]>
Commit | Line | Data |
---|---|---|
b2441318 | 1 | /* SPDX-License-Identifier: GPL-2.0 */ |
5f256bec EB |
2 | /* |
3 | * Operations on the network namespace | |
4 | */ | |
5 | #ifndef __NET_NET_NAMESPACE_H | |
6 | #define __NET_NET_NAMESPACE_H | |
7 | ||
60063497 | 8 | #include <linux/atomic.h> |
c122e14d | 9 | #include <linux/refcount.h> |
5f256bec EB |
10 | #include <linux/workqueue.h> |
11 | #include <linux/list.h> | |
bee95250 | 12 | #include <linux/sysctl.h> |
5f256bec | 13 | |
6a662719 | 14 | #include <net/flow.h> |
8efa6e93 | 15 | #include <net/netns/core.h> |
852566f5 | 16 | #include <net/netns/mib.h> |
a0a53c8b | 17 | #include <net/netns/unix.h> |
2aaef4e4 | 18 | #include <net/netns/packet.h> |
8afd351c | 19 | #include <net/netns/ipv4.h> |
b0f159db | 20 | #include <net/netns/ipv6.h> |
633fc86f | 21 | #include <net/netns/ieee802154_6lowpan.h> |
4db67e80 | 22 | #include <net/netns/sctp.h> |
67019cc9 | 23 | #include <net/netns/dccp.h> |
f3c1a44a | 24 | #include <net/netns/netfilter.h> |
8d870052 | 25 | #include <net/netns/x_tables.h> |
dfdb8d79 AD |
26 | #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE) |
27 | #include <net/netns/conntrack.h> | |
28 | #endif | |
99633ab2 | 29 | #include <net/netns/nftables.h> |
d62ddc21 | 30 | #include <net/netns/xfrm.h> |
0189197f | 31 | #include <net/netns/mpls.h> |
8e8cda6d | 32 | #include <net/netns/can.h> |
435d5f4b | 33 | #include <linux/ns_common.h> |
04c52dec PNA |
34 | #include <linux/idr.h> |
35 | #include <linux/skbuff.h> | |
a0a53c8b | 36 | |
038e7332 | 37 | struct user_namespace; |
457c4cbc | 38 | struct proc_dir_entry; |
2774c7ab | 39 | struct net_device; |
97c53cac | 40 | struct sock; |
1597fbc0 | 41 | struct ctl_table_header; |
dec827d1 | 42 | struct net_generic; |
134e6375 | 43 | struct sock; |
2553d064 | 44 | struct netns_ipvs; |
1597fbc0 | 45 | |
7c28bd0b ED |
46 | |
47 | #define NETDEV_HASHBITS 8 | |
48 | #define NETDEV_HASHENTRIES (1 << NETDEV_HASHBITS) | |
49 | ||
5f256bec | 50 | struct net { |
c122e14d | 51 | refcount_t passive; /* To decided when the network |
a685e089 AV |
52 | * namespace should be freed. |
53 | */ | |
5f256bec | 54 | atomic_t count; /* To decided when the network |
a685e089 | 55 | * namespace should be shut down. |
5f256bec | 56 | */ |
8e602ce2 ED |
57 | spinlock_t rules_mod_lock; |
58 | ||
33cf7c90 ED |
59 | atomic64_t cookie_gen; |
60 | ||
5f256bec | 61 | struct list_head list; /* list of network namespaces */ |
2b035b39 | 62 | struct list_head cleanup_list; /* namespaces on death row */ |
72ad937a | 63 | struct list_head exit_list; /* Use only net_mutex */ |
457c4cbc | 64 | |
038e7332 | 65 | struct user_namespace *user_ns; /* Owning user namespace */ |
70328660 | 66 | struct ucounts *ucounts; |
de133464 | 67 | spinlock_t nsid_lock; |
0c7aecd4 | 68 | struct idr netns_ids; |
038e7332 | 69 | |
435d5f4b | 70 | struct ns_common ns; |
98f842e6 | 71 | |
457c4cbc EB |
72 | struct proc_dir_entry *proc_net; |
73 | struct proc_dir_entry *proc_net_stat; | |
881d966b | 74 | |
73455092 AV |
75 | #ifdef CONFIG_SYSCTL |
76 | struct ctl_table_set sysctls; | |
77 | #endif | |
