result;
417 unsigned int rv;
418
419 cp = _parse_integer_fixup_radix(cp, &base);
420 rv = _parse_integer(cp, base, &result);
421 if ((rv & KSTRTOX_OVERFLOW) || (result != (unsigned long)result))
422 return -ERANGE;
423
424 cp += rv;
425
426 if (endp)
427 *endp = (char *)cp;
428
429 *res = (unsigned long)result;
430 return 0;
431}
432
433#define TMPBUFLEN 22
434/**
435 * proc_get_long - reads an ASCII formatted integer from a user buffer
436 *
437 * @buf: a kernel buffer
438 * @size: size of the kernel buffer
439 * @val: this is where the number will be stored
440 * @neg: set to %TRUE if number is negative
441 * @perm_tr: a vector which contains the allowed trailers
442 * @perm_tr_len: size of the perm_tr vector
443 * @tr: pointer to store the trailer character
444 *
445 * In case of success %0 is returned and @buf and @size are updated with
446 * the amount of bytes read. If @tr is non-NULL and a trailing
447 * character exists (size is non-zero after returning from this
448 * function), @tr is updated with the trailing character.
449 */
450static int proc_get_long(char **buf, size_t *size,
451 unsigned long *val, bool *neg,
452 const char *perm_tr, unsigned perm_tr_len, char *tr)
453{
454 int len;
455 char *p, tmp[TMPBUFLEN];
456
457 if (!*size)
458 return -EINVAL;
459
460 len = *size;
461 if (len > TMPBUFLEN - 1)
462 len = TMPBUFLEN - 1;
463
464 memcpy(tmp, *buf, len);
465
466 tmp[len] = 0;
467 p = tmp;
468 if (*p == '-' && *size > 1) {
469 *neg = true;
470 p++;
471 } else
472 *neg = false;
473 if (!isdigit(*p))
474 return -EINVAL;
475
476 if (strtoul_lenient(p, &p, 0, val))
477 return -EINVAL;
478
479 len = p - tmp;
480
481 /* We don't know if the next char is whitespace thus we may accept
482 * invalid integers (e.g. 1234...a) or two integers instead of one
483 * (e.g. 123...1). So lets not allow such large numbers. */
484 if (len == TMPBUFLEN - 1)
485 return -EINVAL;
486
487 if (len < *size && perm_tr_len && !memchr(perm_tr, *p, perm_tr_len))
488 return -EINVAL;
489
490 if (tr && (len < *size))
491 *tr = *p;
492
493 *buf += len;
494 *size -= len;
495
496 return 0;
497}
498
499/**
500 * proc_put_long - converts an integer to a decimal ASCII formatted string
501 *
502 * @buf: the user buffer
503 * @size: the size of the user buffer
504 * @val: the integer to be converted
505 * @neg: sign of the number, %TRUE for negative
506 *
507 * In case of success @buf and @size are updated with the amount of bytes
508 * written.
509 */
510static void proc_put_long(void **buf, size_t *size, unsigned long val, bool neg)
511{
512 int len;
513 char tmp[TMPBUFLEN], *p = tmp;
514
515 sprintf(p, "%s%lu", neg ? "-" : "", val);
516 len = strlen(tmp);
517 if (len > *size)
518 len = *size;
519 memcpy(*buf, tmp, len);
520 *size -= len;
521 *buf += len;
522}
523#undef TMPBUFLEN
524
525static void proc_put_char(void **buf, size_t *size, char c)
526{
527 if (*size) {
528 char **buffer = (char **)buf;
529 **buffer = c;
530
531 (*size)--;
532 (*buffer)++;
533 *buf = *buffer;
534 }
535}
536
537static int do_proc_dointvec_conv(bool *negp, unsigned long *lvalp,
538 int *valp,
539 int write, void *data)
540{
541 if (write) {
542 if (*negp) {
543 if (*lvalp > (unsigned long) INT_MAX + 1)
544 return -EINVAL;
545 *valp = -*lvalp;
546 } else {
547 if (*lvalp > (unsigned long) INT_MAX)
548 return -EINVAL;
549 *valp = *lvalp;
550 }
551 } else {
552 int val = *valp;
553 if (val < 0) {
554 *negp = true;
555 *lvalp = -(unsigned long)val;
556 } else {
557 *negp = false;
558 *lvalp = (unsigned long)val;
559 }
560 }
561 return 0;
562}
563
564static int do_proc_douintvec_conv(unsigned long *lvalp,
565 unsigned int *valp,
566 int write, void *data)
567{
568 if (write) {
569 if (*lvalp > UINT_MAX)
570 return -EINVAL;
571 *valp = *lvalp;
572 } else {
573 unsigned int val = *valp;
574 *lvalp = (unsigned long)val;
575 }
576 return 0;
577}
578
579static const char proc_wspace_sep[] = { ' ', '\t', '\n' };
580
581static int __do_proc_dointvec(void *tbl_data, struct ctl_table *table,
582 int write, void *buffer,
583 size_t *lenp, loff_t *ppos,
584 int (*conv)(bool *negp, unsigned long *lvalp, int *valp,
585 int write, void *data),
586 void *data)
587{
588 int *i, vleft, first = 1, err = 0;
589 size_t left;
590 char *p;
591
592 if (!tbl_data || !table->maxlen || !*lenp || (*ppos && !write)) {
593 *lenp = 0;
594 return 0;
595 }
596
597 i = (int *) tbl_data;
598 vleft = table->maxlen / sizeof(*i);
599 left = *lenp;
600
601 if (!conv)
602 conv = do_proc_dointvec_conv;
603
604 if (write) {
605 if (proc_first_pos_non_zero_ignore(ppos, table))
606 goto out;
607
608 if (left > PAGE_SIZE - 1)
609 left = PAGE_SIZE - 1;
610 p = buffer;
611 }
612
613 for (; left && vleft--; i++, first=0) {
614 unsigned long lval;
615 bool neg;
616
617 if (write) {
618 left -= proc_skip_spaces(&p);
619
620 if (!left)
621 break;
622 err = proc_get_long(&p, &left, &lval, &neg,
623 proc_wspace_sep,
624 sizeof(proc_wspace_sep), NULL);
625 if (err)
626 break;
627 if (conv(&neg, &lval, i, 1, data)) {
628 err = -EINVAL;
629 break;
630 }
631 } else {
632 if (conv(&neg, &lval, i, 0, data)) {
633 err = -EINVAL;
634 break;
635 }
636 if (!first)
637 proc_put_char(&buffer, &left, '\t');
638 proc_put_long(&buffer, &left, lval, neg);
639 }
640 }
641
642 if (!write && !first && left && !err)
643 proc_put_char(&buffer, &left, '\n');
644 if (write && !err && left)
645 left -= proc_skip_spaces(&p);
646 if (write && first)
647 return err ? : -EINVAL;
648 *lenp -= left;
649out:
650 *ppos += *lenp;
651 return err;
652}
653
654static int do_proc_dointvec(struct ctl_table *table, int write,
655 void *buffer, size_t *lenp, loff_t *ppos,
656 int (*conv)(bool *negp, unsigned long *lvalp, int *valp,
657 int write, void *data),
658 void *data)
659{
660 return __do_proc_dointvec(table->data, table, write,
661 buffer, lenp, ppos, conv, data);
662}
663
664static int do_proc_douintvec_w(unsigned int *tbl_data,
665 struct ctl_table *table,
666 void *buffer,
667 size_t *lenp, loff_t *ppos,
668 int (*conv)(unsigned long *lvalp,
669 unsigned int *valp,
670 int write, void *data),
671 void *data)
672{
673 unsigned long lval;
674 int err = 0;
675 size_t left;
676 bool neg;
677 char *p = buffer;
678
679 left = *lenp;
680
681 if (proc_first_pos_non_zero_ignore(ppos, table))
682 goto bail_early;
683
684 if (left > PAGE_SIZE - 1)
685 left = PAGE_SIZE - 1;
686
687 left -= proc_skip_spaces(&p);
688 if (!left) {
689 err = -EINVAL;
690 goto out_free;
691 }
692
693 err = proc_get_long(&p, &left, &lval, &neg,
694 proc_wspace_sep,
695 sizeof(proc_wspace_sep), NULL);
696 if (err || neg) {
697 err = -EINVAL;
698 goto out_free;
699 }
700
701 if (conv(&lval, tbl_data, 1, data)) {
702 err = -EINVAL;
703 goto out_free;
704 }
705
706 if (!err && left)
707 left -= proc_skip_spaces(&p);
708
709out_free:
710 if (err)
711 return -EINVAL;
712
713 return 0;
714
715 /* This is in keeping with old __do_proc_dointvec() */
716bail_early:
717 *ppos += *lenp;
718 return err;
719}
720
721static int do_proc_douintvec_r(unsigned int *tbl_data, void *buffer,
722 size_t *lenp, loff_t *ppos,
723 int (*conv)(unsigned long *lvalp,
724 unsigned int *valp,
725 int write, void *data),
726 void *data)
727{
728 unsigned long lval;
729 int err = 0;
730 size_t left;
731
732 left = *lenp;
733
734 if (conv(&lval, tbl_data, 0, data)) {
735 err = -EINVAL;
736 goto out;
737 }
738
739 proc_put_long(&buffer, &left, lval, false);
740 if (!left)
741 goto out;
742
743 proc_put_char(&buffer, &left, '\n');
744
745out:
746 *lenp -= left;
747 *ppos += *lenp;
748
749 return err;
750}
751
752static int __do_proc_douintvec(void *tbl_data, struct ctl_table *table,
753 int write, void *buffer,
754 size_t *lenp, loff_t *ppos,
755 int (*conv)(unsigned long *lvalp,
756 unsigned int *valp,
757 int write, void *data),
758 void *data)
759{
760 unsigned int *i, vleft;
761
762 if (!tbl_data || !table->maxlen || !*lenp || (*ppos && !write)) {
763 *lenp = 0;
764 return 0;
765 }
766
767 i = (unsigned int *) tbl_data;
768 vleft = table->maxlen / sizeof(*i);
769
770 /*
771 * Arrays are not supported, keep this simple. *Do not* add
772 * support for them.
773 */
774 if (vleft != 1) {
775 *lenp = 0;
776 return -EINVAL;
777 }
778
779 if (!conv)
780 conv = do_proc_douintvec_conv;
781
782 if (write)
783 return do_proc_douintvec_w(i, table, buffer, lenp, ppos,
784 conv, data);
785 return do_proc_douintvec_r(i, buffer, lenp, ppos, conv, data);
786}
787
788static int do_proc_douintvec(struct ctl_table *table, int write,
789 void *buffer, size_t *lenp, loff_t *ppos,
790 int (*conv)(unsigned long *lvalp,
791 unsigned int *valp,
792 int write, void *data),
793 void *data)
794{
795 return __do_proc_douintvec(table->data, table, write,
796 buffer, lenp, ppos, conv, data);
797}
798
799/**
800 * proc_dointvec - read a vector of integers
801 * @table: the sysctl table
802 * @write: %TRUE if this is a write to the sysctl file
803 * @buffer: the user buffer
804 * @lenp: the size of the user buffer
805 * @ppos: file position
806 *
807 * Reads/writes up to table->maxlen/sizeof(unsigned int) integer
808 * values from/to the user buffer, treated as an ASCII string.
809 *
810 * Returns 0 on success.
811 */
812int proc_dointvec(struct ctl_table *table, int write, void *buffer,
813 size_t *lenp, loff_t *ppos)
814{
815 return do_proc_dointvec(table, write, buffer, lenp, ppos, NULL, NULL);
816}
817
818#ifdef CONFIG_COMPACTION
819static int proc_dointvec_minmax_warn_RT_change(struct ctl_table *table,
820 int write, void *buffer, size_t *lenp, loff_t *ppos)
821{
822 int ret, old;
823
824 if (!IS_ENABLED(CONFIG_PREEMPT_RT) || !write)
825 return proc_dointvec_minmax(table, write, buffer, lenp, ppos);
826
827 old = *(int *)table->data;
828 ret = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
829 if (ret)
830 return ret;
831 if (old != *(int *)table->data)
832 pr_warn_once("sysctl attribute %s changed by %s[%d]\n",
833 table->procname, current->comm,
834 task_pid_nr(current));
835 return ret;
836}
837#endif
838
839/**
840 * proc_douintvec - read a vector of unsigned integers
841 * @table: the sysctl table
842 * @write: %TRUE if this is a write to the sysctl file
843 * @buffer: the user buffer
844 * @lenp: the size of the user buffer
845 * @ppos: file position
846 *
847 * Reads/writes up to table->maxlen/sizeof(unsigned int) unsigned integer
848 * values from/to the user buffer, treated as an ASCII string.
849 *
850 * Returns 0 on success.
851 */
852int proc_douintvec(struct ctl_table *table, int write, void *buffer,
853 size_t *lenp, loff_t *ppos)
854{
855 return do_proc_douintvec(table, write, buffer, lenp, ppos,
856 do_proc_douintvec_conv, NULL);
857}
858
859/*
860 * Taint values can only be increased
861 * This means we can safely use a temporary.
