1 files changed, 39 insertions, 3 deletions

diff --git a/net/ipv4/ip_fragment.c b/net/ipv4/ip_fragment.c
index 4f013343cef7..c51e1a11dc6b 100644
--- a/net/ipv4/ip_fragment.c
+++ b/net/ipv4/ip_fragment.c
@@ -661,17 +661,53 @@ static struct ctl_table ip4_frags_ctl_table[] = {
 
 static int ip4_frags_ctl_register(struct net *net)
 {
+        struct ctl_table *table;
         struct ctl_table_header *hdr;
 
-        hdr = register_net_sysctl_table(net, net_ipv4_ctl_path,
-                        ip4_frags_ctl_table);
-        return hdr == NULL ? -ENOMEM : 0;
+        table = ip4_frags_ctl_table;
+        if (net != &init_net) {
+                table = kmemdup(table, sizeof(ip4_frags_ctl_table), GFP_KERNEL);
+                if (table == NULL)
+                        goto err_alloc;
+
+                table[0].mode &= ~0222;
+                table[1].mode &= ~0222;
+                table[2].mode &= ~0222;
+                table[3].mode &= ~0222;
+                table[4].mode &= ~0222;
+        }
+
+        hdr = register_net_sysctl_table(net, net_ipv4_ctl_path, table);
+        if (hdr == NULL)
+                goto err_reg;
+
+        net->ipv4.frags_hdr = hdr;
+        return 0;
+
+err_reg:
+        if (net != &init_net)
+                kfree(table);
+err_alloc:
+        return -ENOMEM;
+}
+
+static void ip4_frags_ctl_unregister(struct net *net)
+{
+        struct ctl_table *table;
+
+        table = net->ipv4.frags_hdr->ctl_table_arg;
+        unregister_net_sysctl_table(net->ipv4.frags_hdr);
+        kfree(table);
 }
 #else
 static inline int ip4_frags_ctl_register(struct net *net)
 {
         return 0;
 }
+
+static inline void ip4_frags_ctl_unregister(struct net *net)
+{
+}
 #endif
 
 static int ipv4_frags_init_net(struct net *net)