95bdfccb | 78 | |
8e602ce2 ED |
79 | struct sock *rtnl; /* rtnetlink socket */ |
80 | struct sock *genl_sock; | |
2774c7ab | 81 | |
881d966b EB |
82 | struct list_head dev_base_head; |
83 | struct hlist_head *dev_name_head; | |
84 | struct hlist_head *dev_index_head; | |
4e985ada | 85 | unsigned int dev_base_seq; /* protected by rtnl_mutex */ |
aa79e66e | 86 | int ifindex; |
50624c93 | 87 | unsigned int dev_unreg_count; |
97c53cac | 88 | |
5fd30ee7 DL |
89 | /* core fib_rules */ |
90 | struct list_head rules_ops; | |
5fd30ee7 | 91 | |
04b1d4e5 | 92 | struct list_head fib_notifier_ops; /* protected by net_mutex */ |
d12d01d6 | 93 | |
8e602ce2 | 94 | struct net_device *loopback_dev; /* The loopback */ |
8efa6e93 | 95 | struct netns_core core; |
852566f5 | 96 | struct netns_mib mib; |
2aaef4e4 | 97 | struct netns_packet packet; |
a0a53c8b | 98 | struct netns_unix unx; |
8afd351c | 99 | struct netns_ipv4 ipv4; |
dfd56b8b | 100 | #if IS_ENABLED(CONFIG_IPV6) |
b0f159db DL |
101 | struct netns_ipv6 ipv6; |
102 | #endif | |
633fc86f AA |
103 | #if IS_ENABLED(CONFIG_IEEE802154_6LOWPAN) |
104 | struct netns_ieee802154_lowpan ieee802154_lowpan; | |
105 | #endif | |
4db67e80 EB |
106 | #if defined(CONFIG_IP_SCTP) || defined(CONFIG_IP_SCTP_MODULE) |
107 | struct netns_sctp sctp; | |
108 | #endif | |
67019cc9 PE |
109 | #if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE) |
110 | struct netns_dccp dccp; | |
111 | #endif | |
8d870052 | 112 | #ifdef CONFIG_NETFILTER |
f3c1a44a | 113 | struct netns_nf nf; |
8d870052 | 114 | struct netns_xt xt; |
dfdb8d79 AD |
115 | #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE) |
116 | struct netns_ct ct; | |
c038a767 | 117 | #endif |
99633ab2 PNA |
118 | #if defined(CONFIG_NF_TABLES) || defined(CONFIG_NF_TABLES_MODULE) |
119 | struct netns_nftables nft; | |
120 | #endif | |
c038a767 AW |
121 | #if IS_ENABLED(CONFIG_NF_DEFRAG_IPV6) |
122 | struct netns_nf_frag nf_frag; | |
dfdb8d79 | 123 | #endif |
cd8c20b6 AD |
124 | struct sock *nfnl; |
125 | struct sock *nfnl_stash; | |
3499abb2 AS |
126 | #if IS_ENABLED(CONFIG_NETFILTER_NETLINK_ACCT) |
127 | struct list_head nfnl_acct_list; | |
128 | #endif | |
19576c94 PN |
129 | #if IS_ENABLED(CONFIG_NF_CT_NETLINK_TIMEOUT) |
130 | struct list_head nfct_timeout_list; | |
131 | #endif | |
d62ddc21 | 132 | #endif |
3d23e349 | 133 | #ifdef CONFIG_WEXT_CORE |
b333b3d2 | 134 | struct sk_buff_head wext_nlevents; |
8d870052 | 135 | #endif |
1c87733d | 136 | struct net_generic __rcu *gen; |
8e602ce2 ED |
137 | |
138 | /* Note : following structs are cache line aligned */ | |
139 | #ifdef CONFIG_XFRM | |
140 | struct netns_xfrm xfrm; | |
141 | #endif | |
8b4d14d8 | 142 | #if IS_ENABLED(CONFIG_IP_VS) |
61b1ab45 | 143 | struct netns_ipvs *ipvs; |
0189197f EB |
144 | #endif |
145 | #if IS_ENABLED(CONFIG_MPLS) | |
146 | struct netns_mpls mpls; | |
8e8cda6d MK |
147 | #endif |
148 | #if IS_ENABLED(CONFIG_CAN) | |
149 | struct netns_can can; | |
8b4d14d8 | 150 | #endif |
51d7cccf | 151 | struct sock *diag_nlsk; |
5aad1de5 | 152 | atomic_t fnhe_genid; |
3859a271 | 153 | } __randomize_layout; |
5f256bec | 154 | |