862 */
863static int proc_taint(struct ctl_table *table, int write,
864 void *buffer, size_t *lenp, loff_t *ppos)
865{
866 struct ctl_table t;
867 unsigned long tmptaint = get_taint();
868 int err;
869
870 if (write && !capable(CAP_SYS_ADMIN))
871 return -EPERM;
872
873 t = *table;
874 t.data = &tmptaint;
875 err = proc_doulongvec_minmax(&t, write, buffer, lenp, ppos);
876 if (err < 0)
877 return err;
878
879 if (write) {
880 int i;
881
882 /*
883 * If we are relying on panic_on_taint not producing
884 * false positives due to userspace input, bail out
885 * before setting the requested taint flags.
886 */
887 if (panic_on_taint_nousertaint && (tmptaint & panic_on_taint))
888 return -EINVAL;
889
890 /*
891 * Poor man's atomic or. Not worth adding a primitive
892 * to everyone's atomic.h for this
893 */
894 for (i = 0; i < TAINT_FLAGS_COUNT; i++)
895 if ((1UL << i) & tmptaint)
896 add_taint(i, LOCKDEP_STILL_OK);
897 }
898
899 return err;
900}
901
902#ifdef CONFIG_PRINTK
903static int proc_dointvec_minmax_sysadmin(struct ctl_table *table, int write,
904 void *buffer, size_t *lenp, loff_t *ppos)
905{
906 if (write && !capable(CAP_SYS_ADMIN))
907 return -EPERM;
908
909 return proc_dointvec_minmax(table, write, buffer, lenp, ppos);
910}
911#endif
912
913/**
914 * struct do_proc_dointvec_minmax_conv_param - proc_dointvec_minmax() range checking structure
915 * @min: pointer to minimum allowable value
916 * @max: pointer to maximum allowable value
917 *
918 * The do_proc_dointvec_minmax_conv_param structure provides the
919 * minimum and maximum values for doing range checking for those sysctl
920 * parameters that use the proc_dointvec_minmax() handler.
921 */
922struct do_proc_dointvec_minmax_conv_param {
923 int *min;
924 int *max;
925};
926
927static int do_proc_dointvec_minmax_conv(bool *negp, unsigned long *lvalp,
928 int *valp,
929 int write, void *data)
930{
931 int tmp, ret;
932 struct do_proc_dointvec_minmax_conv_param *param = data;
933 /*
934 * If writing, first do so via a temporary local int so we can
935 * bounds-check it before touching *valp.
936 */
937 int *ip = write ? &tmp : valp;
938
939 ret = do_proc_dointvec_conv(negp, lvalp, ip, write, data);
940 if (ret)
941 return ret;
942
943 if (write) {
944 if ((param->min && *param->min > tmp) ||
945 (param->max && *param->max < tmp))
946 return -EINVAL;
947 *valp = tmp;
948 }
949
950 return 0;
951}
952
953/**
954 * proc_dointvec_minmax - read a vector of integers with min/max values
955 * @table: the sysctl table
956 * @write: %TRUE if this is a write to the sysctl file
957 * @buffer: the user buffer
958 * @lenp: the size of the user buffer
959 * @ppos: file position
960 *
961 * Reads/writes up to table->maxlen/sizeof(unsigned int) integer
962 * values from/to the user buffer, treated as an ASCII string.
963 *
964 * This routine will ensure the values are within the range specified by
965 * table->extra1 (min) and table->extra2 (max).
966 *
967 * Returns 0 on success or -EINVAL on write when the range check fails.
968 */
969int proc_dointvec_minmax(struct ctl_table *table, int write,
970 void *buffer, size_t *lenp, loff_t *ppos)
971{
972 struct do_proc_dointvec_minmax_conv_param param = {
973 .min = (int *) table->extra1,
974 .max = (int *) table->extra2,
975 };
976 return do_proc_dointvec(table, write, buffer, lenp, ppos,
977 do_proc_dointvec_minmax_conv, &param);
978}
979
980/**
981 * struct do_proc_douintvec_minmax_conv_param - proc_douintvec_minmax() range checking structure
982 * @min: pointer to minimum allowable value
983 * @max: pointer to maximum allowable value
984 *
985 * The do_proc_douintvec_minmax_conv_param structure provides the
986 * minimum and maximum values for doing range checking for those sysctl
987 * parameters that use the proc_douintvec_minmax() handler.
988 */
989struct do_proc_douintvec_minmax_conv_param {
990 unsigned int *min;
991 unsigned int *max;
992};
993
994static int do_proc_douintvec_minmax_conv(unsigned long *lvalp,
995 unsigned int *valp,
996 int write, void *data)
997{
998 int ret;
999 unsigned int tmp;
1000 struct do_proc_douintvec_minmax_conv_param *param = data;
1001 /* write via temporary local uint for bounds-checking */
1002 unsigned int *up = write ? &tmp : valp;
1003
1004 ret = do_proc_douintvec_conv(lvalp, up, write, data);
1005 if (ret)
1006 return ret;
1007
1008 if (write) {
1009 if ((param->min && *param->min > tmp) ||
1010 (param->max && *param->max < tmp))
1011 return -ERANGE;
1012
1013 *valp = tmp;
1014 }
1015
1016 return 0;
1017}
1018
1019/**
1020 * proc_douintvec_minmax - read a vector of unsigned ints with min/max values
1021 * @table: the sysctl table
1022 * @write: %TRUE if this is a write to the sysctl file
1023 * @buffer: the user buffer
1024 * @lenp: the size of the user buffer
1025 * @ppos: file position
1026 *
1027 * Reads/writes up to table->maxlen/sizeof(unsigned int) unsigned integer
1028 * values from/to the user buffer, treated as an ASCII string. Negative
1029 * strings are not allowed.
1030 *
1031 * This routine will ensure the values are within the range specified by
1032 * table->extra1 (min) and table->extra2 (max). There is a final sanity
1033 * check for UINT_MAX to avoid having to support wrap around uses from
1034 * userspace.
1035 *
1036 * Returns 0 on success or -ERANGE on write when the range check fails.
1037 */
1038int proc_douintvec_minmax(struct ctl_table *table, int write,
1039 void *buffer, size_t *lenp, loff_t *ppos)
1040{
1041 struct do_proc_douintvec_minmax_conv_param param = {
1042 .min = (unsigned int *) table->extra1,
1043 .max = (unsigned int *) table->extra2,
1044 };
1045 return do_proc_douintvec(table, write, buffer, lenp, ppos,
1046 do_proc_douintvec_minmax_conv, &param);
1047}
1048
1049/**
1050 * proc_dou8vec_minmax - read a vector of unsigned chars with min/max values
1051 * @table: the sysctl table
1052 * @write: %TRUE if this is a write to the sysctl file
1053 * @buffer: the user buffer
1054 * @lenp: the size of the user buffer
1055 * @ppos: file position
1056 *
1057 * Reads/writes up to table->maxlen/sizeof(u8) unsigned chars
1058 * values from/to the user buffer, treated as an ASCII string. Negative
1059 * strings are not allowed.
1060 *
1061 * This routine will ensure the values are within the range specified by
1062 * table->extra1 (min) and table->extra2 (max).
1063 *
1064 * Returns 0 on success or an error on write when the range check fails.
1065 */
1066int proc_dou8vec_minmax(struct ctl_table *table, int write,
1067 void *buffer, size_t *lenp, loff_t *ppos)
1068{
1069 struct ctl_table tmp;
1070 unsigned int min = 0, max = 255U, val;
1071 u8 *data = table->data;
1072 struct do_proc_douintvec_minmax_conv_param param = {
1073 .min = &min,
1074 .max = &max,
1075 };
1076 int res;
1077
1078 /* Do not support arrays yet. */
1079 if (table->maxlen != sizeof(u8))
1080 return -EINVAL;
1081
1082 if (table->extra1) {
1083 min = *(unsigned int *) table->extra1;
1084 if (min > 255U)
1085 return -EINVAL;
1086 }
1087 if (table->extra2) {
1088 max = *(unsigned int *) table->extra2;
1089 if (max > 255U)
1090 return -EINVAL;
1091 }
1092
1093 tmp = *table;
1094
1095 tmp.maxlen = sizeof(val);
1096 tmp.data = &val;
1097 val = *data;
1098 res = do_proc_douintvec(&tmp, write, buffer, lenp, ppos,
1099 do_proc_douintvec_minmax_conv, &param);
1100 if (res)
1101 return res;
1102 if (write)
1103 *data = val;
1104 return 0;
1105}
1106EXPORT_SYMBOL_GPL(proc_dou8vec_minmax);
1107
1108static int do_proc_dopipe_max_size_conv(unsigned long *lvalp,
1109 unsigned int *valp,
1110 int write, void *data)
1111{
1112 if (write) {
1113 unsigned int val;
1114
1115 val = round_pipe_size(*lvalp);
1116 if (val == 0)
1117 return -EINVAL;
1118
1119 *valp = val;
1120 } else {
1121 unsigned int val = *valp;
1122 *lvalp = (unsigned long) val;
1123 }
1124
1125 return 0;
1126}
1127
1128static int proc_dopipe_max_size(struct ctl_table *table, int write,
1129 void *buffer, size_t *lenp, loff_t *ppos)
1130{
1131 return do_proc_douintvec(table, write, buffer, lenp, ppos,
1132 do_proc_dopipe_max_size_conv, NULL);
1133}
1134
1135static void validate_coredump_safety(void)
1136{
1137#ifdef CONFIG_COREDUMP
1138 if (suid_dumpable == SUID_DUMP_ROOT &&
1139 core_pattern[0] != '/' && core_pattern[0] != '|') {
1140 printk(KERN_WARNING
1141"Unsafe core_pattern used with fs.suid_dumpable=2.\n"
1142"Pipe handler or fully qualified core dump path required.\n"
1143"Set kernel.core_pattern before fs.suid_dumpable.\n"
1144 );
1145 }
1146#endif
1147}
1148
1149static int proc_dointvec_minmax_coredump(struct ctl_table *table, int write,
1150 void *buffer, size_t *lenp, loff_t *ppos)
1151{
1152 int error = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
1153 if (!error)
1154 validate_coredump_safety();
1155 return error;
1156}
1157
1158#ifdef CONFIG_COREDUMP
1159static int proc_dostring_coredump(struct ctl_table *table, int write,
1160 void *buffer, size_t *lenp, loff_t *ppos)
1161{
1162 int error = proc_dostring(table, write, buffer, lenp, ppos);
1163 if (!error)
1164 validate_coredump_safety();
1165 return error;
1166}
1167#endif
1168
1169#ifdef CONFIG_MAGIC_SYSRQ
1170static int sysrq_sysctl_handler(struct ctl_table *table, int write,
1171 void *buffer, size_t *lenp, loff_t *ppos)
1172{
1173 int tmp, ret;
1174
1175 tmp = sysrq_mask();
1176
1177 ret = __do_proc_dointvec(&tmp, table, write, buffer,
1178 lenp, ppos, NULL, NULL);
1179 if (ret || !write)
1180 return ret;
1181
1182 if (write)
1183 sysrq_toggle_support(tmp);
1184
1185 return 0;
1186}
1187#endif
1188
1189static int __do_proc_doulongvec_minmax(void *data, struct ctl_table *table,
1190 int write, void *buffer, size_t *lenp, loff_t *ppos,
1191 unsigned long convmul, unsigned long convdiv)
1192{
1193 unsigned long *i, *min, *max;
1194 int vleft, first = 1, err = 0;
1195 size_t left;
1196 char *p;
1197
1198 if (!data || !table->maxlen || !*lenp || (*ppos && !write)) {
1199 *lenp = 0;
1200 return 0;
1201 }
1202
1203 i = (unsigned long *) data;
1204 min = (unsigned long *) table->extra1;
1205 max = (unsigned long *) table->extra2;
1206 vleft = table->maxlen / sizeof(unsigned long);
1207 left = *lenp;
1208
1209 if (write) {
1210 if (proc_first_pos_non_zero_ignore(ppos, table))
1211 goto out;
1212
1213 if (left > PAGE_SIZE - 1)
1214 left = PAGE_SIZE - 1;
1215 p = buffer;
1216 }
1217
1218 for (; left && vleft--; i++, first = 0) {
1219 unsigned long val;
1220
1221 if (write) {
1222 bool neg;
1223
1224 left -= proc_skip_spaces(&p);
1225 if (!left)
1226 break;
1227
1228 err = proc_get_long(&p, &left, &val, &neg,
1229 proc_wspace_sep,
1230 sizeof(proc_wspace_sep), NULL);
1231 if (err)
1232 break;
1233 if (neg)
1234 continue;
1235 val = convmul * val / convdiv;
1236 if ((min && val < *min) || (max && val > *max)) {
1237 err = -EINVAL;
1238 break;
1239 }
1240 *i = val;
1241 } else {
1242 val = convdiv * (*i) / convmul;
1243 if (!first)
1244 proc_put_char(&buffer, &left, '\t');
1245 proc_put_long(&buffer, &left, val, false);
1246 }
1247 }
1248
1249 if (!write && !first && left && !err)
1250 proc_put_char(&buffer, &left, '\n');
1251 if (write && !err)
1252 left -= proc_skip_spaces(&p);
1253 if (write && first)
1254 return err ? : -EINVAL;
1255 *lenp -= left;
1256out:
1257 *ppos += *lenp;
1258 return err;
1259}
1260
1261static int do_proc_doulongvec_minmax(struct ctl_table *table, int write,
1262 void *buffer, size_t *lenp, loff_t *ppos, unsigned long convmul,
1263 unsigned long convdiv)
1264{
1265 return __do_proc_doulongvec_minmax(table->data, table, write,
1266 buffer, lenp, ppos, convmul, convdiv);
1267}
1268
1269/**
1270 * proc_doulongvec_minmax - read a vector of long integers with min/max values
1271 * @table: the sysctl table
1272 * @write: %TRUE if this is a write to the sysctl file
1273 * @buffer: the user buffer
1274 * @lenp: the size of the user buffer
1275 * @ppos: file position
1276 *
1277 * Reads/writes up to table->maxlen/sizeof(unsigned long) unsigned long
1278 * values from/to the user buffer, treated as an ASCII string.
