linux.git/net/ipv6/icmp.c, branch v3.9

ipv6: Add an error handler for icmp6

2013-01-18T19:19:42+00:00

pmtu and redirect events are now handled in the protocols error handler,
so add an error handler for icmp6 to do this. It is needed in the case
when we have no socket context. Based on a patch by Duan Jiong.

Reported-by: Duan Jiong 
Signed-off-by: Steffen Klassert 
Signed-off-by: David S. Miller

net: Enable some sysctls that are safe for the userns root

2012-11-19T01:33:00+00:00

- Enable the per device ipv4 sysctls:
   net/ipv4/conf//forwarding
   net/ipv4/conf//mc_forwarding
   net/ipv4/conf//accept_redirects
   net/ipv4/conf//secure_redirects
   net/ipv4/conf//shared_media
   net/ipv4/conf//rp_filter
   net/ipv4/conf//send_redirects
   net/ipv4/conf//accept_source_route
   net/ipv4/conf//accept_local
   net/ipv4/conf//src_valid_mark
   net/ipv4/conf//proxy_arp
   net/ipv4/conf//medium_id
   net/ipv4/conf//bootp_relay
   net/ipv4/conf//log_martians
   net/ipv4/conf//tag
   net/ipv4/conf//arp_filter
   net/ipv4/conf//arp_announce
   net/ipv4/conf//arp_ignore
   net/ipv4/conf//arp_accept
   net/ipv4/conf//arp_notify
   net/ipv4/conf//proxy_arp_pvlan
   net/ipv4/conf//disable_xfrm
   net/ipv4/conf//disable_policy
   net/ipv4/conf//force_igmp_version
   net/ipv4/conf//promote_secondaries
   net/ipv4/conf//route_localnet

- Enable the global ipv4 sysctl:
   net/ipv4/ip_forward

- Enable the per device ipv6 sysctls:
   net/ipv6/conf//forwarding
   net/ipv6/conf//hop_limit
   net/ipv6/conf//mtu
   net/ipv6/conf//accept_ra
   net/ipv6/conf//accept_redirects
   net/ipv6/conf//autoconf
   net/ipv6/conf//dad_transmits
   net/ipv6/conf//router_solicitations
   net/ipv6/conf//router_solicitation_interval
   net/ipv6/conf//router_solicitation_delay
   net/ipv6/conf//force_mld_version
   net/ipv6/conf//use_tempaddr
   net/ipv6/conf//temp_valid_lft
   net/ipv6/conf//temp_prefered_lft
   net/ipv6/conf//regen_max_retry
   net/ipv6/conf//max_desync_factor
   net/ipv6/conf//max_addresses
   net/ipv6/conf//accept_ra_defrtr
   net/ipv6/conf//accept_ra_pinfo
   net/ipv6/conf//accept_ra_rtr_pref
   net/ipv6/conf//router_probe_interval
   net/ipv6/conf//accept_ra_rt_info_max_plen
   net/ipv6/conf//proxy_ndp
   net/ipv6/conf//accept_source_route
   net/ipv6/conf//optimistic_dad
   net/ipv6/conf//mc_forwarding
   net/ipv6/conf//disable_ipv6
   net/ipv6/conf//accept_dad
   net/ipv6/conf//force_tllao

- Enable the global ipv6 sysctls:
   net/ipv6/bindv6only
   net/ipv6/icmp/ratelimit

Signed-off-by: "Eric W. Biederman" 
Signed-off-by: David S. Miller

net: Don't export sysctls to unprivileged users

2012-11-19T01:30:55+00:00

In preparation for supporting the creation of network namespaces
by unprivileged users, modify all of the per net sysctl exports
and refuse to allow them to unprivileged users.

This makes it safe for unprivileged users in general to access
per net sysctls, and allows sysctls to be exported to unprivileged
users on an individual basis as they are deemed safe.

Signed-off-by: "Eric W. Biederman" 
Signed-off-by: David S. Miller

ipv6: use IS_ENABLED()

2012-11-01T16:41:35+00:00

#if defined(CONFIG_FOO) || defined(CONFIG_FOO_MODULE)

can be replaced by

#if IS_ENABLED(CONFIG_FOO)

Cc: David S. Miller 
Signed-off-by: Cong Wang 
Signed-off-by: David S. Miller

ipv6: Use icmpv6_notify() to propagate redirect, instead of rt6_redirect().

2012-07-12T07:33:37+00:00

And delete rt6_redirect(), since it is no longer used.

Signed-off-by: David S. Miller

inet: Minimize use of cached route inetpeer.

2012-07-11T05:40:11+00:00

Only use it in the absolutely required cases:

1) COW'ing metrics

2) ipv4 PMTU

3) ipv4 redirects

Signed-off-by: David S. Miller

inet: Sanitize inet{,6} protocol demux.

2012-06-20T01:56:21+00:00

Don't pretend that inet_protos[] and inet6_protos[] are hashes, thay
are just a straight arrays.  Remove all unnecessary hash masking.

Document MAX_INET_PROTOS.

Use RAW_HTABLE_SIZE when appropriate.

Reported-by: Ben Hutchings 
Signed-off-by: David S. Miller

ipv6: Handle PMTU in ICMP error handlers.

2012-06-15T21:54:11+00:00

One tricky issue on the ipv6 side vs. ipv4 is that the ICMP callouts
to handle the error pass the 32-bit info cookie in network byte order
whereas ipv4 passes it around in host byte order.

Like the ipv4 side, we have two helper functions.  One for when we
have a socket context and one for when we do not.

ip6ip6 tunnels are not handled here, because they handle PMTU events
by essentially relaying another ICMP packet-too-big message back to
the original sender.

This patch allows us to get rid of rt6_do_pmtu_disc().  It handles all
kinds of situations that simply cannot happen when we do the PMTU
update directly using a fully resolved route.

In fact, the "plen == 128" check in ip6_rt_update_pmtu() can very
likely be removed or changed into a BUG_ON() check.  We should never
have a prefixed ipv6 route when we get there.

Another piece of strange history here is that TCP and DCCP, unlike in
ipv4, never invoke the update_pmtu() method from their ICMP error
handlers.  This is incredibly astonishing since this is the context
where we have the most accurate context in which to make a PMTU
update, namely we have a fully connected socket and associated cached
socket route.

Signed-off-by: David S. Miller

inet: Create and use rt{,6}_get_peer_create().

2012-06-09T06:24:18+00:00

There's a lot of places that open-code rt{,6}_get_peer() only because
they want to set 'create' to one.  So add an rt{,6}_get_peer_create()
for their sake.

There were also a few spots open-coding plain rt{,6}_get_peer() and
those are transformed here as well.

Signed-off-by: David S. Miller

ipv6: bool/const conversions phase2

2012-05-19T05:08:16+00:00

Mostly bool conversions, some inline removals and const additions.

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller