Commit | Line | Data |
---|---|---|
ae5e1b22 PE |
1 | #ifndef __IPC_NAMESPACE_H__ |
2 | #define __IPC_NAMESPACE_H__ | |
3 | ||
4 | #include <linux/err.h> | |
ed2ddbf8 PP |
5 | #include <linux/idr.h> |
6 | #include <linux/rwsem.h> | |
b6b337ad | 7 | #include <linux/notifier.h> |
b0e77598 | 8 | #include <linux/nsproxy.h> |
b6b337ad ND |
9 | |
10 | /* | |
11 | * ipc namespace events | |
12 | */ | |
13 | #define IPCNS_MEMCHANGED 0x00000001 /* Notify lowmem size changed */ | |
e2c284d8 ND |
14 | #define IPCNS_CREATED 0x00000002 /* Notify new ipc namespace created */ |
15 | #define IPCNS_REMOVED 0x00000003 /* Notify ipc namespace removed */ | |
b6b337ad ND |
16 | |
17 | #define IPCNS_CALLBACK_PRI 0 | |
18 | ||
b515498f | 19 | struct user_namespace; |
ed2ddbf8 PP |
20 | |
21 | struct ipc_ids { | |
22 | int in_use; | |
23 | unsigned short seq; | |
24 | unsigned short seq_max; | |
25 | struct rw_semaphore rw_mutex; | |
26 | struct idr ipcs_idr; | |
03f59566 | 27 | int next_id; |
ed2ddbf8 | 28 | }; |
ae5e1b22 | 29 | |
ae5e1b22 | 30 | struct ipc_namespace { |
7eafd7c7 | 31 | atomic_t count; |
ed2ddbf8 | 32 | struct ipc_ids ids[3]; |
ae5e1b22 PE |
33 | |
34 | int sem_ctls[4]; | |
35 | int used_sems; | |
36 | ||
37 | int msg_ctlmax; | |
38 | int msg_ctlmnb; | |
39 | int msg_ctlmni; | |
40 | atomic_t msg_bytes; | |
41 | atomic_t msg_hdrs; | |
9eefe520 | 42 | int auto_msgmni; |
ae5e1b22 PE |
43 | |
44 | size_t shm_ctlmax; | |
45 | size_t shm_ctlall; | |
d69f3bad | 46 | unsigned long shm_tot; |
ae5e1b22 | 47 | int shm_ctlmni; |
b34a6b1d VK |
48 | /* |
49 | * Defines whether IPC_RMID is forced for _all_ shm segments regardless | |
50 | * of shmctl() | |
51 | */ | |
52 | int shm_rmid_forced; | |
b6b337ad | 53 | |
b6b337ad | 54 | struct notifier_block ipcns_nb; |
614b84cf SH |
55 | |
56 | /* The kern_mount of the mqueuefs sb. We take a ref on it */ | |
57 | struct vfsmount *mq_mnt; | |
58 | ||
59 | /* # queues in this ns, protected by mq_lock */ | |
60 | unsigned int mq_queues_count; | |
61 | ||
62 | /* next fields are set through sysctl */ | |
63 | unsigned int mq_queues_max; /* initialized to DFLT_QUEUESMAX */ | |
64 | unsigned int mq_msg_max; /* initialized to DFLT_MSGMAX */ | |
65 | unsigned int mq_msgsize_max; /* initialized to DFLT_MSGSIZEMAX */ | |
cef0184c KM |
66 | unsigned int mq_msg_default; |
67 | unsigned int mq_msgsize_default; | |
614b84cf | 68 | |
b515498f SH |
69 | /* user_ns which owns the ipc ns */ |
70 | struct user_namespace *user_ns; | |
98f842e6 EB |
71 | |
72 | unsigned int proc_inum; | |
ae5e1b22 PE |
73 | }; |
74 | ||
75 | extern struct ipc_namespace init_ipc_ns; | |
4d89dc6a | 76 | extern atomic_t nr_ipc_ns; |
ae5e1b22 | 77 | |
7eafd7c7 | 78 | extern spinlock_t mq_lock; |
b6b337ad | 79 | |
614b84cf | 80 | #ifdef CONFIG_SYSVIPC |
b6b337ad | 81 | extern int register_ipcns_notifier(struct ipc_namespace *); |
6546bc42 | 82 | extern int cond_register_ipcns_notifier(struct ipc_namespace *); |
9eefe520 | 83 | extern void unregister_ipcns_notifier(struct ipc_namespace *); |
b6b337ad | 84 | extern int ipcns_notify(unsigned long); |
b34a6b1d | 85 | extern void shm_destroy_orphaned(struct ipc_namespace *ns); |
b6b337ad | 86 | #else /* CONFIG_SYSVIPC */ |
614b84cf SH |
87 | static inline int register_ipcns_notifier(struct ipc_namespace *ns) |
88 | { return 0; } | |
89 | static inline int cond_register_ipcns_notifier(struct ipc_namespace *ns) | |
90 | { return 0; } | |
91 | static inline void unregister_ipcns_notifier(struct ipc_namespace *ns) { } | |
92 | static inline int ipcns_notify(unsigned long l) { return 0; } | |
b34a6b1d | 93 | static inline void shm_destroy_orphaned(struct ipc_namespace *ns) {} |
b6b337ad | 94 | #endif /* CONFIG_SYSVIPC */ |
