Commit | Line | Data |
---|---|---|
ae5e1b22 PE |
1 | #ifndef __IPC_NAMESPACE_H__ |
2 | #define __IPC_NAMESPACE_H__ | |
3 | ||
4 | #include <linux/err.h> | |
ed2ddbf8 PP |
5 | #include <linux/idr.h> |
6 | #include <linux/rwsem.h> | |
b6b337ad | 7 | #include <linux/notifier.h> |
b0e77598 | 8 | #include <linux/nsproxy.h> |
b6b337ad ND |
9 | |
10 | /* | |
11 | * ipc namespace events | |
12 | */ | |
13 | #define IPCNS_MEMCHANGED 0x00000001 /* Notify lowmem size changed */ | |
e2c284d8 ND |
14 | #define IPCNS_CREATED 0x00000002 /* Notify new ipc namespace created */ |
15 | #define IPCNS_REMOVED 0x00000003 /* Notify ipc namespace removed */ | |
b6b337ad ND |
16 | |
17 | #define IPCNS_CALLBACK_PRI 0 | |
18 | ||
b515498f | 19 | struct user_namespace; |
ed2ddbf8 PP |
20 | |
21 | struct ipc_ids { | |
22 | int in_use; | |
23 | unsigned short seq; | |
24 | unsigned short seq_max; | |
25 | struct rw_semaphore rw_mutex; | |
26 | struct idr ipcs_idr; | |
27 | }; | |
ae5e1b22 | 28 | |
ae5e1b22 | 29 | struct ipc_namespace { |
7eafd7c7 | 30 | atomic_t count; |
ed2ddbf8 | 31 | struct ipc_ids ids[3]; |
ae5e1b22 PE |
32 | |
33 | int sem_ctls[4]; | |
34 | int used_sems; | |
35 | ||
36 | int msg_ctlmax; | |
37 | int msg_ctlmnb; | |
38 | int msg_ctlmni; | |
39 | atomic_t msg_bytes; | |
40 | atomic_t msg_hdrs; | |
9eefe520 | 41 | int auto_msgmni; |
ae5e1b22 PE |
42 | |
43 | size_t shm_ctlmax; | |
44 | size_t shm_ctlall; | |
45 | int shm_ctlmni; | |
46 | int shm_tot; | |
b34a6b1d VK |
47 | /* |
48 | * Defines whether IPC_RMID is forced for _all_ shm segments regardless | |
49 | * of shmctl() | |
50 | */ | |
51 | int shm_rmid_forced; | |
b6b337ad | 52 | |
b6b337ad | 53 | struct notifier_block ipcns_nb; |
614b84cf SH |
54 | |
55 | /* The kern_mount of the mqueuefs sb. We take a ref on it */ | |
56 | struct vfsmount *mq_mnt; | |
57 | ||
58 | /* # queues in this ns, protected by mq_lock */ | |
59 | unsigned int mq_queues_count; | |
60 | ||
61 | /* next fields are set through sysctl */ | |
62 | unsigned int mq_queues_max; /* initialized to DFLT_QUEUESMAX */ | |
63 | unsigned int mq_msg_max; /* initialized to DFLT_MSGMAX */ | |
64 | unsigned int mq_msgsize_max; /* initialized to DFLT_MSGSIZEMAX */ | |
cef0184c KM |
65 | unsigned int mq_msg_default; |
66 | unsigned int mq_msgsize_default; | |
614b84cf | 67 | |
b515498f SH |
68 | /* user_ns which owns the ipc ns */ |
69 | struct user_namespace *user_ns; | |
ae5e1b22 PE |
70 | }; |
71 | ||
72 | extern struct ipc_namespace init_ipc_ns; | |
4d89dc6a | 73 | extern atomic_t nr_ipc_ns; |
ae5e1b22 | 74 | |
7eafd7c7 | 75 | extern spinlock_t mq_lock; |
b6b337ad | 76 | |
614b84cf | 77 | #ifdef CONFIG_SYSVIPC |
b6b337ad | 78 | extern int register_ipcns_notifier(struct ipc_namespace *); |
6546bc42 | 79 | extern int cond_register_ipcns_notifier(struct ipc_namespace *); |
9eefe520 | 80 | extern void unregister_ipcns_notifier(struct ipc_namespace *); |
b6b337ad | 81 | extern int ipcns_notify(unsigned long); |
b34a6b1d | 82 | extern void shm_destroy_orphaned(struct ipc_namespace *ns); |
b6b337ad | 83 | #else /* CONFIG_SYSVIPC */ |
614b84cf SH |
84 | static inline int register_ipcns_notifier(struct ipc_namespace *ns) |
85 | { return 0; } | |
86 | static inline int cond_register_ipcns_notifier(struct ipc_namespace *ns) | |
87 | { return 0; } | |
88 | static inline void unregister_ipcns_notifier(struct ipc_namespace *ns) { } | |
89 | static inline int ipcns_notify(unsigned long l) { return 0; } | |
b34a6b1d | 90 | static inline void shm_destroy_orphaned(struct ipc_namespace *ns) {} |
b6b337ad | 91 | #endif /* CONFIG_SYSVIPC */ |
ae5e1b22 | 92 | |