c0f39322 DL |
155 | #include <linux/seq_file_net.h> |
156 | ||
4fabcd71 | 157 | /* Init's network namespace */ |
5f256bec | 158 | extern struct net init_net; |
a4aa834a | 159 | |
d727abcb | 160 | #ifdef CONFIG_NET_NS |
e67e16ea JP |
161 | struct net *copy_net_ns(unsigned long flags, struct user_namespace *user_ns, |
162 | struct net *old_net); | |
225c0a01 | 163 | |
7866cc57 | 164 | void net_ns_barrier(void); |
d727abcb EB |
165 | #else /* CONFIG_NET_NS */ |
166 | #include <linux/sched.h> | |
167 | #include <linux/nsproxy.h> | |
038e7332 EB |
168 | static inline struct net *copy_net_ns(unsigned long flags, |
169 | struct user_namespace *user_ns, struct net *old_net) | |
9dd776b6 | 170 | { |
d727abcb EB |
171 | if (flags & CLONE_NEWNET) |
172 | return ERR_PTR(-EINVAL); | |
173 | return old_net; | |
9dd776b6 | 174 | } |
7866cc57 FW |
175 | |
176 | static inline void net_ns_barrier(void) {} | |
d727abcb | 177 | #endif /* CONFIG_NET_NS */ |
225c0a01 DL |
178 | |
179 | ||
180 | extern struct list_head net_namespace_list; | |
9dd776b6 | 181 | |
e67e16ea | 182 | struct net *get_net_ns_by_pid(pid_t pid); |
0f5258cd | 183 | struct net *get_net_ns_by_fd(int fd); |
30ffee84 | 184 | |
535d3ae9 RK |
185 | #ifdef CONFIG_SYSCTL |
186 | void ipx_register_sysctl(void); | |
187 | void ipx_unregister_sysctl(void); | |
188 | #else | |
189 | #define ipx_register_sysctl() | |
190 | #define ipx_unregister_sysctl() | |
191 | #endif | |
192 | ||
d4655795 | 193 | #ifdef CONFIG_NET_NS |
e67e16ea | 194 | void __put_net(struct net *net); |
5f256bec EB |
195 | |
196 | static inline struct net *get_net(struct net *net) | |
197 | { | |
198 | atomic_inc(&net->count); | |
199 | return net; | |
200 | } | |
201 | ||
077130c0 EB |
202 | static inline struct net *maybe_get_net(struct net *net) |
203 | { | |
204 | /* Used when we know struct net exists but we | |
205 | * aren't guaranteed a previous reference count | |
206 | * exists. If the reference count is zero this | |
207 | * function fails and returns NULL. | |
208 | */ | |
209 | if (!atomic_inc_not_zero(&net->count)) | |
210 | net = NULL; | |
211 | return net; | |
212 | } | |
213 | ||
5f256bec EB |
214 | static inline void put_net(struct net *net) |
215 | { | |
216 | if (atomic_dec_and_test(&net->count)) | |
217 | __put_net(net); | |
218 | } | |
219 | ||
878628fb YH |
220 | static inline |
221 | int net_eq(const struct net *net1, const struct net *net2) | |
222 | { | |
223 | return net1 == net2; | |
224 | } | |
a685e089 | 225 | |
4ee806d5 DS |
226 | static inline int check_net(const struct net *net) |
227 | { | |
228 | return atomic_read(&net->count) != 0; | |
229 | } | |
230 | ||
e67e16ea | 231 | void net_drop_ns(void *); |
a685e089 | 232 | |
d4655795 | 233 | #else |
b9f75f45 | 234 | |
d4655795 PE |
235 | static inline struct net *get_net(struct net *net) |
236 | { | |
237 | return net; | |
238 | } | |
239 | ||
240 | static inline void put_net(struct net *net) | |
241 | { | |
242 | } | |
243 | ||
5d1e4468 DL |
244 | static inline struct net *maybe_get_net(struct net *net) |
245 | { | |
246 | return net; | |
247 | } | |
248 | ||
