diff options
| author | ume <ume@FreeBSD.org> | 2005-08-11 07:28:01 +0000 |
|---|---|---|
| committer | ume <ume@FreeBSD.org> | 2005-08-11 07:28:01 +0000 |
| commit | e0688f129366b4f89acf47c45af55135dc0609ae (patch) | |
| tree | f74fdbff30e343b482b8a3f923bb6899a284b555 /sys/netinet6 | |
| parent | 854969251f65c1e0bf255b9ed20baea242a5c6b8 (diff) | |
| download | FreeBSD-src-e0688f129366b4f89acf47c45af55135dc0609ae.zip FreeBSD-src-e0688f129366b4f89acf47c45af55135dc0609ae.tar.gz | |
create sysctl tree dynamically. it is required to share
net.inet6.ip6.fw with upcomming ipfw2 improvement for IPv6.
Requested by: bz
Diffstat (limited to 'sys/netinet6')
| -rw-r--r-- | sys/netinet6/ip6_fw.c | 31 |
1 files changed, 21 insertions, 10 deletions
diff --git a/sys/netinet6/ip6_fw.c b/sys/netinet6/ip6_fw.c index 30a176a..6927b60 100644 --- a/sys/netinet6/ip6_fw.c +++ b/sys/netinet6/ip6_fw.c @@ -114,17 +114,9 @@ static int fw6_verbose_limit = 0; static LIST_HEAD (ip6_fw_head, ip6_fw_chain) ip6_fw_chain; -#ifdef SYSCTL_NODE SYSCTL_DECL(_net_inet6_ip6); -SYSCTL_NODE(_net_inet6_ip6, OID_AUTO, fw, CTLFLAG_RW | CTLFLAG_SECURE, - 0, "Firewall"); -SYSCTL_INT(_net_inet6_ip6_fw, OID_AUTO, enable, CTLFLAG_RW | CTLFLAG_SECURE, - &ip6_fw_enable, 0, "Enable ip6fw"); -SYSCTL_INT(_net_inet6_ip6_fw, OID_AUTO, debug, CTLFLAG_RW, &fw6_debug, 0, ""); -SYSCTL_INT(_net_inet6_ip6_fw, OID_AUTO, verbose, CTLFLAG_RW | CTLFLAG_SECURE, - &fw6_verbose, 0, ""); -SYSCTL_INT(_net_inet6_ip6_fw, OID_AUTO, verbose_limit, CTLFLAG_RW, &fw6_verbose_limit, 0, ""); -#endif +static struct sysctl_ctx_list ip6_fw_sysctl_ctx; +static struct sysctl_oid *ip6_fw_sysctl_tree; #define dprintf(a) do { \ if (fw6_debug) \ @@ -1245,6 +1237,22 @@ ip6_fw_init(void) add_entry6(&ip6_fw_chain, &default_rule)) panic(__func__); + /* Setup our sysctl tree */ + sysctl_ctx_init(&ip6_fw_sysctl_ctx); + ip6_fw_sysctl_tree = SYSCTL_ADD_NODE(&ip6_fw_sysctl_ctx, + SYSCTL_STATIC_CHILDREN(_net_inet6_ip6), OID_AUTO, "fw", + CTLFLAG_RW | CTLFLAG_SECURE, 0, "Firewall"); + SYSCTL_ADD_INT(&ip6_fw_sysctl_ctx, SYSCTL_CHILDREN(ip6_fw_sysctl_tree), + OID_AUTO, "enable", CTLFLAG_RW | CTLFLAG_SECURE, &ip6_fw_enable, 0, + "Enable ip6fw"); + SYSCTL_ADD_INT(&ip6_fw_sysctl_ctx, SYSCTL_CHILDREN(ip6_fw_sysctl_tree), + OID_AUTO, "debug", CTLFLAG_RW, &fw6_debug, 0, ""); + SYSCTL_ADD_INT(&ip6_fw_sysctl_ctx, SYSCTL_CHILDREN(ip6_fw_sysctl_tree), + OID_AUTO, "verbose", CTLFLAG_RW | CTLFLAG_SECURE, &fw6_verbose, 0, + ""); + SYSCTL_ADD_INT(&ip6_fw_sysctl_ctx, SYSCTL_CHILDREN(ip6_fw_sysctl_tree), + OID_AUTO, "verbose_limit", CTLFLAG_RW, &fw6_verbose_limit, 0, ""); + printf("IPv6 packet filtering initialized, "); #ifdef IPV6FIREWALL_DEFAULT_TO_ACCEPT printf("default to accept, "); @@ -1289,6 +1297,9 @@ ip6fw_modevent(module_t mod, int type, void *unused) free(fcp, M_IP6FW); } + /* Free sysctl tree */ + sysctl_ctx_free(&ip6_fw_sysctl_ctx); + splx(s); printf("IPv6 firewall unloaded\n"); return 0; |
