diff --git a/fs/locks.c b/fs/locks.c index 28270e74be3428be2b518d4c26daa04e353cff39..0d543c8507d8834ae30d65fc17b9e308b54a6ace 100644 --- a/fs/locks.c +++ b/fs/locks.c @@ -2786,6 +2786,8 @@ static const struct seq_operations locks_seq_operations = { static int __init proc_locks_init(void) { + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return 0; proc_create_seq_private("locks", 0, NULL, &locks_seq_operations, sizeof(struct locks_iterator), NULL); return 0; diff --git a/fs/proc/Kconfig b/fs/proc/Kconfig index 817c02b13b1d549675997df79ba363cdb319105d..6103291f32dd035f8d6b7d67b2e1510a4f036256 100644 --- a/fs/proc/Kconfig +++ b/fs/proc/Kconfig @@ -97,3 +97,8 @@ config PROC_CHILDREN Say Y if you are running any user-space software which takes benefit from this interface. For example, rkt is such a piece of software. + +config PROC_STRIPPED + default n + depends on EXPERT + bool "Strip non-essential /proc functionality to reduce code size" diff --git a/fs/proc/consoles.c b/fs/proc/consoles.c index 954caf0b7fee0321b09372fd5d27ce00b43da6a7..4ad6e320624c4ec07336ec6da2258aa90eb410c7 100644 --- a/fs/proc/consoles.c +++ b/fs/proc/consoles.c @@ -93,6 +93,9 @@ static const struct seq_operations consoles_op = { static int __init proc_consoles_init(void) { + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return 0; + proc_create_seq("consoles", 0, NULL, &consoles_op); return 0; } diff --git a/fs/proc/proc_tty.c b/fs/proc/proc_tty.c index c69ff191e5d8f56019f9f6af723c47e20b805e28..a63df8413fde396d01da2e27c1b0e561159d9a0d 100644 --- a/fs/proc/proc_tty.c +++ b/fs/proc/proc_tty.c @@ -133,7 +133,10 @@ static const struct seq_operations tty_drivers_op = { void proc_tty_register_driver(struct tty_driver *driver) { struct proc_dir_entry *ent; - + + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return; + if (!driver->driver_name || driver->proc_entry || !driver->ops->proc_show) return; @@ -150,6 +153,9 @@ void proc_tty_unregister_driver(struct tty_driver *driver) { struct proc_dir_entry *ent; + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return; + ent = driver->proc_entry; if (!ent) return; @@ -164,6 +170,9 @@ void proc_tty_unregister_driver(struct tty_driver *driver) */ void __init proc_tty_init(void) { + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return; + if (!proc_mkdir("tty", NULL)) return; proc_mkdir("tty/ldisc", NULL); /* Preserved: it's userspace visible */ diff --git a/include/net/snmp.h b/include/net/snmp.h index c9228ad7ee91865cbeff19328e219171dd62b456..7407fc963171bb6756cfe196a1f17707307080b1 100644 --- a/include/net/snmp.h +++ b/include/net/snmp.h @@ -123,6 +123,21 @@ struct linux_xfrm_mib { #define DECLARE_SNMP_STAT(type, name) \ extern __typeof__(type) __percpu *name +#ifdef CONFIG_PROC_STRIPPED +#define __SNMP_STATS_DUMMY(mib) \ + do { (void) mib->mibs[0]; } while(0) + +#define __SNMP_INC_STATS(mib, field) __SNMP_STATS_DUMMY(mib) +#define SNMP_INC_STATS_ATOMIC_LONG(mib, field) __SNMP_STATS_DUMMY(mib) +#define SNMP_INC_STATS(mib, field) __SNMP_STATS_DUMMY(mib) +#define SNMP_DEC_STATS(mib, field) __SNMP_STATS_DUMMY(mib) +#define __SNMP_ADD_STATS(mib, field, addend) __SNMP_STATS_DUMMY(mib) +#define SNMP_ADD_STATS(mib, field, addend) __SNMP_STATS_DUMMY(mib) +#define SNMP_UPD_PO_STATS(mib, basefield, addend) __SNMP_STATS_DUMMY(mib) +#define __SNMP_UPD_PO_STATS(mib, basefield, addend) __SNMP_STATS_DUMMY(mib) + +#else + #define __SNMP_INC_STATS(mib, field) \ __this_cpu_inc(mib->mibs[field]) @@ -153,8 +168,9 @@ struct linux_xfrm_mib { __this_cpu_add(ptr[basefield##OCTETS], addend); \ } while (0) +#endif -#if BITS_PER_LONG==32 +#if (BITS_PER_LONG==32) && !defined(CONFIG_PROC_STRIPPED) #define __SNMP_ADD_STATS64(mib, field, addend) \ do { \ diff --git a/ipc/msg.c b/ipc/msg.c index ac4de3f672615f928f3095178b670464f63f4428..348b704372d02367c0f63a8927d3e4d30da1127d 100644 --- a/ipc/msg.c +++ b/ipc/msg.c @@ -1292,6 +1292,9 @@ void __init msg_init(void) { msg_init_ns(&init_ipc_ns); + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return; + ipc_init_proc_interface("sysvipc/msg", " key msqid perms cbytes qnum lspid lrpid uid gid cuid cgid stime rtime ctime\n", IPC_MSG_IDS, sysvipc_msg_proc_show); diff --git a/ipc/sem.c b/ipc/sem.c index 2bf535dd0b93481a631165d1894d3bb25170c30f..82923e880324b9e619746693734a9b588d78c09e 100644 --- a/ipc/sem.c +++ b/ipc/sem.c @@ -243,6 +243,8 @@ void sem_exit_ns(struct ipc_namespace *ns) void __init sem_init(void) { sem_init_ns(&init_ipc_ns); + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return; ipc_init_proc_interface("sysvipc/sem", " key semid perms nsems uid gid cuid cgid otime ctime\n", IPC_SEM_IDS, sysvipc_sem_proc_show); diff --git a/ipc/shm.c b/ipc/shm.c index 1c65fb357395eace45f25a7c6a37d91ebe30a722..e7922a546d7c5da6b615375cf4904a3424c0e893 100644 --- a/ipc/shm.c +++ b/ipc/shm.c @@ -144,6 +144,8 @@ pure_initcall(ipc_ns_init); void __init shm_init(void) { + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return; ipc_init_proc_interface("sysvipc/shm", #if BITS_PER_LONG <= 32 " key shmid perms size cpid lpid nattch uid gid cuid cgid atime dtime ctime rss swap\n", diff --git a/ipc/util.c b/ipc/util.c index af1b572effb14432b9cfe02a8fbd66bbefdf4a59..7eafea34341faa8ea3371c188d5f28436596cc4e 100644 --- a/ipc/util.c +++ b/ipc/util.c @@ -140,6 +140,9 @@ void __init ipc_init_proc_interface(const char *path, const char *header, struct proc_dir_entry *pde; struct ipc_proc_iface *iface; + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return; + iface = kmalloc(sizeof(*iface), GFP_KERNEL); if (!iface) return; diff --git a/kernel/exec_domain.c b/kernel/exec_domain.c index 33f07c5f25150790bcbbd057171b467b5c0ed2b6..4c226a052bcd5798b59a283a4557271b69b8ef9b 100644 --- a/kernel/exec_domain.c +++ b/kernel/exec_domain.c @@ -29,6 +29,8 @@ static int execdomains_proc_show(struct seq_file *m, void *v) static int __init proc_execdomains_init(void) { + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return 0; proc_create_single("execdomains", 0, NULL, execdomains_proc_show); return 0; } diff --git a/kernel/irq/proc.c b/kernel/irq/proc.c index e8c655b7a4308a51040116eb68e8842c905dc84e..4e83ceb7ef9301f9a980abc46e4d3f7fa872a1d9 100644 --- a/kernel/irq/proc.c +++ b/kernel/irq/proc.c @@ -355,6 +355,9 @@ void register_irq_proc(unsigned int irq, struct irq_desc *desc) void __maybe_unused *irqp = (void *)(unsigned long) irq; char name [MAX_NAMELEN]; + if (IS_ENABLED(CONFIG_PROC_STRIPPED) && !IS_ENABLED(CONFIG_SMP)) + return; + if (!root_irq_dir || (desc->irq_data.chip == &no_irq_chip)) return; @@ -408,6 +411,9 @@ void unregister_irq_proc(unsigned int irq, struct irq_desc *desc) { char name [MAX_NAMELEN]; + if (IS_ENABLED(CONFIG_PROC_STRIPPED) && !IS_ENABLED(CONFIG_SMP)) + return; + if (!root_irq_dir || !desc->dir) return; #ifdef CONFIG_SMP @@ -446,6 +452,9 @@ void init_irq_proc(void) unsigned int irq; struct irq_desc *desc; + if (IS_ENABLED(CONFIG_PROC_STRIPPED) && !IS_ENABLED(CONFIG_SMP)) + return; + /* create /proc/irq */ root_irq_dir = proc_mkdir("irq", NULL); if (!root_irq_dir) diff --git a/kernel/time/timer_list.c b/kernel/time/timer_list.c index 07afcfe2a61b7c02ec6d6e43687fae1344775373..afc72a4080bc42b1b1dc7069be49c76751223f80 100644 --- a/kernel/time/timer_list.c +++ b/kernel/time/timer_list.c @@ -375,6 +375,8 @@ static int __init init_timer_list_procfs(void) { struct proc_dir_entry *pe; + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return 0; pe = proc_create_seq_private("timer_list", 0400, NULL, &timer_list_sops, sizeof(struct timer_list_iter), NULL); if (!pe) diff --git a/mm/vmalloc.c b/mm/vmalloc.c index 1817871b02395ceccecdfa918dce4a97d5203786..3b28ddfe0a433c1c67a387f51e76f10aeb065aa4 100644 --- a/mm/vmalloc.c +++ b/mm/vmalloc.c @@ -2764,6 +2764,8 @@ static const struct seq_operations vmalloc_op = { static int __init proc_vmalloc_init(void) { + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return 0; if (IS_ENABLED(CONFIG_NUMA)) proc_create_seq_private("vmallocinfo", 0400, NULL, &vmalloc_op, diff --git a/mm/vmstat.c b/mm/vmstat.c index ce81b0a7d0186d38c68ace255c79fd744d2d153b..f937d3e7e8f3a6b0ed9dc6c7d72ccb3ae7289052 100644 --- a/mm/vmstat.c +++ b/mm/vmstat.c @@ -1972,10 +1972,12 @@ void __init init_mm_internals(void) start_shepherd_timer(); #endif #ifdef CONFIG_PROC_FS - proc_create_seq("buddyinfo", 0444, NULL, &fragmentation_op); - proc_create_seq("pagetypeinfo", 0400, NULL, &pagetypeinfo_op); + if (!IS_ENABLED(CONFIG_PROC_STRIPPED)) { + proc_create_seq("buddyinfo", 0444, NULL, &fragmentation_op); + proc_create_seq("pagetypeinfo", 0400, NULL, &pagetypeinfo_op); + proc_create_seq("zoneinfo", 0444, NULL, &zoneinfo_op); + } proc_create_seq("vmstat", 0444, NULL, &vmstat_op); - proc_create_seq("zoneinfo", 0444, NULL, &zoneinfo_op); #endif } diff --git a/net/8021q/vlanproc.c b/net/8021q/vlanproc.c index d36e8c4b7f56c48e54e6091414e73fd0d00f3170..b686a3f8deb2b8724357215cc5a883633870dc98 100644 --- a/net/8021q/vlanproc.c +++ b/net/8021q/vlanproc.c @@ -96,6 +96,9 @@ void vlan_proc_cleanup(struct net *net) { struct vlan_net *vn = net_generic(net, vlan_net_id); + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return; + if (vn->proc_vlan_conf) remove_proc_entry(name_conf, vn->proc_vlan_dir); @@ -115,6 +118,9 @@ int __net_init vlan_proc_init(struct net *net) { struct vlan_net *vn = net_generic(net, vlan_net_id); + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return 0; + vn->proc_vlan_dir = proc_net_mkdir(net, name_root, net->proc_net); if (!vn->proc_vlan_dir) goto err; diff --git a/net/core/net-procfs.c b/net/core/net-procfs.c index 63881f72ef71c90c67683bf586dd205ffe864f5b..0e779a5095195a8b67b0a11e5692b2dd8c9985fe 100644 --- a/net/core/net-procfs.c +++ b/net/core/net-procfs.c @@ -279,10 +279,12 @@ static int __net_init dev_proc_net_init(struct net *net) if (!proc_create_net("dev", 0444, net->proc_net, &dev_seq_ops, sizeof(struct seq_net_private))) goto out; - if (!proc_create_seq("softnet_stat", 0444, net->proc_net, + if (!IS_ENABLED(CONFIG_PROC_STRIPPED) && + !proc_create_seq("softnet_stat", 0444, net->proc_net, &softnet_seq_ops)) goto out_dev; - if (!proc_create_net("ptype", 0444, net->proc_net, &ptype_seq_ops, + if (!IS_ENABLED(CONFIG_PROC_STRIPPED) && + !proc_create_net("ptype", 0444, net->proc_net, &ptype_seq_ops, sizeof(struct seq_net_private))) goto out_softnet; @@ -292,9 +294,11 @@ static int __net_init dev_proc_net_init(struct net *net) out: return rc; out_ptype: - remove_proc_entry("ptype", net->proc_net); + if (!IS_ENABLED(CONFIG_PROC_STRIPPED)) + remove_proc_entry("ptype", net->proc_net); out_softnet: - remove_proc_entry("softnet_stat", net->proc_net); + if (!IS_ENABLED(CONFIG_PROC_STRIPPED)) + remove_proc_entry("softnet_stat", net->proc_net); out_dev: remove_proc_entry("dev", net->proc_net); goto out; @@ -304,8 +308,10 @@ static void __net_exit dev_proc_net_exit(struct net *net) { wext_proc_exit(net); - remove_proc_entry("ptype", net->proc_net); - remove_proc_entry("softnet_stat", net->proc_net); + if (!IS_ENABLED(CONFIG_PROC_STRIPPED)) { + remove_proc_entry("ptype", net->proc_net); + remove_proc_entry("softnet_stat", net->proc_net); + } remove_proc_entry("dev", net->proc_net); } diff --git a/net/core/sock.c b/net/core/sock.c index 787dfbb446de398aadcb37ef5a5c78b9644c6a69..275a6cff8acc7bbe729b3d464ae2ff718b0ae62e 100644 --- a/net/core/sock.c +++ b/net/core/sock.c @@ -3512,6 +3512,8 @@ static __net_initdata struct pernet_operations proto_net_ops = { static int __init proto_init(void) { + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return 0; return register_pernet_subsys(&proto_net_ops); } diff --git a/net/ipv4/fib_trie.c b/net/ipv4/fib_trie.c index ef763aaf720d2e4469684534128e162e671f928a..e6ac829495ba01adb3ddfe3af905eb508e2be5f5 100644 --- a/net/ipv4/fib_trie.c +++ b/net/ipv4/fib_trie.c @@ -2720,11 +2720,13 @@ static const struct seq_operations fib_route_seq_ops = { int __net_init fib_proc_init(struct net *net) { - if (!proc_create_net("fib_trie", 0444, net->proc_net, &fib_trie_seq_ops, + if (!IS_ENABLED(CONFIG_PROC_STRIPPED) && + !proc_create_net("fib_trie", 0444, net->proc_net, &fib_trie_seq_ops, sizeof(struct fib_trie_iter))) goto out1; - if (!proc_create_net_single("fib_triestat", 0444, net->proc_net, + if (!IS_ENABLED(CONFIG_PROC_STRIPPED) && + !proc_create_net_single("fib_triestat", 0444, net->proc_net, fib_triestat_seq_show, NULL)) goto out2; @@ -2735,17 +2737,21 @@ int __net_init fib_proc_init(struct net *net) return 0; out3: - remove_proc_entry("fib_triestat", net->proc_net); + if (!IS_ENABLED(CONFIG_PROC_STRIPPED)) + remove_proc_entry("fib_triestat", net->proc_net); out2: - remove_proc_entry("fib_trie", net->proc_net); + if (!IS_ENABLED(CONFIG_PROC_STRIPPED)) + remove_proc_entry("fib_trie", net->proc_net); out1: return -ENOMEM; } void __net_exit fib_proc_exit(struct net *net) { - remove_proc_entry("fib_trie", net->proc_net); - remove_proc_entry("fib_triestat", net->proc_net); + if (!IS_ENABLED(CONFIG_PROC_STRIPPED)) { + remove_proc_entry("fib_trie", net->proc_net); + remove_proc_entry("fib_triestat", net->proc_net); + } remove_proc_entry("route", net->proc_net); } diff --git a/net/ipv4/proc.c b/net/ipv4/proc.c index eab5c02da8ae84a9c2fcc4a1d0c594ff562755b1..df4e96ca9a1e5a73d1d6be584036eb81380a7e62 100644 --- a/net/ipv4/proc.c +++ b/net/ipv4/proc.c @@ -524,5 +524,8 @@ static __net_initdata struct pernet_operations ip_proc_ops = { int __init ip_misc_proc_init(void) { + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return 0; + return register_pernet_subsys(&ip_proc_ops); } diff --git a/net/ipv4/route.c b/net/ipv4/route.c index 3db428242b22d2cd738aad49547dbbf73eb8d3be..78a0fd6b16f5f05e77632b9832d5d0e322147620 100644 --- a/net/ipv4/route.c +++ b/net/ipv4/route.c @@ -412,6 +412,9 @@ static struct pernet_operations ip_rt_proc_ops __net_initdata = { static int __init ip_rt_proc_init(void) { + if (IS_ENABLED(CONFIG_PROC_STRIPPED)) + return 0; + return register_pernet_subsys(&ip_rt_proc_ops); }