1279 *
1280 * This routine will ensure the values are within the range specified by
1281 * table->extra1 (min) and table->extra2 (max).
1282 *
1283 * Returns 0 on success.
1284 */
1285int proc_doulongvec_minmax(struct ctl_table *table, int write,
1286 void *buffer, size_t *lenp, loff_t *ppos)
1287{
1288 return do_proc_doulongvec_minmax(table, write, buffer, lenp, ppos, 1l, 1l);
1289}
1290
1291/**
1292 * proc_doulongvec_ms_jiffies_minmax - read a vector of millisecond values with min/max values
1293 * @table: the sysctl table
1294 * @write: %TRUE if this is a write to the sysctl file
1295 * @buffer: the user buffer
1296 * @lenp: the size of the user buffer
1297 * @ppos: file position
1298 *
1299 * Reads/writes up to table->maxlen/sizeof(unsigned long) unsigned long
1300 * values from/to the user buffer, treated as an ASCII string. The values
1301 * are treated as milliseconds, and converted to jiffies when they are stored.
1302 *
1303 * This routine will ensure the values are within the range specified by
1304 * table->extra1 (min) and table->extra2 (max).
1305 *
1306 * Returns 0 on success.
1307 */
1308int proc_doulongvec_ms_jiffies_minmax(struct ctl_table *table, int write,
1309 void *buffer, size_t *lenp, loff_t *ppos)
1310{
1311 return do_proc_doulongvec_minmax(table, write, buffer,
1312 lenp, ppos, HZ, 1000l);
1313}
1314
1315
1316static int do_proc_dointvec_jiffies_conv(bool *negp, unsigned long *lvalp,
1317 int *valp,
1318 int write, void *data)
1319{
1320 if (write) {
1321 if (*lvalp > INT_MAX / HZ)
1322 return 1;
1323 *valp = *negp ? -(*lvalp*HZ) : (*lvalp*HZ);
1324 } else {
1325 int val = *valp;
1326 unsigned long lval;
1327 if (val < 0) {
1328 *negp = true;
1329 lval = -(unsigned long)val;
1330 } else {
1331 *negp = false;
1332 lval = (unsigned long)val;
1333 }
1334 *lvalp = lval / HZ;
1335 }
1336 return 0;
1337}
1338
1339static int do_proc_dointvec_userhz_jiffies_conv(bool *negp, unsigned long *lvalp,
1340 int *valp,
1341 int write, void *data)
1342{
1343 if (write) {
1344 if (USER_HZ < HZ && *lvalp > (LONG_MAX / HZ) * USER_HZ)
1345 return 1;
1346 *valp = clock_t_to_jiffies(*negp ? -*lvalp : *lvalp);
1347 } else {
1348 int val = *valp;
1349 unsigned long lval;
1350 if (val < 0) {
1351 *negp = true;
1352 lval = -(unsigned long)val;
1353 } else {
1354 *negp = false;
1355 lval = (unsigned long)val;
1356 }
1357 *lvalp = jiffies_to_clock_t(lval);
1358 }
1359 return 0;
1360}
1361
1362static int do_proc_dointvec_ms_jiffies_conv(bool *negp, unsigned long *lvalp,
1363 int *valp,
1364 int write, void *data)
1365{
1366 if (write) {
1367 unsigned long jif = msecs_to_jiffies(*negp ? -*lvalp : *lvalp);
1368
1369 if (jif > INT_MAX)
1370 return 1;
1371 *valp = (int)jif;
1372 } else {
1373 int val = *valp;
1374 unsigned long lval;
1375 if (val < 0) {
1376 *negp = true;
1377 lval = -(unsigned long)val;
1378 } else {
1379 *negp = false;
1380 lval = (unsigned long)val;
1381 }
1382 *lvalp = jiffies_to_msecs(lval);
1383 }
1384 return 0;
1385}
1386
1387/**
1388 * proc_dointvec_jiffies - read a vector of integers as seconds
1389 * @table: the sysctl table
1390 * @write: %TRUE if this is a write to the sysctl file
1391 * @buffer: the user buffer
1392 * @lenp: the size of the user buffer
1393 * @ppos: file position
1394 *
1395 * Reads/writes up to table->maxlen/sizeof(unsigned int) integer
1396 * values from/to the user buffer, treated as an ASCII string.
1397 * The values read are assumed to be in seconds, and are converted into
1398 * jiffies.
1399 *
1400 * Returns 0 on success.
1401 */
1402int proc_dointvec_jiffies(struct ctl_table *table, int write,
1403 void *buffer, size_t *lenp, loff_t *ppos)
1404{
1405 return do_proc_dointvec(table,write,buffer,lenp,ppos,
1406 do_proc_dointvec_jiffies_conv,NULL);
1407}
1408
1409/**
1410 * proc_dointvec_userhz_jiffies - read a vector of integers as 1/USER_HZ seconds
1411 * @table: the sysctl table
1412 * @write: %TRUE if this is a write to the sysctl file
1413 * @buffer: the user buffer
1414 * @lenp: the size of the user buffer
1415 * @ppos: pointer to the file position
1416 *
1417 * Reads/writes up to table->maxlen/sizeof(unsigned int) integer
1418 * values from/to the user buffer, treated as an ASCII string.
1419 * The values read are assumed to be in 1/USER_HZ seconds, and
1420 * are converted into jiffies.
1421 *
1422 * Returns 0 on success.
1423 */
1424int proc_dointvec_userhz_jiffies(struct ctl_table *table, int write,
1425 void *buffer, size_t *lenp, loff_t *ppos)
1426{
1427 return do_proc_dointvec(table,write,buffer,lenp,ppos,
1428 do_proc_dointvec_userhz_jiffies_conv,NULL);
1429}
1430
1431/**
1432 * proc_dointvec_ms_jiffies - read a vector of integers as 1 milliseconds
1433 * @table: the sysctl table
1434 * @write: %TRUE if this is a write to the sysctl file
1435 * @buffer: the user buffer
1436 * @lenp: the size of the user buffer
1437 * @ppos: file position
1438 * @ppos: the current position in the file
1439 *
1440 * Reads/writes up to table->maxlen/sizeof(unsigned int) integer
1441 * values from/to the user buffer, treated as an ASCII string.
1442 * The values read are assumed to be in 1/1000 seconds, and
1443 * are converted into jiffies.
1444 *
1445 * Returns 0 on success.
1446 */
1447int proc_dointvec_ms_jiffies(struct ctl_table *table, int write, void *buffer,
1448 size_t *lenp, loff_t *ppos)
1449{
1450 return do_proc_dointvec(table, write, buffer, lenp, ppos,
1451 do_proc_dointvec_ms_jiffies_conv, NULL);
1452}
1453
1454static int proc_do_cad_pid(struct ctl_table *table, int write, void *buffer,
1455 size_t *lenp, loff_t *ppos)
1456{
1457 struct pid *new_pid;
1458 pid_t tmp;
1459 int r;
1460
1461 tmp = pid_vnr(cad_pid);
1462
1463 r = __do_proc_dointvec(&tmp, table, write, buffer,
1464 lenp, ppos, NULL, NULL);
1465 if (r || !write)
1466 return r;
1467
1468 new_pid = find_get_pid(tmp);
1469 if (!new_pid)
1470 return -ESRCH;
1471
1472 put_pid(xchg(&cad_pid, new_pid));
1473 return 0;
1474}
1475
1476/**
1477 * proc_do_large_bitmap - read/write from/to a large bitmap
1478 * @table: the sysctl table
1479 * @write: %TRUE if this is a write to the sysctl file
1480 * @buffer: the user buffer
1481 * @lenp: the size of the user buffer
1482 * @ppos: file position
1483 *
1484 * The bitmap is stored at table->data and the bitmap length (in bits)
1485 * in table->maxlen.
1486 *
1487 * We use a range comma separated format (e.g. 1,3-4,10-10) so that
1488 * large bitmaps may be represented in a compact manner. Writing into
1489 * the file will clear the bitmap then update it with the given input.
1490 *
1491 * Returns 0 on success.
1492 */
1493int proc_do_large_bitmap(struct ctl_table *table, int write,
1494 void *buffer, size_t *lenp, loff_t *ppos)
1495{
1496 int err = 0;
1497 bool first = 1;
1498 size_t left = *lenp;
1499 unsigned long bitmap_len = table->maxlen;
1500 unsigned long *bitmap = *(unsigned long **) table->data;
1501 unsigned long *tmp_bitmap = NULL;
1502 char tr_a[] = { '-', ',', '\n' }, tr_b[] = { ',', '\n', 0 }, c;
1503
1504 if (!bitmap || !bitmap_len || !left || (*ppos && !write)) {
1505 *lenp = 0;
1506 return 0;
1507 }
1508
1509 if (write) {
1510 char *p = buffer;
1511 size_t skipped = 0;
1512
1513 if (left > PAGE_SIZE - 1) {
1514 left = PAGE_SIZE - 1;
1515 /* How much of the buffer we'll skip this pass */
1516 skipped = *lenp - left;
1517 }
1518
1519 tmp_bitmap = bitmap_zalloc(bitmap_len, GFP_KERNEL);
1520 if (!tmp_bitmap)
1521 return -ENOMEM;
1522 proc_skip_char(&p, &left, '\n');
1523 while (!err && left) {
1524 unsigned long val_a, val_b;
1525 bool neg;
1526 size_t saved_left;
1527
1528 /* In case we stop parsing mid-number, we can reset */
1529 saved_left = left;
1530 err = proc_get_long(&p, &left, &val_a, &neg, tr_a,
1531 sizeof(tr_a), &c);
1532 /*
1533 * If we consumed the entirety of a truncated buffer or
1534 * only one char is left (may be a "-"), then stop here,
1535 * reset, & come back for more.
1536 */
1537 if ((left <= 1) && skipped) {
1538 left = saved_left;
1539 break;
1540 }
1541
1542 if (err)
1543 break;
1544 if (val_a >= bitmap_len || neg) {
1545 err = -EINVAL;
1546 break;
1547 }
1548
1549 val_b = val_a;
1550 if (left) {
1551 p++;
1552 left--;
1553 }
1554
1555 if (c == '-') {
1556 err = proc_get_long(&p, &left, &val_b,
1557 &neg, tr_b, sizeof(tr_b),
1558 &c);
1559 /*
1560 * If we consumed all of a truncated buffer or
1561 * then stop here, reset, & come back for more.
1562 */
1563 if (!left && skipped) {
1564 left = saved_left;
1565 break;
1566 }
1567
1568 if (err)
1569 break;
1570 if (val_b >= bitmap_len || neg ||
1571 val_a > val_b) {
1572 err = -EINVAL;
1573 break;
1574 }
1575 if (left) {
1576 p++;
1577 left--;
1578 }
1579 }
1580
1581 bitmap_set(tmp_bitmap, val_a, val_b - val_a + 1);
1582 first = 0;
1583 proc_skip_char(&p, &left, '\n');
1584 }
1585 left += skipped;
1586 } else {
1587 unsigned long bit_a, bit_b = 0;
1588
1589 while (left) {
1590 bit_a = find_next_bit(bitmap, bitmap_len, bit_b);
1591 if (bit_a >= bitmap_len)
1592 break;
1593 bit_b = find_next_zero_bit(bitmap, bitmap_len,
1594 bit_a + 1) - 1;
1595
1596 if (!first)
1597 proc_put_char(&buffer, &left, ',');
1598 proc_put_long(&buffer, &left, bit_a, false);
1599 if (bit_a != bit_b) {
1600 proc_put_char(&buffer, &left, '-');
1601 proc_put_long(&buffer, &left, bit_b, false);
1602 }
1603
1604 first = 0; bit_b++;
1605 }
1606 proc_put_char(&buffer, &left, '\n');
1607 }
1608
1609 if (!err) {
1610 if (write) {
1611 if (*ppos)
1612 bitmap_or(bitmap, bitmap, tmp_bitmap, bitmap_len);
1613 else
1614 bitmap_copy(bitmap, tmp_bitmap, bitmap_len);
1615 }
1616 *lenp -= left;
1617 *ppos += *lenp;
1618 }
1619
1620 bitmap_free(tmp_bitmap);
1621 return err;
1622}
1623
1624#else /* CONFIG_PROC_SYSCTL */
1625
1626int proc_dostring(struct ctl_table *table, int write,
1627 void *buffer, size_t *lenp, loff_t *ppos)
1628{
1629 return -ENOSYS;
1630}
1631
1632int proc_dointvec(struct ctl_table *table, int write,
1633 void *buffer, size_t *lenp, loff_t *ppos)
1634{
1635 return -ENOSYS;
1636}
1637
1638int proc_douintvec(struct ctl_table *table, int write,
1639 void *buffer, size_t *lenp, loff_t *ppos)
1640{
1641 return -ENOSYS;
1642}
1643
1644int proc_dointvec_minmax(struct ctl_table *table, int write,
1645 void *buffer, size_t *lenp, loff_t *ppos)
1646{
1647 return -ENOSYS;
1648}
1649
1650int proc_douintvec_minmax(struct ctl_table *table, int write,
1651 void *buffer, size_t *lenp, loff_t *ppos)
1652{
1653 return -ENOSYS;
1654}
1655
1656int proc_dou8vec_minmax(struct ctl_table *table, int write,
1657 void *buffer, size_t *lenp, loff_t *ppos)
1658{
1659 return -ENOSYS;
1660}
1661
1662int proc_dointvec_jiffies(struct ctl_table *table, int write,
1663 void *buffer, size_t *lenp, loff_t *ppos)
1664{
1665 return -ENOSYS;
1666}
1667
1668int proc_dointvec_userhz_jiffies(struct ctl_table *table, int write,
1669 void *buffer, size_t *lenp, loff_t *ppos)
1670{
1671 return -ENOSYS;
1672}
1673
1674int proc_dointvec_ms_jiffies(struct ctl_table *table, int write,
1675 void *buffer, size_t *lenp, loff_t *ppos)
1676{
1677 return -ENOSYS;
1678}
1679
1680int proc_doulongvec_minmax(struct ctl_table *table, int write,
1681 void *buffer, size_t *lenp, loff_t *ppos)
1682{
1683 return -ENOSYS;
1684}
1685
1686int proc_doulongvec_ms_jiffies_minmax(struct ctl_table *table, int write,
1687 void *buffer, size_t *lenp, loff_t *ppos)
1688{
1689 return -ENOSYS;
1690}
1691
1692int proc_do_large_bitmap(struct ctl_table *table, int write,
1693 void *buffer, size_t *lenp, loff_t *ppos)
1694{
1695 return -ENOSYS;
1696}
1697
1698#endif /* CONFIG_PROC_SYSCTL */
1699
1700#if defined(CONFIG_SYSCTL)
1701int proc_do_static_key(struct ctl_table *table, int write,
1702 void *buffer, size_t *lenp, loff_t *ppos)
1703{
1704 struct static_key *key = (struct static_key *)table->data;
1705 static DEFINE_MUTEX(static_key_mutex);
1706 int val, ret;
1707 struct ctl_table tmp = {
1708 .data = &val,
1709 .maxlen = sizeof(val),
1710 .mode = table->mode,
1711 .extra1 = SYSCTL_ZERO,
1712 .extra2 = SYSCTL_ONE,
1713 };
1714
1715 if (write && !capable(CAP_SYS_ADMIN))
1716 return -EPERM;
1717
1718 mutex_lock(&static_key_mutex);
1719 val = static_key_enabled(key);
1720 ret = proc_dointvec_minmax(&tmp, write, buffer, lenp, ppos);
1721 if (write && !ret) {
1722 if (val)
1723 static_key_enable(key);
1724 else
1725 static_key_disable(key);
1726 }
1727 mutex_unlock(&static_key_mutex);
1728 return ret;
1729}
1730
1731static struct ctl_table kern_table[] = {
1732 {
1733 .procname = "sched_child_runs_first",
1734 .data = &sysctl_sched_child_runs_first,
1735 .maxlen = sizeof(unsigned int),
1736 .mode = 0644,
1737 .proc_handler = proc_dointvec,
1738 },
1739#ifdef CONFIG_SCHEDSTATS
1740 {
1741 .procname = "sched_schedstats",
1742 .data = NULL,
1743 .maxlen = sizeof(unsigned int),
1744 .mode = 0644,
1745 .proc_handler = sysctl_schedstats,
1746 .extra1 = SYSCTL_ZERO,
1747 .extra2 = SYSCTL_ONE,
1748 },
1749#endif /* CONFIG_SCHEDSTATS */
1750#ifdef CONFIG_NUMA_BALANCING
1751 {
1752 .procname = "numa_balancing",
1753 .data = NULL, /* filled in by handler */
1754 .maxlen = sizeof(unsigned int),
1755 .mode = 0644,
1756 .proc_handler = sysctl_numa_balancing,
1757 .extra1 = SYSCTL_ZERO,
1758 .extra2 = SYSCTL_ONE,
1759 },
1760#endif /* CONFIG_NUMA_BALANCING */
1761 {
1762 .procname = "sched_rt_period_us",
1763 .data = &sysctl_sched_rt_period,
1764 .maxlen = sizeof(unsigned int),
1765 .mode = 0644,
1766 .proc_handler = sched_rt_handler,
1767 },
1768 {
1769 .procname = "sched_rt_runtime_us",
1770 .data = &sysctl_sched_rt_runtime,
1771 .maxlen = sizeof(int),
1772 .mode = 0644,
1773 .proc_handler = sched_rt_handler,
1774 },
1775 {
1776 .procname = "sched_deadline_period_max_us",
1777 .data = &sysctl_sched_dl_period_max,
1778 .maxlen = sizeof(unsigned int),
1779 .mode = 0644,
1780 .proc_handler = proc_dointvec,
1781 },
1782 {
1783 .procname = "sched_deadline_period_min_us",
1784 .data = &sysctl_sched_dl_period_min,
1785 .maxlen = sizeof(unsigned int),
1786 .mode = 0644,
1787 .proc_handler = proc_dointvec,
1788 },
1789 {
1790 .procname = "sched_rr_timeslice_ms",
1791 .data = &sysctl_sched_rr_timeslice,
1792 .maxlen = sizeof(int),
1793 .mode = 0644,
1794 .proc_handler = sched_rr_handler,
1795 },
1796#ifdef CONFIG_UCLAMP_TASK
1797 {
1798 .procname = "sched_util_clamp_min",
1799 .data = &sysctl_sched_uclamp_util_min,
1800 .maxlen = sizeof(unsigned int),
1801 .mode = 0644,
1802 .proc_handler = sysctl_sched_uclamp_handler,
1803 },
1804 {
1805 .procname = "sched_util_clamp_max",
1806 .data = &sysctl_sched_uclamp_util_max,
1807 .maxlen = sizeof(unsigned int),
1808 .mode = 0644,
1809 .proc_handler = sysctl_sched_uclamp_handler,
1810 },
1811 {
1812 .procname = "sched_util_clamp_min_rt_default",
1813 .data = &sysctl_sched_uclamp_util_min_rt_default,
1814 .maxlen = sizeof(unsigned int),
1815 .mode = 0644,
1816 .proc_handler = sysctl_sched_uclamp_handler,
1817 },
1818#endif
1819#ifdef CONFIG_SCHED_AUTOGROUP
1820 {
1821 .procname = "sched_autogroup_enabled",
1822 .data = &sysctl_sched_autogroup_enabled,
1823 .maxlen = sizeof(unsigned int),
1824 .mode = 0644,
1825 .proc_handler = proc_dointvec_minmax,
1826 .extra1 = SYSCTL_ZERO,
1827 .extra2 = SYSCTL_ONE,
1828 },
1829#endif
1830#ifdef CONFIG_CFS_BANDWIDTH
1831 {
1832 .procname = "sched_cfs_bandwidth_slice_us",
1833 .data = &sysctl_sched_cfs_bandwidth_slice,
1834 .maxlen = sizeof(unsigned int),
1835 .mode = 0644,
1836 .proc_handler = proc_dointvec_minmax,
1837 .extra1 = SYSCTL_ONE,
1838 },
1839#endif
1840#if defined(CONFIG_ENERGY_MODEL) && defined(CONFIG_CPU_FREQ_GOV_SCHEDUTIL)
1841 {
1842 .procname = "sched_energy_aware",
1843 .data = &sysctl_sched_energy_aware,
1844 .maxlen = sizeof(unsigned int),
1845 .mode = 0644,
1846 .proc_handler = sched_energy_aware_handler,
1847 .extra1 = SYSCTL_ZERO,
1848 .extra2 = SYSCTL_ONE,
1849 },
1850#endif
1851#ifdef CONFIG_PROVE_LOCKING
1852 {
1853 .procname = "prove_locking",
1854 .data = &prove_locking,
1855 .maxlen = sizeof(int),
1856 .mode = 0644,
1857 .proc_handler = proc_dointvec,
1858 },
1859#endif
1860#ifdef CONFIG_LOCK_STAT
1861 {
1862 .procname = "lock_stat",
1863 .data = &lock_stat,
1864 .maxlen = sizeof(int),
1865 .mode = 0644,
1866 .proc_handler = proc_dointvec,
1867 },
1868#endif
1869 {
1870 .procname = "panic",
1871 .data = &panic_timeout,
1872 .maxlen = sizeof(int),
1873 .mode = 0644,
1874 .proc_handler = proc_dointvec,
1875 },
1876#ifdef CONFIG_COREDUMP
1877 {
1878 .procname = "core_uses_pid",
1879 .data = &core_uses_pid,
1880 .maxlen = sizeof(int),
1881 .mode = 0644,
1882 .proc_handler = proc_dointvec,
1883 },
1884 {
1885 .procname = "core_pattern",
1886 .data = core_pattern,
1887 .maxlen = CORENAME_MAX_SIZE,
1888 .mode = 0644,
1889 .proc_handler = proc_dostring_coredump,
1890 },
1891 {
1892 .procname = "core_pipe_limit",
1893 .data = &core_pipe_limit,
1894 .maxlen = sizeof(unsigned int),
1895 .mode = 0644,
1896 .proc_handler = proc_dointvec,
1897 },
1898#endif
1899#ifdef CONFIG_PROC_SYSCTL
1900 {
1901 .procname = "tainted",
1902 .maxlen = sizeof(long),
1903 .mode = 0644,
1904 .proc_handler = proc_taint,
1905 },
1906 {
1907 .procname = "sysctl_writes_strict",
1908 .data = &sysctl_writes_strict,
1909 .maxlen = sizeof(int),
1910 .mode = 0644,
1911 .proc_handler = proc_dointvec_minmax,
1912 .extra1 = &neg_one,
1913 .extra2 = SYSCTL_ONE,
1914 },
1915#endif
1916#ifdef CONFIG_LATENCYTOP
1917 {
1918 .procname = "latencytop",
1919 .data = &latencytop_enabled,
1920 .maxlen = sizeof(int),
1921 .mode = 0644,
1922 .proc_handler = sysctl_latencytop,
1923 },
1924#endif
1925#ifdef CONFIG_BLK_DEV_INITRD
1926 {
1927 .procname = "real-root-dev",
1928 .data = &real_root_dev,
1929 .maxlen = sizeof(int),
1930 .mode = 0644,
1931 .proc_handler = proc_dointvec,
1932 },
1933#endif
1934 {
1935 .procname = "print-fatal-signals",
1936 .data = &print_fatal_signals,
1937 .maxlen = sizeof(int),
1938 .mode = 0644,
1939 .proc_handler = proc_dointvec,
1940 },
1941#ifdef CONFIG_SPARC
1942 {
1943 .procname = "reboot-cmd",
1944 .data = reboot_command,
1945 .maxlen = 256,
1946 .mode = 0644,
1947 .proc_handler = proc_dostring,