614b84cf | 93 | #ifdef CONFIG_POSIX_MQUEUE |
7eafd7c7 | 94 | extern int mq_init_ns(struct ipc_namespace *ns); |
5b5c4d1a DL |
95 | /* |
96 | * POSIX Message Queue default values: | |
97 | * | |
98 | * MIN_*: Lowest value an admin can set the maximum unprivileged limit to | |
99 | * DFLT_*MAX: Default values for the maximum unprivileged limits | |
100 | * DFLT_{MSG,MSGSIZE}: Default values used when the user doesn't supply | |
101 | * an attribute to the open call and the queue must be created | |
102 | * HARD_*: Highest value the maximums can be set to. These are enforced | |
103 | * on CAP_SYS_RESOURCE apps as well making them inviolate (so make them | |
104 | * suitably high) | |
105 | * | |
106 | * POSIX Requirements: | |
107 | * Per app minimum openable message queues - 8. This does not map well | |
108 | * to the fact that we limit the number of queues on a per namespace | |
109 | * basis instead of a per app basis. So, make the default high enough | |
110 | * that no given app should have a hard time opening 8 queues. | |
111 | * Minimum maximum for HARD_MSGMAX - 32767. I bumped this to 65536. | |
112 | * Minimum maximum for HARD_MSGSIZEMAX - POSIX is silent on this. However, | |
113 | * we have run into a situation where running applications in the wild | |
114 | * require this to be at least 5MB, and preferably 10MB, so I set the | |
115 | * value to 16MB in hopes that this user is the worst of the bunch and | |
116 | * the new maximum will handle anyone else. I may have to revisit this | |
117 | * in the future. | |
118 | */ | |
119 | #define MIN_QUEUESMAX 1 | |
120 | #define DFLT_QUEUESMAX 256 | |
121 | #define HARD_QUEUESMAX 1024 | |
122 | #define MIN_MSGMAX 1 | |
e6315bb1 KM |
123 | #define DFLT_MSG 10U |
124 | #define DFLT_MSGMAX 10 | |
5b5c4d1a DL |
125 | #define HARD_MSGMAX 65536 |
126 | #define MIN_MSGSIZEMAX 128 | |
127 | #define DFLT_MSGSIZE 8192U | |
e6315bb1 | 128 | #define DFLT_MSGSIZEMAX 8192 |
5b5c4d1a | 129 | #define HARD_MSGSIZEMAX (16*1024*1024) |
614b84cf | 130 | #else |
7eafd7c7 | 131 | static inline int mq_init_ns(struct ipc_namespace *ns) { return 0; } |
614b84cf SH |
132 | #endif |
133 | ||
134 | #if defined(CONFIG_IPC_NS) | |
ae5e1b22 | 135 | extern struct ipc_namespace *copy_ipcs(unsigned long flags, |
b0e77598 | 136 | struct task_struct *tsk); |
ae5e1b22 PE |
137 | static inline struct ipc_namespace *get_ipc_ns(struct ipc_namespace *ns) |
138 | { | |
139 | if (ns) | |
7eafd7c7 | 140 | atomic_inc(&ns->count); |
ae5e1b22 PE |
141 | return ns; |
142 | } | |
143 | ||
7eafd7c7 | 144 | extern void put_ipc_ns(struct ipc_namespace *ns); |
ae5e1b22 PE |
145 | #else |
146 | static inline struct ipc_namespace *copy_ipcs(unsigned long flags, | |
b0e77598 | 147 | struct task_struct *tsk) |
ae5e1b22 PE |
148 | { |
149 | if (flags & CLONE_NEWIPC) | |
150 | return ERR_PTR(-EINVAL); | |
151 | ||
b0e77598 | 152 | return tsk->nsproxy->ipc_ns; |
ae5e1b22 PE |
153 | } |
154 | ||
155 | static inline struct ipc_namespace *get_ipc_ns(struct ipc_namespace *ns) | |
156 | { | |
157 | return ns; | |
158 | } | |
159 | ||
160 | static inline void put_ipc_ns(struct ipc_namespace *ns) | |
161 | { | |
162 | } | |
163 | #endif | |
bdc8e5f8 SH |
164 | |
165 | #ifdef CONFIG_POSIX_MQUEUE_SYSCTL | |
166 | ||
167 | struct ctl_table_header; | |
168 | extern struct ctl_table_header *mq_register_sysctl_table(void); | |
169 | ||
170 | #else /* CONFIG_POSIX_MQUEUE_SYSCTL */ | |
171 | ||
172 | static inline struct ctl_table_header *mq_register_sysctl_table(void) | |
173 | { | |
174 | return NULL; | |
175 | } | |
176 | ||
177 | #endif /* CONFIG_POSIX_MQUEUE_SYSCTL */ | |
ae5e1b22 | 178 | #endif |