This is a proposed method of making TCP congestion_ops structure const. I wonder if restricting congestion control choices is still necessary? It seems like being overly paranoid, and better enforced by having a more limited kernel config, seccomp or other mechanism.
Stephen Hemminger (1): constify tcp congestion include/net/tcp.h | 10 ++- net/ipv4/tcp.c | 2 - net/ipv4/tcp_bbr.c | 2 +- net/ipv4/tcp_bic.c | 2 +- net/ipv4/tcp_cdg.c | 2 +- net/ipv4/tcp_cong.c | 162 +++++++++++++++++++++++++++++------------------ net/ipv4/tcp_cubic.c | 2 +- net/ipv4/tcp_dctcp.c | 6 +- net/ipv4/tcp_highspeed.c | 2 +- net/ipv4/tcp_htcp.c | 2 +- net/ipv4/tcp_hybla.c | 2 +- net/ipv4/tcp_illinois.c | 2 +- net/ipv4/tcp_lp.c | 2 +- net/ipv4/tcp_nv.c | 2 +- net/ipv4/tcp_scalable.c | 2 +- net/ipv4/tcp_vegas.c | 2 +- net/ipv4/tcp_veno.c | 2 +- net/ipv4/tcp_westwood.c | 2 +- net/ipv4/tcp_yeah.c | 2 +- 19 files changed, 124 insertions(+), 86 deletions(-) -- 2.11.0