1948 },
1949 {
1950 .procname = "stop-a",
1951 .data = &stop_a_enabled,
1952 .maxlen = sizeof (int),
1953 .mode = 0644,
1954 .proc_handler = proc_dointvec,
1955 },
1956 {
1957 .procname = "scons-poweroff",
1958 .data = &scons_pwroff,
1959 .maxlen = sizeof (int),
1960 .mode = 0644,
1961 .proc_handler = proc_dointvec,
1962 },
1963#endif
1964#ifdef CONFIG_SPARC64
1965 {
1966 .procname = "tsb-ratio",
1967 .data = &sysctl_tsb_ratio,
1968 .maxlen = sizeof (int),
1969 .mode = 0644,
1970 .proc_handler = proc_dointvec,
1971 },
1972#endif
1973#ifdef CONFIG_PARISC
1974 {
1975 .procname = "soft-power",
1976 .data = &pwrsw_enabled,
1977 .maxlen = sizeof (int),
1978 .mode = 0644,
1979 .proc_handler = proc_dointvec,
1980 },
1981#endif
1982#ifdef CONFIG_SYSCTL_ARCH_UNALIGN_ALLOW
1983 {
1984 .procname = "unaligned-trap",
1985 .data = &unaligned_enabled,
1986 .maxlen = sizeof (int),
1987 .mode = 0644,
1988 .proc_handler = proc_dointvec,
1989 },
1990#endif
1991 {
1992 .procname = "ctrl-alt-del",
1993 .data = &C_A_D,
1994 .maxlen = sizeof(int),
1995 .mode = 0644,
1996 .proc_handler = proc_dointvec,
1997 },
1998#ifdef CONFIG_FUNCTION_TRACER
1999 {
2000 .procname = "ftrace_enabled",
2001 .data = &ftrace_enabled,
2002 .maxlen = sizeof(int),
2003 .mode = 0644,
2004 .proc_handler = ftrace_enable_sysctl,
2005 },
2006#endif
2007#ifdef CONFIG_STACK_TRACER
2008 {
2009 .procname = "stack_tracer_enabled",
2010 .data = &stack_tracer_enabled,
2011 .maxlen = sizeof(int),
2012 .mode = 0644,
2013 .proc_handler = stack_trace_sysctl,
2014 },
2015#endif
2016#ifdef CONFIG_TRACING
2017 {
2018 .procname = "ftrace_dump_on_oops",
2019 .data = &ftrace_dump_on_oops,
2020 .maxlen = sizeof(int),
2021 .mode = 0644,
2022 .proc_handler = proc_dointvec,
2023 },
2024 {
2025 .procname = "traceoff_on_warning",
2026 .data = &__disable_trace_on_warning,
2027 .maxlen = sizeof(__disable_trace_on_warning),
2028 .mode = 0644,
2029 .proc_handler = proc_dointvec,
2030 },
2031 {
2032 .procname = "tracepoint_printk",
2033 .data = &tracepoint_printk,
2034 .maxlen = sizeof(tracepoint_printk),
2035 .mode = 0644,
2036 .proc_handler = tracepoint_printk_sysctl,
2037 },
2038#endif
2039#ifdef CONFIG_KEXEC_CORE
2040 {
2041 .procname = "kexec_load_disabled",
2042 .data = &kexec_load_disabled,
2043 .maxlen = sizeof(int),
2044 .mode = 0644,
2045 /* only handle a transition from default "0" to "1" */
2046 .proc_handler = proc_dointvec_minmax,
2047 .extra1 = SYSCTL_ONE,
2048 .extra2 = SYSCTL_ONE,
2049 },
2050#endif
2051#ifdef CONFIG_MODULES
2052 {
2053 .procname = "modprobe",
2054 .data = &modprobe_path,
2055 .maxlen = KMOD_PATH_LEN,
2056 .mode = 0644,
2057 .proc_handler = proc_dostring,
2058 },
2059 {
2060 .procname = "modules_disabled",
2061 .data = &modules_disabled,
2062 .maxlen = sizeof(int),
2063 .mode = 0644,
2064 /* only handle a transition from default "0" to "1" */
2065 .proc_handler = proc_dointvec_minmax,
2066 .extra1 = SYSCTL_ONE,
2067 .extra2 = SYSCTL_ONE,
2068 },
2069#endif
2070#ifdef CONFIG_UEVENT_HELPER
2071 {
2072 .procname = "hotplug",
2073 .data = &uevent_helper,
2074 .maxlen = UEVENT_HELPER_PATH_LEN,
2075 .mode = 0644,
2076 .proc_handler = proc_dostring,
2077 },
2078#endif
2079#ifdef CONFIG_CHR_DEV_SG
2080 {
2081 .procname = "sg-big-buff",
2082 .data = &sg_big_buff,
2083 .maxlen = sizeof (int),
2084 .mode = 0444,
2085 .proc_handler = proc_dointvec,
2086 },
2087#endif
2088#ifdef CONFIG_BSD_PROCESS_ACCT
2089 {
2090 .procname = "acct",
2091 .data = &acct_parm,
2092 .maxlen = 3*sizeof(int),
2093 .mode = 0644,
2094 .proc_handler = proc_dointvec,
2095 },
2096#endif
2097#ifdef CONFIG_MAGIC_SYSRQ
2098 {
2099 .procname = "sysrq",
2100 .data = NULL,
2101 .maxlen = sizeof (int),
2102 .mode = 0644,
2103 .proc_handler = sysrq_sysctl_handler,
2104 },
2105#endif
2106#ifdef CONFIG_PROC_SYSCTL
2107 {
2108 .procname = "cad_pid",
2109 .data = NULL,
2110 .maxlen = sizeof (int),
2111 .mode = 0600,
2112 .proc_handler = proc_do_cad_pid,
2113 },
2114#endif
2115 {
2116 .procname = "threads-max",
2117 .data = NULL,
2118 .maxlen = sizeof(int),
2119 .mode = 0644,
2120 .proc_handler = sysctl_max_threads,
2121 },
2122 {
2123 .procname = "random",
2124 .mode = 0555,
2125 .child = random_table,
2126 },
2127 {
2128 .procname = "usermodehelper",
2129 .mode = 0555,
2130 .child = usermodehelper_table,
2131 },
2132#ifdef CONFIG_FW_LOADER_USER_HELPER
2133 {
2134 .procname = "firmware_config",
2135 .mode = 0555,
2136 .child = firmware_config_table,
2137 },
2138#endif
2139 {
2140 .procname = "overflowuid",
2141 .data = &overflowuid,
2142 .maxlen = sizeof(int),
2143 .mode = 0644,
2144 .proc_handler = proc_dointvec_minmax,
2145 .extra1 = &minolduid,
2146 .extra2 = &maxolduid,
2147 },
2148 {
2149 .procname = "overflowgid",
2150 .data = &overflowgid,
2151 .maxlen = sizeof(int),
2152 .mode = 0644,
2153 .proc_handler = proc_dointvec_minmax,
2154 .extra1 = &minolduid,
2155 .extra2 = &maxolduid,
2156 },
2157#ifdef CONFIG_S390
2158 {
2159 .procname = "userprocess_debug",
2160 .data = &show_unhandled_signals,
2161 .maxlen = sizeof(int),
2162 .mode = 0644,
2163 .proc_handler = proc_dointvec,
2164 },
2165#endif
2166#ifdef CONFIG_SMP
2167 {
2168 .procname = "oops_all_cpu_backtrace",
2169 .data = &sysctl_oops_all_cpu_backtrace,
2170 .maxlen = sizeof(int),
2171 .mode = 0644,
2172 .proc_handler = proc_dointvec_minmax,
2173 .extra1 = SYSCTL_ZERO,
2174 .extra2 = SYSCTL_ONE,
2175 },
2176#endif /* CONFIG_SMP */
2177 {
2178 .procname = "pid_max",
2179 .data = &pid_max,
2180 .maxlen = sizeof (int),
2181 .mode = 0644,
2182 .proc_handler = proc_dointvec_minmax,
2183 .extra1 = &pid_max_min,
2184 .extra2 = &pid_max_max,
2185 },
2186 {
2187 .procname = "panic_on_oops",
2188 .data = &panic_on_oops,
2189 .maxlen = sizeof(int),
2190 .mode = 0644,
2191 .proc_handler = proc_dointvec,
2192 },
2193 {
2194 .procname = "panic_print",
2195 .data = &panic_print,
2196 .maxlen = sizeof(unsigned long),
2197 .mode = 0644,
2198 .proc_handler = proc_doulongvec_minmax,
2199 },
2200#if defined CONFIG_PRINTK
2201 {
2202 .procname = "printk",
2203 .data = &console_loglevel,
2204 .maxlen = 4*sizeof(int),
2205 .mode = 0644,
2206 .proc_handler = proc_dointvec,
2207 },
2208 {
2209 .procname = "printk_ratelimit",
2210 .data = &printk_ratelimit_state.interval,
2211 .maxlen = sizeof(int),
2212 .mode = 0644,
2213 .proc_handler = proc_dointvec_jiffies,
2214 },
2215 {
2216 .procname = "printk_ratelimit_burst",
2217 .data = &printk_ratelimit_state.burst,
2218 .maxlen = sizeof(int),
2219 .mode = 0644,
2220 .proc_handler = proc_dointvec,
2221 },
2222 {
2223 .procname = "printk_delay",
2224 .data = &printk_delay_msec,
2225 .maxlen = sizeof(int),
2226 .mode = 0644,
2227 .proc_handler = proc_dointvec_minmax,
2228 .extra1 = SYSCTL_ZERO,
2229 .extra2 = &ten_thousand,
2230 },
2231 {
2232 .procname = "printk_devkmsg",
2233 .data = devkmsg_log_str,
2234 .maxlen = DEVKMSG_STR_MAX_SIZE,
2235 .mode = 0644,
2236 .proc_handler = devkmsg_sysctl_set_loglvl,
2237 },
2238 {
2239 .procname = "dmesg_restrict",
2240 .data = &dmesg_restrict,
2241 .maxlen = sizeof(int),
2242 .mode = 0644,
2243 .proc_handler = proc_dointvec_minmax_sysadmin,
2244 .extra1 = SYSCTL_ZERO,
2245 .extra2 = SYSCTL_ONE,
2246 },
2247 {
2248 .procname = "kptr_restrict",
2249 .data = &kptr_restrict,
2250 .maxlen = sizeof(int),
2251 .mode = 0644,
2252 .proc_handler = proc_dointvec_minmax_sysadmin,
2253 .extra1 = SYSCTL_ZERO,
2254 .extra2 = &two,
2255 },
2256#endif
2257 {
2258 .procname = "ngroups_max",
2259 .data = &ngroups_max,
2260 .maxlen = sizeof (int),
2261 .mode = 0444,
2262 .proc_handler = proc_dointvec,
2263 },
2264 {
2265 .procname = "cap_last_cap",
2266 .data = (void *)&cap_last_cap,
2267 .maxlen = sizeof(int),
2268 .mode = 0444,
2269 .proc_handler = proc_dointvec,
2270 },
2271#if defined(CONFIG_LOCKUP_DETECTOR)
2272 {
2273 .procname = "watchdog",
2274 .data = &watchdog_user_enabled,
2275 .maxlen = sizeof(int),
2276 .mode = 0644,
2277 .proc_handler = proc_watchdog,
2278 .extra1 = SYSCTL_ZERO,
2279 .extra2 = SYSCTL_ONE,
2280 },
2281 {
2282 .procname = "watchdog_thresh",
2283 .data = &watchdog_thresh,
2284 .maxlen = sizeof(int),
2285 .mode = 0644,
2286 .proc_handler = proc_watchdog_thresh,
2287 .extra1 = SYSCTL_ZERO,
2288 .extra2 = &sixty,
2289 },
2290 {
2291 .procname = "nmi_watchdog",
2292 .data = &nmi_watchdog_user_enabled,
2293 .maxlen = sizeof(int),
2294 .mode = NMI_WATCHDOG_SYSCTL_PERM,
2295 .proc_handler = proc_nmi_watchdog,
2296 .extra1 = SYSCTL_ZERO,
2297 .extra2 = SYSCTL_ONE,
2298 },
2299 {
2300 .procname = "watchdog_cpumask",
2301 .data = &watchdog_cpumask_bits,
2302 .maxlen = NR_CPUS,
2303 .mode = 0644,
2304 .proc_handler = proc_watchdog_cpumask,
2305 },
2306#ifdef CONFIG_SOFTLOCKUP_DETECTOR
2307 {
2308 .procname = "soft_watchdog",
2309 .data = &soft_watchdog_user_enabled,
2310 .maxlen = sizeof(int),
2311 .mode = 0644,
2312 .proc_handler = proc_soft_watchdog,
2313 .extra1 = SYSCTL_ZERO,
2314 .extra2 = SYSCTL_ONE,
2315 },
2316 {
2317 .procname = "softlockup_panic",
2318 .data = &softlockup_panic,
2319 .maxlen = sizeof(int),
2320 .mode = 0644,
2321 .proc_handler = proc_dointvec_minmax,
2322 .extra1 = SYSCTL_ZERO,
2323 .extra2 = SYSCTL_ONE,
2324 },
2325#ifdef CONFIG_SMP
2326 {
2327 .procname = "softlockup_all_cpu_backtrace",
2328 .data = &sysctl_softlockup_all_cpu_backtrace,
2329 .maxlen = sizeof(int),
2330 .mode = 0644,
2331 .proc_handler = proc_dointvec_minmax,
2332 .extra1 = SYSCTL_ZERO,
2333 .extra2 = SYSCTL_ONE,
2334 },
2335#endif /* CONFIG_SMP */
2336#endif
2337#ifdef CONFIG_HARDLOCKUP_DETECTOR
2338 {
2339 .procname = "hardlockup_panic",
2340 .data = &hardlockup_panic,
2341 .maxlen = sizeof(int),
2342 .mode = 0644,
2343 .proc_handler = proc_dointvec_minmax,
