netns xfrm: per-netns sysctls
Make net.core.xfrm_aevent_etime net.core.xfrm_acq_expires net.core.xfrm_aevent_rseqth net.core.xfrm_larval_drop sysctls per-netns. For that make net_core_path[] global, register it to prevent two /proc/net/core antries and change initcall position -- xfrm_init() is called from fs_initcall, so this one should be fs_initcall at least. Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
committed by
David S. Miller
parent
c68cd1a01b
commit
b27aeadb59
@@ -368,9 +368,9 @@ static struct xfrm_state *xfrm_state_construct(struct net *net,
|
||||
goto error;
|
||||
|
||||
x->km.seq = p->seq;
|
||||
x->replay_maxdiff = sysctl_xfrm_aevent_rseqth;
|
||||
x->replay_maxdiff = net->xfrm.sysctl_aevent_rseqth;
|
||||
/* sysctl_xfrm_aevent_etime is in 100ms units */
|
||||
x->replay_maxage = (sysctl_xfrm_aevent_etime*HZ)/XFRM_AE_ETH_M;
|
||||
x->replay_maxage = (net->xfrm.sysctl_aevent_etime*HZ)/XFRM_AE_ETH_M;
|
||||
x->preplay.bitmap = 0;
|
||||
x->preplay.seq = x->replay.seq+x->replay_maxdiff;
|
||||
x->preplay.oseq = x->replay.oseq +x->replay_maxdiff;
|
||||
|
Reference in New Issue
Block a user