ae5e1b22 | 95 | |
614b84cf | 96 | #ifdef CONFIG_POSIX_MQUEUE |
7eafd7c7 | 97 | extern int mq_init_ns(struct ipc_namespace *ns); |
5b5c4d1a DL |
98 | /* |
99 | * POSIX Message Queue default values: | |
100 | * | |
101 | * MIN_*: Lowest value an admin can set the maximum unprivileged limit to | |
102 | * DFLT_*MAX: Default values for the maximum unprivileged limits | |
103 | * DFLT_{MSG,MSGSIZE}: Default values used when the user doesn't supply | |
104 | * an attribute to the open call and the queue must be created | |
105 | * HARD_*: Highest value the maximums can be set to. These are enforced | |
106 | * on CAP_SYS_RESOURCE apps as well making them inviolate (so make them | |
107 | * suitably high) | |
108 | * | |
109 | * POSIX Requirements: | |
110 | * Per app minimum openable message queues - 8. This does not map well | |
111 | * to the fact that we limit the number of queues on a per namespace | |
112 | * basis instead of a per app basis. So, make the default high enough | |
113 | * that no given app should have a hard time opening 8 queues. | |
114 | * Minimum maximum for HARD_MSGMAX - 32767. I bumped this to 65536. | |
115 | * Minimum maximum for HARD_MSGSIZEMAX - POSIX is silent on this. However, | |
116 | * we have run into a situation where running applications in the wild | |
117 | * require this to be at least 5MB, and preferably 10MB, so I set the | |
118 | * value to 16MB in hopes that this user is the worst of the bunch and | |
119 | * the new maximum will handle anyone else. I may have to revisit this | |
120 | * in the future. | |
121 | */ | |
122 | #define MIN_QUEUESMAX 1 | |
123 | #define DFLT_QUEUESMAX 256 | |
124 | #define HARD_QUEUESMAX 1024 | |
125 | #define MIN_MSGMAX 1 | |
e6315bb1 KM |
126 | #define DFLT_MSG 10U |
127 | #define DFLT_MSGMAX 10 | |
5b5c4d1a DL |
128 | #define HARD_MSGMAX 65536 |
129 | #define MIN_MSGSIZEMAX 128 | |
130 | #define DFLT_MSGSIZE 8192U | |
e6315bb1 | 131 | #define DFLT_MSGSIZEMAX 8192 |
5b5c4d1a | 132 | #define HARD_MSGSIZEMAX (16*1024*1024) |
614b84cf | 133 | #else |
7eafd7c7 | 134 | static inline int mq_init_ns(struct ipc_namespace *ns) { return 0; } |
614b84cf SH |
135 | #endif |
136 | ||
137 | #if defined(CONFIG_IPC_NS) | |
ae5e1b22 | 138 | extern struct ipc_namespace *copy_ipcs(unsigned long flags, |
bcf58e72 EB |
139 | struct user_namespace *user_ns, struct ipc_namespace *ns); |
140 | ||
ae5e1b22 PE |
141 | static inline struct ipc_namespace *get_ipc_ns(struct ipc_namespace *ns) |
142 | { | |
143 | if (ns) | |
7eafd7c7 | 144 | atomic_inc(&ns->count); |
ae5e1b22 PE |
145 | return ns; |
146 | } | |
147 | ||
7eafd7c7 | 148 | extern void put_ipc_ns(struct ipc_namespace *ns); |
ae5e1b22 PE |
149 | #else |
150 | static inline struct ipc_namespace *copy_ipcs(unsigned long flags, | |
bcf58e72 | 151 | struct user_namespace *user_ns, struct ipc_namespace *ns) |
ae5e1b22 PE |
152 | { |
153 | if (flags & CLONE_NEWIPC) | |
154 | return ERR_PTR(-EINVAL); | |
155 | ||
bcf58e72 | 156 | return ns; |
ae5e1b22 PE |
157 | } |
158 | ||
159 | static inline struct ipc_namespace *get_ipc_ns(struct ipc_namespace *ns) | |
160 | { | |
161 | return ns; | |
162 | } | |
163 | ||
164 | static inline void put_ipc_ns(struct ipc_namespace *ns) | |
165 | { | |
166 | } | |
167 | #endif | |
bdc8e5f8 SH |
168 | |
169 | #ifdef CONFIG_POSIX_MQUEUE_SYSCTL | |
170 | ||
171 | struct ctl_table_header; | |
172 | extern struct ctl_table_header *mq_register_sysctl_table(void); | |
173 | ||
174 | #else /* CONFIG_POSIX_MQUEUE_SYSCTL */ | |
175 | ||
176 | static inline struct ctl_table_header *mq_register_sysctl_table(void) | |
177 | { | |
178 | return NULL; | |
179 | } | |
180 | ||
181 | #endif /* CONFIG_POSIX_MQUEUE_SYSCTL */ | |
ae5e1b22 | 182 | #endif |