2344 .extra1 = SYSCTL_ZERO,
2345 .extra2 = SYSCTL_ONE,
2346 },
2347#ifdef CONFIG_SMP
2348 {
2349 .procname = "hardlockup_all_cpu_backtrace",
2350 .data = &sysctl_hardlockup_all_cpu_backtrace,
2351 .maxlen = sizeof(int),
2352 .mode = 0644,
2353 .proc_handler = proc_dointvec_minmax,
2354 .extra1 = SYSCTL_ZERO,
2355 .extra2 = SYSCTL_ONE,
2356 },
2357#endif /* CONFIG_SMP */
2358#endif
2359#endif
2360
2361#if defined(CONFIG_X86_LOCAL_APIC) && defined(CONFIG_X86)
2362 {
2363 .procname = "unknown_nmi_panic",
2364 .data = &unknown_nmi_panic,
2365 .maxlen = sizeof (int),
2366 .mode = 0644,
2367 .proc_handler = proc_dointvec,
2368 },
2369#endif
2370
2371#if (defined(CONFIG_X86_32) || defined(CONFIG_PARISC)) && \
2372 defined(CONFIG_DEBUG_STACKOVERFLOW)
2373 {
2374 .procname = "panic_on_stackoverflow",
2375 .data = &sysctl_panic_on_stackoverflow,
2376 .maxlen = sizeof(int),
2377 .mode = 0644,
2378 .proc_handler = proc_dointvec,
2379 },
2380#endif
2381#if defined(CONFIG_X86)
2382 {
2383 .procname = "panic_on_unrecovered_nmi",
2384 .data = &panic_on_unrecovered_nmi,
2385 .maxlen = sizeof(int),
2386 .mode = 0644,
2387 .proc_handler = proc_dointvec,
2388 },
2389 {
2390 .procname = "panic_on_io_nmi",
2391 .data = &panic_on_io_nmi,
2392 .maxlen = sizeof(int),
2393 .mode = 0644,
2394 .proc_handler = proc_dointvec,
2395 },
2396 {
2397 .procname = "bootloader_type",
2398 .data = &bootloader_type,
2399 .maxlen = sizeof (int),
2400 .mode = 0444,
2401 .proc_handler = proc_dointvec,
2402 },
2403 {
2404 .procname = "bootloader_version",
2405 .data = &bootloader_version,
2406 .maxlen = sizeof (int),
2407 .mode = 0444,
2408 .proc_handler = proc_dointvec,
2409 },
2410 {
2411 .procname = "io_delay_type",
2412 .data = &io_delay_type,
2413 .maxlen = sizeof(int),
2414 .mode = 0644,
2415 .proc_handler = proc_dointvec,
2416 },
2417#endif
2418#if defined(CONFIG_MMU)
2419 {
2420 .procname = "randomize_va_space",
2421 .data = &randomize_va_space,
2422 .maxlen = sizeof(int),
2423 .mode = 0644,
2424 .proc_handler = proc_dointvec,
2425 },
2426#endif
2427#if defined(CONFIG_S390) && defined(CONFIG_SMP)
2428 {
2429 .procname = "spin_retry",
2430 .data = &spin_retry,
2431 .maxlen = sizeof (int),
2432 .mode = 0644,
2433 .proc_handler = proc_dointvec,
2434 },
2435#endif
2436#if defined(CONFIG_ACPI_SLEEP) && defined(CONFIG_X86)
2437 {
2438 .procname = "acpi_video_flags",
2439 .data = &acpi_realmode_flags,
2440 .maxlen = sizeof (unsigned long),
2441 .mode = 0644,
2442 .proc_handler = proc_doulongvec_minmax,
2443 },
2444#endif
2445#ifdef CONFIG_SYSCTL_ARCH_UNALIGN_NO_WARN
2446 {
2447 .procname = "ignore-unaligned-usertrap",
2448 .data = &no_unaligned_warning,
2449 .maxlen = sizeof (int),
2450 .mode = 0644,
2451 .proc_handler = proc_dointvec,
2452 },
2453#endif
2454#ifdef CONFIG_IA64
2455 {
2456 .procname = "unaligned-dump-stack",
2457 .data = &unaligned_dump_stack,
2458 .maxlen = sizeof (int),
2459 .mode = 0644,
2460 .proc_handler = proc_dointvec,
2461 },
2462#endif
2463#ifdef CONFIG_DETECT_HUNG_TASK
2464#ifdef CONFIG_SMP
2465 {
2466 .procname = "hung_task_all_cpu_backtrace",
2467 .data = &sysctl_hung_task_all_cpu_backtrace,
2468 .maxlen = sizeof(int),
2469 .mode = 0644,
2470 .proc_handler = proc_dointvec_minmax,
2471 .extra1 = SYSCTL_ZERO,
2472 .extra2 = SYSCTL_ONE,
2473 },
2474#endif /* CONFIG_SMP */
2475 {
2476 .procname = "hung_task_panic",
2477 .data = &sysctl_hung_task_panic,
2478 .maxlen = sizeof(int),
2479 .mode = 0644,
2480 .proc_handler = proc_dointvec_minmax,
2481 .extra1 = SYSCTL_ZERO,
2482 .extra2 = SYSCTL_ONE,
2483 },
2484 {
2485 .procname = "hung_task_check_count",
2486 .data = &sysctl_hung_task_check_count,
2487 .maxlen = sizeof(int),
2488 .mode = 0644,
2489 .proc_handler = proc_dointvec_minmax,
2490 .extra1 = SYSCTL_ZERO,
2491 },
2492 {
2493 .procname = "hung_task_timeout_secs",
2494 .data = &sysctl_hung_task_timeout_secs,
2495 .maxlen = sizeof(unsigned long),
2496 .mode = 0644,
2497 .proc_handler = proc_dohung_task_timeout_secs,
2498 .extra2 = &hung_task_timeout_max,
2499 },
2500 {
2501 .procname = "hung_task_check_interval_secs",
2502 .data = &sysctl_hung_task_check_interval_secs,
2503 .maxlen = sizeof(unsigned long),
2504 .mode = 0644,
2505 .proc_handler = proc_dohung_task_timeout_secs,
2506 .extra2 = &hung_task_timeout_max,
2507 },
2508 {
2509 .procname = "hung_task_warnings",
2510 .data = &sysctl_hung_task_warnings,
2511 .maxlen = sizeof(int),
2512 .mode = 0644,
2513 .proc_handler = proc_dointvec_minmax,
2514 .extra1 = &neg_one,
2515 },
2516#endif
2517#ifdef CONFIG_RT_MUTEXES
2518 {
2519 .procname = "max_lock_depth",
2520 .data = &max_lock_depth,
2521 .maxlen = sizeof(int),
2522 .mode = 0644,
2523 .proc_handler = proc_dointvec,
2524 },
2525#endif
2526 {
2527 .procname = "poweroff_cmd",
2528 .data = &poweroff_cmd,
2529 .maxlen = POWEROFF_CMD_PATH_LEN,
2530 .mode = 0644,
2531 .proc_handler = proc_dostring,
2532 },
2533#ifdef CONFIG_KEYS
2534 {
2535 .procname = "keys",
2536 .mode = 0555,
2537 .child = key_sysctls,
2538 },
2539#endif
2540#ifdef CONFIG_PERF_EVENTS
2541 /*
2542 * User-space scripts rely on the existence of this file
2543 * as a feature check for perf_events being enabled.
2544 *
2545 * So it's an ABI, do not remove!
2546 */
2547 {
2548 .procname = "perf_event_paranoid",
2549 .data = &sysctl_perf_event_paranoid,
2550 .maxlen = sizeof(sysctl_perf_event_paranoid),
2551 .mode = 0644,
2552 .proc_handler = proc_dointvec,
2553 },
2554 {
2555 .procname = "perf_event_mlock_kb",
2556 .data = &sysctl_perf_event_mlock,
2557 .maxlen = sizeof(sysctl_perf_event_mlock),
2558 .mode = 0644,
2559 .proc_handler = proc_dointvec,
2560 },
2561 {
2562 .procname = "perf_event_max_sample_rate",
2563 .data = &sysctl_perf_event_sample_rate,
2564 .maxlen = sizeof(sysctl_perf_event_sample_rate),
2565 .mode = 0644,
2566 .proc_handler = perf_proc_update_handler,
2567 .extra1 = SYSCTL_ONE,
2568 },
2569 {
2570 .procname = "perf_cpu_time_max_percent",
2571 .data = &sysctl_perf_cpu_time_max_percent,
2572 .maxlen = sizeof(sysctl_perf_cpu_time_max_percent),
2573 .mode = 0644,
2574 .proc_handler = perf_cpu_time_max_percent_handler,
2575 .extra1 = SYSCTL_ZERO,
2576 .extra2 = &one_hundred,
2577 },
2578 {
2579 .procname = "perf_event_max_stack",
2580 .data = &sysctl_perf_event_max_stack,
2581 .maxlen = sizeof(sysctl_perf_event_max_stack),
2582 .mode = 0644,
2583 .proc_handler = perf_event_max_stack_handler,
2584 .extra1 = SYSCTL_ZERO,
2585 .extra2 = &six_hundred_forty_kb,
2586 },
2587 {
2588 .procname = "perf_event_max_contexts_per_stack",
2589 .data = &sysctl_perf_event_max_contexts_per_stack,
2590 .maxlen = sizeof(sysctl_perf_event_max_contexts_per_stack),
2591 .mode = 0644,
2592 .proc_handler = perf_event_max_stack_handler,
2593 .extra1 = SYSCTL_ZERO,
2594 .extra2 = &one_thousand,
2595 },
2596#endif
2597 {
2598 .procname = "panic_on_warn",
2599 .data = &panic_on_warn,
2600 .maxlen = sizeof(int),
2601 .mode = 0644,
2602 .proc_handler = proc_dointvec_minmax,
2603 .extra1 = SYSCTL_ZERO,
2604 .extra2 = SYSCTL_ONE,
2605 },
2606#if defined(CONFIG_SMP) && defined(CONFIG_NO_HZ_COMMON)
2607 {
2608 .procname = "timer_migration",
2609 .data = &sysctl_timer_migration,
2610 .maxlen = sizeof(unsigned int),
2611 .mode = 0644,
2612 .proc_handler = timer_migration_handler,
2613 .extra1 = SYSCTL_ZERO,
2614 .extra2 = SYSCTL_ONE,
2615 },
2616#endif
2617#ifdef CONFIG_BPF_SYSCALL
2618 {
2619 .procname = "unprivileged_bpf_disabled",
2620 .data = &sysctl_unprivileged_bpf_disabled,
2621 .maxlen = sizeof(sysctl_unprivileged_bpf_disabled),
2622 .mode = 0644,
2623 .proc_handler = bpf_unpriv_handler,
2624 .extra1 = SYSCTL_ZERO,
2625 .extra2 = &two,
2626 },
2627 {
2628 .procname = "bpf_stats_enabled",
2629 .data = &bpf_stats_enabled_key.key,
2630 .maxlen = sizeof(bpf_stats_enabled_key),
2631 .mode = 0644,
2632 .proc_handler = bpf_stats_handler,
2633 },
2634#endif
2635#if defined(CONFIG_TREE_RCU)
2636 {
2637 .procname = "panic_on_rcu_stall",
2638 .data = &sysctl_panic_on_rcu_stall,
2639 .maxlen = sizeof(sysctl_panic_on_rcu_stall),
2640 .mode = 0644,
2641 .proc_handler = proc_dointvec_minmax,
2642 .extra1 = SYSCTL_ZERO,
2643 .extra2 = SYSCTL_ONE,
2644 },
2645#endif
2646#if defined(CONFIG_TREE_RCU)
2647 {
2648 .procname = "max_rcu_stall_to_panic",
2649 .data = &sysctl_max_rcu_stall_to_panic,
2650 .maxlen = sizeof(sysctl_max_rcu_stall_to_panic),
2651 .mode = 0644,
2652 .proc_handler = proc_dointvec_minmax,
2653 .extra1 = SYSCTL_ONE,
2654 .extra2 = SYSCTL_INT_MAX,
2655 },
2656#endif
2657#ifdef CONFIG_STACKLEAK_RUNTIME_DISABLE
2658 {
2659 .procname = "stack_erasing",
2660 .data = NULL,
2661 .maxlen = sizeof(int),
2662 .mode = 0600,
2663 .proc_handler = stack_erasing_sysctl,
2664 .extra1 = SYSCTL_ZERO,
2665 .extra2 = SYSCTL_ONE,
2666 },
2667#endif
2668 { }
2669};
2670
2671static struct ctl_table vm_table[] = {
2672 {
2673 .procname = "overcommit_memory",
2674 .data = &sysctl_overcommit_memory,
2675 .maxlen = sizeof(sysctl_overcommit_memory),
2676 .mode = 0644,
2677 .proc_handler = overcommit_policy_handler,
2678 .extra1 = SYSCTL_ZERO,
2679 .extra2 = &two,
2680 },
2681 {
2682 .procname = "panic_on_oom",
2683 .data = &sysctl_panic_on_oom,
2684 .maxlen = sizeof(sysctl_panic_on_oom),
2685 .mode = 0644,
2686 .proc_handler = proc_dointvec_minmax,
2687 .extra1 = SYSCTL_ZERO,
2688 .extra2 = &two,
2689 },
2690 {
2691 .procname = "oom_kill_allocating_task",
2692 .data = &sysctl_oom_kill_allocating_task,
2693 .maxlen = sizeof(sysctl_oom_kill_allocating_task),
2694 .mode = 0644,
2695 .proc_handler = proc_dointvec,
2696 },
2697 {
2698 .procname = "oom_dump_tasks",
2699 .data = &sysctl_oom_dump_tasks,
2700 .maxlen = sizeof(sysctl_oom_dump_tasks),
