[NETFILTER]: ipt_recent: add module parameter for changing ownership of /proc/net/ipt_recent/* (b93ff783) · Commits · 戴 / test

net/ipv4/netfilter/ipt_recent.c

+8 −0

Original line number	Diff line number	Diff line
		@@ -35,14 +35,20 @@ static unsigned int ip_list_tot = 100;
		static unsigned int ip_pkt_list_tot = 20;
		static unsigned int ip_list_hash_size = 0;
		static unsigned int ip_list_perms = 0644;
		static unsigned int ip_list_uid = 0;
		static unsigned int ip_list_gid = 0;
		module_param(ip_list_tot, uint, 0400);
		module_param(ip_pkt_list_tot, uint, 0400);
		module_param(ip_list_hash_size, uint, 0400);
		module_param(ip_list_perms, uint, 0400);
		module_param(ip_list_uid, uint, 0400);
		module_param(ip_list_gid, uint, 0400);
		MODULE_PARM_DESC(ip_list_tot, "number of IPs to remember per list");
		MODULE_PARM_DESC(ip_pkt_list_tot, "number of packets per IP to remember (max. 255)");
		MODULE_PARM_DESC(ip_list_hash_size, "size of hash table used to look up IPs");
		MODULE_PARM_DESC(ip_list_perms, "permissions on /proc/net/ipt_recent/* files");
		MODULE_PARM_DESC(ip_list_uid,"owner of /proc/net/ipt_recent/* files");
		MODULE_PARM_DESC(ip_list_gid,"owning group of /proc/net/ipt_recent/* files");


		struct recent_entry {
		@@ -274,6 +280,8 @@ ipt_recent_checkentry(const char tablename, const void ip,
		goto out;
		}
		t->proc->proc_fops = &recent_fops;
		t->proc->uid = ip_list_uid;
		t->proc->gid = ip_list_gid;
		t->proc->data = t;
		#endif
		spin_lock_bh(&recent_lock);