249 | static inline | |
250 | int net_eq(const struct net *net1, const struct net *net2) | |
251 | { | |
252 | return 1; | |
253 | } | |
a685e089 | 254 | |
4ee806d5 DS |
255 | static inline int check_net(const struct net *net) |
256 | { | |
257 | return 1; | |
258 | } | |
259 | ||
a685e089 | 260 | #define net_drop_ns NULL |
5d1e4468 DL |
261 | #endif |
262 | ||
263 | ||
0c5c9fb5 | 264 | typedef struct { |
8f424b5f | 265 | #ifdef CONFIG_NET_NS |
0c5c9fb5 EB |
266 | struct net *net; |
267 | #endif | |
268 | } possible_net_t; | |
8f424b5f | 269 | |
0c5c9fb5 | 270 | static inline void write_pnet(possible_net_t *pnet, struct net *net) |
8f424b5f | 271 | { |
0c5c9fb5 EB |
272 | #ifdef CONFIG_NET_NS |
273 | pnet->net = net; | |
274 | #endif | |
8f424b5f ED |
275 | } |
276 | ||
0c5c9fb5 | 277 | static inline struct net *read_pnet(const possible_net_t *pnet) |
8f424b5f | 278 | { |
0c5c9fb5 EB |
279 | #ifdef CONFIG_NET_NS |
280 | return pnet->net; | |
8f424b5f | 281 | #else |
0c5c9fb5 | 282 | return &init_net; |
8f424b5f | 283 | #endif |
0c5c9fb5 | 284 | } |
5d1e4468 | 285 | |
5f256bec EB |
286 | #define for_each_net(VAR) \ |
287 | list_for_each_entry(VAR, &net_namespace_list, list) | |
288 | ||
11a28d37 JB |
289 | #define for_each_net_rcu(VAR) \ |
290 | list_for_each_entry_rcu(VAR, &net_namespace_list, list) | |
291 | ||
4665079c PE |
292 | #ifdef CONFIG_NET_NS |
293 | #define __net_init | |
294 | #define __net_exit | |
022cbae6 | 295 | #define __net_initdata |
04a6f82c | 296 | #define __net_initconst |
4665079c PE |
297 | #else |
298 | #define __net_init __init | |
bd721ea7 | 299 | #define __net_exit __ref |
022cbae6 | 300 | #define __net_initdata __initdata |
04a6f82c | 301 | #define __net_initconst __initconst |
4665079c | 302 | #endif |
5f256bec | 303 | |
7a0877d4 | 304 | int peernet2id_alloc(struct net *net, struct net *peer); |
59324cf3 ND |
305 | int peernet2id(struct net *net, struct net *peer); |
306 | bool peernet_has_id(struct net *net, struct net *peer); | |
0c7aecd4 ND |
307 | struct net *get_net_ns_by_id(struct net *net, int id); |
308 | ||
5f256bec EB |
309 | struct pernet_operations { |
310 | struct list_head list; | |
311 | int (*init)(struct net *net); | |
312 | void (*exit)(struct net *net); | |
72ad937a | 313 | void (*exit_batch)(struct list_head *net_exit_list); |
c7d03a00 | 314 | unsigned int *id; |
f875bae0 | 315 | size_t size; |
5f256bec EB |
316 | }; |
317 | ||
17edde52 EB |
318 | /* |
319 | * Use these carefully. If you implement a network device and it | |
320 | * needs per network namespace operations use device pernet operations, | |
321 | * otherwise use pernet subsys operations. | |
322 | * | |
4edf547b JB |
323 | * Network interfaces need to be removed from a dying netns _before_ |
324 | * subsys notifiers can be called, as most of the network code cleanup | |
325 | * (which is done from subsys notifiers) runs with the assumption that | |
326 | * dev_remove_pack has been called so no new packets will arrive during | |
327 | * and after the cleanup functions have been called. dev_remove_pack | |
328 | * is not per namespace so instead the guarantee of no more packets | |