2701 .mode = 0644,
2702 .proc_handler = proc_dointvec,
2703 },
2704 {
2705 .procname = "overcommit_ratio",
2706 .data = &sysctl_overcommit_ratio,
2707 .maxlen = sizeof(sysctl_overcommit_ratio),
2708 .mode = 0644,
2709 .proc_handler = overcommit_ratio_handler,
2710 },
2711 {
2712 .procname = "overcommit_kbytes",
2713 .data = &sysctl_overcommit_kbytes,
2714 .maxlen = sizeof(sysctl_overcommit_kbytes),
2715 .mode = 0644,
2716 .proc_handler = overcommit_kbytes_handler,
2717 },
2718 {
2719 .procname = "page-cluster",
2720 .data = &page_cluster,
2721 .maxlen = sizeof(int),
2722 .mode = 0644,
2723 .proc_handler = proc_dointvec_minmax,
2724 .extra1 = SYSCTL_ZERO,
2725 },
2726 {
2727 .procname = "dirty_background_ratio",
2728 .data = &dirty_background_ratio,
2729 .maxlen = sizeof(dirty_background_ratio),
2730 .mode = 0644,
2731 .proc_handler = dirty_background_ratio_handler,
2732 .extra1 = SYSCTL_ZERO,
2733 .extra2 = &one_hundred,
2734 },
2735 {
2736 .procname = "dirty_background_bytes",
2737 .data = &dirty_background_bytes,
2738 .maxlen = sizeof(dirty_background_bytes),
2739 .mode = 0644,
2740 .proc_handler = dirty_background_bytes_handler,
2741 .extra1 = &one_ul,
2742 },
2743 {
2744 .procname = "dirty_ratio",
2745 .data = &vm_dirty_ratio,
2746 .maxlen = sizeof(vm_dirty_ratio),
2747 .mode = 0644,
2748 .proc_handler = dirty_ratio_handler,
2749 .extra1 = SYSCTL_ZERO,
2750 .extra2 = &one_hundred,
2751 },
2752 {
2753 .procname = "dirty_bytes",
2754 .data = &vm_dirty_bytes,
2755 .maxlen = sizeof(vm_dirty_bytes),
2756 .mode = 0644,
2757 .proc_handler = dirty_bytes_handler,
2758 .extra1 = &dirty_bytes_min,
2759 },
2760 {
2761 .procname = "dirty_writeback_centisecs",
2762 .data = &dirty_writeback_interval,
2763 .maxlen = sizeof(dirty_writeback_interval),
2764 .mode = 0644,
2765 .proc_handler = dirty_writeback_centisecs_handler,
2766 },
2767 {
2768 .procname = "dirty_expire_centisecs",
2769 .data = &dirty_expire_interval,
2770 .maxlen = sizeof(dirty_expire_interval),
2771 .mode = 0644,
2772 .proc_handler = proc_dointvec_minmax,
2773 .extra1 = SYSCTL_ZERO,
2774 },
2775 {
2776 .procname = "dirtytime_expire_seconds",
2777 .data = &dirtytime_expire_interval,
2778 .maxlen = sizeof(dirtytime_expire_interval),
2779 .mode = 0644,
2780 .proc_handler = dirtytime_interval_handler,
2781 .extra1 = SYSCTL_ZERO,
2782 },
2783 {
2784 .procname = "swappiness",
2785 .data = &vm_swappiness,
2786 .maxlen = sizeof(vm_swappiness),
2787 .mode = 0644,
2788 .proc_handler = proc_dointvec_minmax,
2789 .extra1 = SYSCTL_ZERO,
2790 .extra2 = &two_hundred,
2791 },
2792#ifdef CONFIG_HUGETLB_PAGE
2793 {
2794 .procname = "nr_hugepages",
2795 .data = NULL,
2796 .maxlen = sizeof(unsigned long),
2797 .mode = 0644,
2798 .proc_handler = hugetlb_sysctl_handler,
2799 },
2800#ifdef CONFIG_NUMA
2801 {
2802 .procname = "nr_hugepages_mempolicy",
2803 .data = NULL,
2804 .maxlen = sizeof(unsigned long),
2805 .mode = 0644,
2806 .proc_handler = &hugetlb_mempolicy_sysctl_handler,
2807 },
2808 {
2809 .procname = "numa_stat",
2810 .data = &sysctl_vm_numa_stat,
2811 .maxlen = sizeof(int),
2812 .mode = 0644,
2813 .proc_handler = sysctl_vm_numa_stat_handler,
2814 .extra1 = SYSCTL_ZERO,
2815 .extra2 = SYSCTL_ONE,
2816 },
2817#endif
2818 {
2819 .procname = "hugetlb_shm_group",
2820 .data = &sysctl_hugetlb_shm_group,
2821 .maxlen = sizeof(gid_t),
2822 .mode = 0644,
2823 .proc_handler = proc_dointvec,
2824 },
2825 {
2826 .procname = "nr_overcommit_hugepages",
2827 .data = NULL,
2828 .maxlen = sizeof(unsigned long),
2829 .mode = 0644,
2830 .proc_handler = hugetlb_overcommit_handler,
2831 },
2832#endif
2833 {
2834 .procname = "lowmem_reserve_ratio",
2835 .data = &sysctl_lowmem_reserve_ratio,
2836 .maxlen = sizeof(sysctl_lowmem_reserve_ratio),
2837 .mode = 0644,
2838 .proc_handler = lowmem_reserve_ratio_sysctl_handler,
2839 },
2840 {
2841 .procname = "drop_caches",
2842 .data = &sysctl_drop_caches,
2843 .maxlen = sizeof(int),
2844 .mode = 0200,
2845 .proc_handler = drop_caches_sysctl_handler,
2846 .extra1 = SYSCTL_ONE,
2847 .extra2 = &four,
2848 },
2849#ifdef CONFIG_COMPACTION
2850 {
2851 .procname = "compact_memory",
2852 .data = NULL,
2853 .maxlen = sizeof(int),
2854 .mode = 0200,
2855 .proc_handler = sysctl_compaction_handler,
2856 },
2857 {
2858 .procname = "compaction_proactiveness",
2859 .data = &sysctl_compaction_proactiveness,
2860 .maxlen = sizeof(sysctl_compaction_proactiveness),
2861 .mode = 0644,
2862 .proc_handler = proc_dointvec_minmax,
2863 .extra1 = SYSCTL_ZERO,
2864 .extra2 = &one_hundred,
2865 },
2866 {
2867 .procname = "extfrag_threshold",
2868 .data = &sysctl_extfrag_threshold,
2869 .maxlen = sizeof(int),
2870 .mode = 0644,
2871 .proc_handler = proc_dointvec_minmax,
2872 .extra1 = &min_extfrag_threshold,
2873 .extra2 = &max_extfrag_threshold,
2874 },
2875 {
2876 .procname = "compact_unevictable_allowed",
2877 .data = &sysctl_compact_unevictable_allowed,
2878 .maxlen = sizeof(int),
2879 .mode = 0644,
2880 .proc_handler = proc_dointvec_minmax_warn_RT_change,
2881 .extra1 = SYSCTL_ZERO,
2882 .extra2 = SYSCTL_ONE,
2883 },
2884
2885#endif /* CONFIG_COMPACTION */
2886 {
2887 .procname = "min_free_kbytes",
2888 .data = &min_free_kbytes,
2889 .maxlen = sizeof(min_free_kbytes),
2890 .mode = 0644,
2891 .proc_handler = min_free_kbytes_sysctl_handler,
2892 .extra1 = SYSCTL_ZERO,
2893 },
2894 {
2895 .procname = "watermark_boost_factor",
2896 .data = &watermark_boost_factor,
2897 .maxlen = sizeof(watermark_boost_factor),
2898 .mode = 0644,
2899 .proc_handler = proc_dointvec_minmax,
2900 .extra1 = SYSCTL_ZERO,
2901 },
2902 {
2903 .procname = "watermark_scale_factor",
2904 .data = &watermark_scale_factor,
2905 .maxlen = sizeof(watermark_scale_factor),
2906 .mode = 0644,
2907 .proc_handler = watermark_scale_factor_sysctl_handler,
2908 .extra1 = SYSCTL_ONE,
2909 .extra2 = &one_thousand,
2910 },
2911 {
2912 .procname = "percpu_pagelist_fraction",
2913 .data = &percpu_pagelist_fraction,
2914 .maxlen = sizeof(percpu_pagelist_fraction),
2915 .mode = 0644,
2916 .proc_handler = percpu_pagelist_fraction_sysctl_handler,
2917 .extra1 = SYSCTL_ZERO,
2918 },
2919 {
2920 .procname = "page_lock_unfairness",
2921 .data = &sysctl_page_lock_unfairness,
2922 .maxlen = sizeof(sysctl_page_lock_unfairness),
2923 .mode = 0644,
2924 .proc_handler = proc_dointvec_minmax,
2925 .extra1 = SYSCTL_ZERO,
2926 },
2927#ifdef CONFIG_MMU
2928 {
2929 .procname = "max_map_count",
2930 .data = &sysctl_max_map_count,
2931 .maxlen = sizeof(sysctl_max_map_count),
2932 .mode = 0644,
2933 .proc_handler = proc_dointvec_minmax,
2934 .extra1 = SYSCTL_ZERO,
2935 },
2936#else
2937 {
2938 .procname = "nr_trim_pages",
2939 .data = &sysctl_nr_trim_pages,
2940 .maxlen = sizeof(sysctl_nr_trim_pages),
2941 .mode = 0644,
2942 .proc_handler = proc_dointvec_minmax,
2943 .extra1 = SYSCTL_ZERO,
2944 },
2945#endif
2946 {
2947 .procname = "laptop_mode",
2948 .data = &laptop_mode,
2949 .maxlen = sizeof(laptop_mode),
2950 .mode = 0644,
2951 .proc_handler = proc_dointvec_jiffies,
2952 },
2953 {
2954 .procname = "block_dump",
2955 .data = &block_dump,
2956 .maxlen = sizeof(block_dump),
2957 .mode = 0644,
2958 .proc_handler = proc_dointvec_minmax,
2959 .extra1 = SYSCTL_ZERO,
2960 },
2961 {
2962 .procname = "vfs_cache_pressure",
2963 .data = &sysctl_vfs_cache_pressure,
2964 .maxlen = sizeof(sysctl_vfs_cache_pressure),
2965 .mode = 0644,
2966 .proc_handler = proc_dointvec_minmax,
2967 .extra1 = SYSCTL_ZERO,
2968 },
2969#if defined(HAVE_ARCH_PICK_MMAP_LAYOUT) || \
2970 defined(CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT)
2971 {
2972 .procname = "legacy_va_layout",
2973 .data = &sysctl_legacy_va_layout,
2974 .maxlen = sizeof(sysctl_legacy_va_layout),
2975 .mode = 0644,
2976 .proc_handler = proc_dointvec_minmax,
2977 .extra1 = SYSCTL_ZERO,
2978 },
2979#endif
2980#ifdef CONFIG_NUMA
2981 {
2982 .procname = "zone_reclaim_mode",
2983 .data = &node_reclaim_mode,
2984 .maxlen = sizeof(node_reclaim_mode),
2985 .mode = 0644,
2986 .proc_handler = proc_dointvec_minmax,
2987 .extra1 = SYSCTL_ZERO,
2988 },
2989 {
2990 .procname = "min_unmapped_ratio",
2991 .data = &sysctl_min_unmapped_ratio,
2992 .maxlen = sizeof(sysctl_min_unmapped_ratio),
2993 .mode = 0644,
2994 .proc_handler = sysctl_min_unmapped_ratio_sysctl_handler,
2995 .extra1 = SYSCTL_ZERO,
2996 .extra2 = &one_hundred,
2997 },
2998 {
2999 .procname = "min_slab_ratio",
3000 .data = &sysctl_min_slab_ratio,
3001 .maxlen = sizeof(sysctl_min_slab_ratio),
3002 .mode = 0644,
3003 .proc_handler = sysctl_min_slab_ratio_sysctl_handler,
3004 .extra1 = SYSCTL_ZERO,
3005 .extra2 = &one_hundred,
3006 },
3007#endif
3008#ifdef CONFIG_SMP
3009 {
3010 .procname = "stat_interval",
3011 .data = &sysctl_stat_interval,
3012 .maxlen = sizeof(sysctl_stat_interval),
3013 .mode = 0644,
3014 .proc_handler = proc_dointvec_jiffies,
3015 },
3016 {
3017 .procname = "stat_refresh",
3018 .data = NULL,
3019 .maxlen = 0,
3020 .mode = 0600,
3021 .proc_handler = vmstat_refresh,
3022 },
3023#endif
3024#ifdef CONFIG_MMU
3025 {
3026 .procname = "mmap_min_addr",
3027 .data = &dac_mmap_min_addr,
3028 .maxlen = sizeof(unsigned long),
3029 .mode = 0644,
3030 .proc_handler = mmap_min_addr_handler,
3031 },
3032#endif
3033#ifdef CONFIG_NUMA
3034 {
3035 .procname = "numa_zonelist_order",
3036 .data = &numa_zonelist_order,
3037 .maxlen = NUMA_ZONELIST_ORDER_LEN,
3038 .mode = 0644,
3039 .proc_handler = numa_zonelist_order_handler,
3040 },
3041#endif
3042#if (defined(CONFIG_X86_32) && !defined(CONFIG_UML))|| \
3043 (defined(CONFIG_SUPERH) && defined(CONFIG_VSYSCALL))
3044 {
3045 .procname = "vdso_enabled",
3046#ifdef CONFIG_X86_32
3047 .data = &vdso32_enabled,
3048 .maxlen = sizeof(vdso32_enabled),
3049#else
