[NET]: Make /proc/net per network namespace

This patch makes /proc/net per network namespace.  It modifies the global
variables proc_net and proc_net_stat to be per network namespace.
The proc_net file helpers are modified to take a network namespace argument,
and all of their callers are fixed to pass &init_net for that argument.
This ensures that all of the /proc/net files are only visible and
usable in the initial network namespace until the code behind them
has been updated to be handle multiple network namespaces.

Making /proc/net per namespace is necessary as at least some files
in /proc/net depend upon the set of network devices which is per
network namespace, and even more files in /proc/net have contents
that are relevant to a single network namespace.

Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

1 files changed, 9 insertions, 8 deletions

diff --git a/net/ipv4/fib_trie.c b/net/ipv4/fib_trie.c
index 52b2891c63b7..be34bd556d58 100644
--- a/net/ipv4/fib_trie.c
+++ b/net/ipv4/fib_trie.c
@@ -73,6 +73,7 @@
 #include <linux/netlink.h>
 #include <linux/init.h>
 #include <linux/list.h>
+#include <net/net_namespace.h>
 #include <net/ip.h>
 #include <net/protocol.h>
 #include <net/route.h>
@@ -2530,30 +2531,30 @@ static const struct file_operations fib_route_fops = {
 
 int __init fib_proc_init(void)
 {
-        if (!proc_net_fops_create("fib_trie", S_IRUGO, &fib_trie_fops))
+        if (!proc_net_fops_create(&init_net, "fib_trie", S_IRUGO, &fib_trie_fops))
                 goto out1;
 
-        if (!proc_net_fops_create("fib_triestat", S_IRUGO, &fib_triestat_fops))
+        if (!proc_net_fops_create(&init_net, "fib_triestat", S_IRUGO, &fib_triestat_fops))
                 goto out2;
 
-        if (!proc_net_fops_create("route", S_IRUGO, &fib_route_fops))
+        if (!proc_net_fops_create(&init_net, "route", S_IRUGO, &fib_route_fops))
                 goto out3;
 
         return 0;
 
 out3:
-        proc_net_remove("fib_triestat");
+        proc_net_remove(&init_net, "fib_triestat");
 out2:
-        proc_net_remove("fib_trie");
+        proc_net_remove(&init_net, "fib_trie");
 out1:
         return -ENOMEM;
 }
 
 void __init fib_proc_exit(void)
 {
-        proc_net_remove("fib_trie");
-        proc_net_remove("fib_triestat");
-        proc_net_remove("route");
+        proc_net_remove(&init_net, "fib_trie");
+        proc_net_remove(&init_net, "fib_triestat");
+        proc_net_remove(&init_net, "route");
 }
 
 #endif /* CONFIG_PROC_FS */