[NETFILTER]: ipt_recent: add module parameter for changing ownership of /proc/net/ipt_recent/*
Signed-off-by: Daniel De Graaf <danield@iastate.edu> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
a468701db5
commit
b93ff78317
|
@ -35,14 +35,20 @@ static unsigned int ip_list_tot = 100;
|
|||
static unsigned int ip_pkt_list_tot = 20;
|
||||
static unsigned int ip_list_hash_size = 0;
|
||||
static unsigned int ip_list_perms = 0644;
|
||||
static unsigned int ip_list_uid = 0;
|
||||
static unsigned int ip_list_gid = 0;
|
||||
module_param(ip_list_tot, uint, 0400);
|
||||
module_param(ip_pkt_list_tot, uint, 0400);
|
||||
module_param(ip_list_hash_size, uint, 0400);
|
||||
module_param(ip_list_perms, uint, 0400);
|
||||
module_param(ip_list_uid, uint, 0400);
|
||||
module_param(ip_list_gid, uint, 0400);
|
||||
MODULE_PARM_DESC(ip_list_tot, "number of IPs to remember per list");
|
||||
MODULE_PARM_DESC(ip_pkt_list_tot, "number of packets per IP to remember (max. 255)");
|
||||
MODULE_PARM_DESC(ip_list_hash_size, "size of hash table used to look up IPs");
|
||||
MODULE_PARM_DESC(ip_list_perms, "permissions on /proc/net/ipt_recent/* files");
|
||||
MODULE_PARM_DESC(ip_list_uid,"owner of /proc/net/ipt_recent/* files");
|
||||
MODULE_PARM_DESC(ip_list_gid,"owning group of /proc/net/ipt_recent/* files");
|
||||
|
||||
|
||||
struct recent_entry {
|
||||
|
@ -274,6 +280,8 @@ ipt_recent_checkentry(const char *tablename, const void *ip,
|
|||
goto out;
|
||||
}
|
||||
t->proc->proc_fops = &recent_fops;
|
||||
t->proc->uid = ip_list_uid;
|
||||
t->proc->gid = ip_list_gid;
|
||||
t->proc->data = t;
|
||||
#endif
|
||||
spin_lock_bh(&recent_lock);
|
||||
|
|
Loading…
Reference in New Issue