3050 .data = &vdso_enabled,
3051 .maxlen = sizeof(vdso_enabled),
3052#endif
3053 .mode = 0644,
3054 .proc_handler = proc_dointvec,
3055 .extra1 = SYSCTL_ZERO,
3056 },
3057#endif
3058#ifdef CONFIG_HIGHMEM
3059 {
3060 .procname = "highmem_is_dirtyable",
3061 .data = &vm_highmem_is_dirtyable,
3062 .maxlen = sizeof(vm_highmem_is_dirtyable),
3063 .mode = 0644,
3064 .proc_handler = proc_dointvec_minmax,
3065 .extra1 = SYSCTL_ZERO,
3066 .extra2 = SYSCTL_ONE,
3067 },
3068#endif
3069#ifdef CONFIG_MEMORY_FAILURE
3070 {
3071 .procname = "memory_failure_early_kill",
3072 .data = &sysctl_memory_failure_early_kill,
3073 .maxlen = sizeof(sysctl_memory_failure_early_kill),
3074 .mode = 0644,
3075 .proc_handler = proc_dointvec_minmax,
3076 .extra1 = SYSCTL_ZERO,
3077 .extra2 = SYSCTL_ONE,
3078 },
3079 {
3080 .procname = "memory_failure_recovery",
3081 .data = &sysctl_memory_failure_recovery,
3082 .maxlen = sizeof(sysctl_memory_failure_recovery),
3083 .mode = 0644,
3084 .proc_handler = proc_dointvec_minmax,
3085 .extra1 = SYSCTL_ZERO,
3086 .extra2 = SYSCTL_ONE,
3087 },
3088#endif
3089 {
3090 .procname = "user_reserve_kbytes",
3091 .data = &sysctl_user_reserve_kbytes,
3092 .maxlen = sizeof(sysctl_user_reserve_kbytes),
3093 .mode = 0644,
3094 .proc_handler = proc_doulongvec_minmax,
3095 },
3096 {
3097 .procname = "admin_reserve_kbytes",
3098 .data = &sysctl_admin_reserve_kbytes,
3099 .maxlen = sizeof(sysctl_admin_reserve_kbytes),
3100 .mode = 0644,
3101 .proc_handler = proc_doulongvec_minmax,
3102 },
3103#ifdef CONFIG_HAVE_ARCH_MMAP_RND_BITS
3104 {
3105 .procname = "mmap_rnd_bits",
3106 .data = &mmap_rnd_bits,
3107 .maxlen = sizeof(mmap_rnd_bits),
3108 .mode = 0600,
3109 .proc_handler = proc_dointvec_minmax,
3110 .extra1 = (void *)&mmap_rnd_bits_min,
3111 .extra2 = (void *)&mmap_rnd_bits_max,
3112 },
3113#endif
3114#ifdef CONFIG_HAVE_ARCH_MMAP_RND_COMPAT_BITS
3115 {
3116 .procname = "mmap_rnd_compat_bits",
3117 .data = &mmap_rnd_compat_bits,
3118 .maxlen = sizeof(mmap_rnd_compat_bits),
3119 .mode = 0600,
3120 .proc_handler = proc_dointvec_minmax,
3121 .extra1 = (void *)&mmap_rnd_compat_bits_min,
3122 .extra2 = (void *)&mmap_rnd_compat_bits_max,
3123 },
3124#endif
3125#ifdef CONFIG_USERFAULTFD
3126 {
3127 .procname = "unprivileged_userfaultfd",
3128 .data = &sysctl_unprivileged_userfaultfd,
3129 .maxlen = sizeof(sysctl_unprivileged_userfaultfd),
3130 .mode = 0644,
3131 .proc_handler = proc_dointvec_minmax,
3132 .extra1 = SYSCTL_ZERO,
3133 .extra2 = SYSCTL_ONE,
3134 },
3135#endif
3136 { }
3137};
3138
3139static struct ctl_table fs_table[] = {
3140 {
3141 .procname = "inode-nr",
3142 .data = &inodes_stat,
3143 .maxlen = 2*sizeof(long),
3144 .mode = 0444,
3145 .proc_handler = proc_nr_inodes,
3146 },
3147 {
3148 .procname = "inode-state",
3149 .data = &inodes_stat,
3150 .maxlen = 7*sizeof(long),
3151 .mode = 0444,
3152 .proc_handler = proc_nr_inodes,
3153 },
3154 {
3155 .procname = "file-nr",
3156 .data = &files_stat,
3157 .maxlen = sizeof(files_stat),
3158 .mode = 0444,
3159 .proc_handler = proc_nr_files,
3160 },
3161 {
3162 .procname = "file-max",
3163 .data = &files_stat.max_files,
3164 .maxlen = sizeof(files_stat.max_files),
3165 .mode = 0644,
3166 .proc_handler = proc_doulongvec_minmax,
3167 .extra1 = &zero_ul,
3168 .extra2 = &long_max,
3169 },
3170 {
3171 .procname = "nr_open",
3172 .data = &sysctl_nr_open,
3173 .maxlen = sizeof(unsigned int),
3174 .mode = 0644,
3175 .proc_handler = proc_dointvec_minmax,
3176 .extra1 = &sysctl_nr_open_min,
3177 .extra2 = &sysctl_nr_open_max,
3178 },
3179 {
3180 .procname = "dentry-state",
3181 .data = &dentry_stat,
3182 .maxlen = 6*sizeof(long),
3183 .mode = 0444,
3184 .proc_handler = proc_nr_dentry,
3185 },
3186 {
3187 .procname = "overflowuid",
3188 .data = &fs_overflowuid,
3189 .maxlen = sizeof(int),
3190 .mode = 0644,
3191 .proc_handler = proc_dointvec_minmax,
3192 .extra1 = &minolduid,
3193 .extra2 = &maxolduid,
3194 },
3195 {
3196 .procname = "overflowgid",
3197 .data = &fs_overflowgid,
3198 .maxlen = sizeof(int),
3199 .mode = 0644,
3200 .proc_handler = proc_dointvec_minmax,
3201 .extra1 = &minolduid,
3202 .extra2 = &maxolduid,
3203 },
3204#ifdef CONFIG_FILE_LOCKING
3205 {
3206 .procname = "leases-enable",
3207 .data = &leases_enable,
3208 .maxlen = sizeof(int),
3209 .mode = 0644,
3210 .proc_handler = proc_dointvec,
3211 },
3212#endif
3213#ifdef CONFIG_DNOTIFY
3214 {
3215 .procname = "dir-notify-enable",
3216 .data = &dir_notify_enable,
3217 .maxlen = sizeof(int),
3218 .mode = 0644,
3219 .proc_handler = proc_dointvec,
3220 },
3221#endif
3222#ifdef CONFIG_MMU
3223#ifdef CONFIG_FILE_LOCKING
3224 {
3225 .procname = "lease-break-time",
3226 .data = &lease_break_time,
3227 .maxlen = sizeof(int),
3228 .mode = 0644,
3229 .proc_handler = proc_dointvec,
3230 },
3231#endif
3232#ifdef CONFIG_AIO
3233 {
3234 .procname = "aio-nr",
3235 .data = &aio_nr,
3236 .maxlen = sizeof(aio_nr),
3237 .mode = 0444,
3238 .proc_handler = proc_doulongvec_minmax,
3239 },
3240 {
3241 .procname = "aio-max-nr",
3242 .data = &aio_max_nr,
3243 .maxlen = sizeof(aio_max_nr),
3244 .mode = 0644,
3245 .proc_handler = proc_doulongvec_minmax,
3246 },
3247#endif /* CONFIG_AIO */
3248#ifdef CONFIG_INOTIFY_USER
3249 {
3250 .procname = "inotify",
3251 .mode = 0555,
3252 .child = inotify_table,
3253 },
3254#endif
3255#ifdef CONFIG_FANOTIFY
3256 {
3257 .procname = "fanotify",
3258 .mode = 0555,
3259 .child = fanotify_table,
3260 },
3261#endif
3262#ifdef CONFIG_EPOLL
3263 {
3264 .procname = "epoll",
3265 .mode = 0555,
3266 .child = epoll_table,
3267 },
3268#endif
3269#endif
3270 {
3271 .procname = "protected_symlinks",
3272 .data = &sysctl_protected_symlinks,
3273 .maxlen = sizeof(int),
3274 .mode = 0600,
3275 .proc_handler = proc_dointvec_minmax,
3276 .extra1 = SYSCTL_ZERO,
3277 .extra2 = SYSCTL_ONE,
3278 },
3279 {
3280 .procname = "protected_hardlinks",
3281 .data = &sysctl_protected_hardlinks,
3282 .maxlen = sizeof(int),
3283 .mode = 0600,
3284 .proc_handler = proc_dointvec_minmax,
3285 .extra1 = SYSCTL_ZERO,
3286 .extra2 = SYSCTL_ONE,
3287 },
3288 {
3289 .procname = "protected_fifos",
3290 .data = &sysctl_protected_fifos,
3291 .maxlen = sizeof(int),
3292 .mode = 0600,
3293 .proc_handler = proc_dointvec_minmax,
3294 .extra1 = SYSCTL_ZERO,
3295 .extra2 = &two,
3296 },
3297 {
3298 .procname = "protected_regular",
3299 .data = &sysctl_protected_regular,
3300 .maxlen = sizeof(int),
3301 .mode = 0600,
3302 .proc_handler = proc_dointvec_minmax,
3303 .extra1 = SYSCTL_ZERO,
3304 .extra2 = &two,
3305 },
3306 {
3307 .procname = "suid_dumpable",
3308 .data = &suid_dumpable,
3309 .maxlen = sizeof(int),
3310 .mode = 0644,
3311 .proc_handler = proc_dointvec_minmax_coredump,
3312 .extra1 = SYSCTL_ZERO,
3313 .extra2 = &two,
3314 },
3315#if defined(CONFIG_BINFMT_MISC) || defined(CONFIG_BINFMT_MISC_MODULE)
3316 {
3317 .procname = "binfmt_misc",
3318 .mode = 0555,
3319 .child = sysctl_mount_point,
3320 },
3321#endif
3322 {
3323 .procname = "pipe-max-size",
3324 .data = &pipe_max_size,
3325 .maxlen = sizeof(pipe_max_size),
3326 .mode = 0644,
3327 .proc_handler = proc_dopipe_max_size,
3328 },
3329 {
3330 .procname = "pipe-user-pages-hard",
3331 .data = &pipe_user_pages_hard,
3332 .maxlen = sizeof(pipe_user_pages_hard),
3333 .mode = 0644,
3334 .proc_handler = proc_doulongvec_minmax,
3335 },
3336 {
3337 .procname = "pipe-user-pages-soft",
3338 .data = &pipe_user_pages_soft,
3339 .maxlen = sizeof(pipe_user_pages_soft),
3340 .mode = 0644,
3341 .proc_handler = proc_doulongvec_minmax,
3342 },
3343 {
3344 .procname = "mount-max",
3345 .data = &sysctl_mount_max,
3346 .maxlen = sizeof(unsigned int),
3347 .mode = 0644,
3348 .proc_handler = proc_dointvec_minmax,
3349 .extra1 = SYSCTL_ONE,
3350 },
3351 { }
3352};
3353
3354static struct ctl_table debug_table[] = {
3355#ifdef CONFIG_SYSCTL_EXCEPTION_TRACE
3356 {
3357 .procname = "exception-trace",
3358 .data = &show_unhandled_signals,
3359 .maxlen = sizeof(int),
3360 .mode = 0644,
3361 .proc_handler = proc_dointvec
3362 },
3363#endif
3364#if defined(CONFIG_OPTPROBES)
3365 {
3366 .procname = "kprobes-optimization",
3367 .data = &sysctl_kprobes_optimization,
3368 .maxlen = sizeof(int),
3369 .mode = 0644,
3370 .proc_handler = proc_kprobes_optimization_handler,
3371 .extra1 = SYSCTL_ZERO,
3372 .extra2 = SYSCTL_ONE,
3373 },
3374#endif
3375 { }
3376};
3377
3378static struct ctl_table dev_table[] = {
3379 { }
3380};
3381
3382static struct ctl_table sysctl_base_table[] = {
3383 {
3384 .procname = "kernel",
3385 .mode = 0555,
3386 .child = kern_table,
3387 },
3388 {
3389 .procname = "vm",
3390 .mode = 0555,
3391 .child = vm_table,
3392 },
3393 {
3394 .procname = "fs",
3395 .mode = 0555,
3396 .child = fs_table,
3397 },
3398 {
3399 .procname = "debug",
3400 .mode = 0555,
3401 .child = debug_table,
3402 },
3403 {
3404 .procname = "dev",
3405 .mode = 0555,
3406 .child = dev_table,
3407 },
3408 { }
3409};
3410
3411int __init sysctl_init(void)
3412{
3413 struct ctl_table_header *hdr;
3414
3415 hdr = register_sysctl_table(sysctl_base_table);
3416 kmemleak_not_leak(hdr);
3417 return 0;
3418}
3419#endif /* CONFIG_SYSCTL */
3420/*
3421 * No sense putting this after each symbol definition, twice,
3422 * exception granted :-)
3423 */
3424EXPORT_SYMBOL(proc_dointvec);
3425EXPORT_SYMBOL(proc_douintvec);
3426EXPORT_SYMBOL(proc_dointvec_jiffies);
3427EXPORT_SYMBOL(proc_dointvec_minmax);
3428EXPORT_SYMBOL_GPL(proc_douintvec_minmax);
3429EXPORT_SYMBOL(proc_dointvec_userhz_jiffies);
3430EXPORT_SYMBOL(proc_dointvec_ms_jiffies);
3431EXPORT_SYMBOL(proc_dostring);
3432EXPORT_SYMBOL(proc_doulongvec_minmax);
3433EXPORT_SYMBOL(proc_doulongvec_ms_jiffies_minmax);
3434EXPORT_SYMBOL(proc_do_large_bitmap);