329 | * arriving in a network namespace is provided by ensuring that all | |
330 | * network devices and all sockets have left the network namespace | |
331 | * before the cleanup methods are called. | |
17edde52 EB |
332 | * |
333 | * For the longest time the ipv4 icmp code was registered as a pernet | |
334 | * device which caused kernel oops, and panics during network | |
335 | * namespace cleanup. So please don't get this wrong. | |
336 | */ | |
e67e16ea JP |
337 | int register_pernet_subsys(struct pernet_operations *); |
338 | void unregister_pernet_subsys(struct pernet_operations *); | |
339 | int register_pernet_device(struct pernet_operations *); | |
340 | void unregister_pernet_device(struct pernet_operations *); | |
f875bae0 | 341 | |
95bdfccb EB |
342 | struct ctl_table; |
343 | struct ctl_table_header; | |
d62c612e | 344 | |
2ca794e5 | 345 | #ifdef CONFIG_SYSCTL |
e67e16ea JP |
346 | int net_sysctl_init(void); |
347 | struct ctl_table_header *register_net_sysctl(struct net *net, const char *path, | |
348 | struct ctl_table *table); | |
349 | void unregister_net_sysctl_table(struct ctl_table_header *header); | |
48c74958 EB |
350 | #else |
351 | static inline int net_sysctl_init(void) { return 0; } | |
352 | static inline struct ctl_table_header *register_net_sysctl(struct net *net, | |
353 | const char *path, struct ctl_table *table) | |
354 | { | |
355 | return NULL; | |
356 | } | |
357 | static inline void unregister_net_sysctl_table(struct ctl_table_header *header) | |
358 | { | |
359 | } | |
360 | #endif | |
361 | ||
ca4c3fc2 | 362 | static inline int rt_genid_ipv4(struct net *net) |
b42664f8 | 363 | { |
ca4c3fc2 | 364 | return atomic_read(&net->ipv4.rt_genid); |
b42664f8 ND |
365 | } |
366 | ||
ca4c3fc2 | 367 | static inline void rt_genid_bump_ipv4(struct net *net) |
b42664f8 | 368 | { |
ca4c3fc2 | 369 | atomic_inc(&net->ipv4.rt_genid); |
370 | } | |
371 | ||
705f1c86 | 372 | extern void (*__fib6_flush_trees)(struct net *net); |
ca4c3fc2 | 373 | static inline void rt_genid_bump_ipv6(struct net *net) |
374 | { | |
705f1c86 HFS |
375 | if (__fib6_flush_trees) |
376 | __fib6_flush_trees(net); | |
ca4c3fc2 | 377 | } |
ca4c3fc2 | 378 | |
599018a7 LR |
379 | #if IS_ENABLED(CONFIG_IEEE802154_6LOWPAN) |
380 | static inline struct netns_ieee802154_lowpan * | |
381 | net_ieee802154_lowpan(struct net *net) | |
382 | { | |
383 | return &net->ieee802154_lowpan; | |
384 | } | |
599018a7 LR |
385 | #endif |
386 | ||
ca4c3fc2 | 387 | /* For callers who don't really care about whether it's IPv4 or IPv6 */ |
388 | static inline void rt_genid_bump_all(struct net *net) | |
389 | { | |
390 | rt_genid_bump_ipv4(net); | |
391 | rt_genid_bump_ipv6(net); | |
b42664f8 | 392 | } |
95bdfccb | 393 | |
5aad1de5 TT |
394 | static inline int fnhe_genid(struct net *net) |
395 | { | |
396 | return atomic_read(&net->fnhe_genid); | |
397 | } | |
398 | ||
399 | static inline void fnhe_genid_bump(struct net *net) | |
400 | { | |
401 | atomic_inc(&net->fnhe_genid); | |
402 | } | |
403 | ||
5f256bec | 404 | #endif /* __NET_NET_NAMESPACE_H */ |