[EMAIL PROTECTED] wrote:
Hi Pavel,
This patch seems to be missing from your most recent patchset.
Do you want to include it in the set as a helper or should I
just send this to Andrew separately ?
Well, AFAIS this is also relevant to current kernel, so I think
that if you send it to Andrew this will be just fine. Besides,
the pid namespaces patchset is already huge, so pushing patches
separately from it is also very good.
Thanks,
Pavel
Suka
----- Forwarded message from [EMAIL PROTECTED] -----
| Date: Fri, 3 Aug 2007 13:51:20 -0700
| From: [EMAIL PROTECTED]
| To: Oleg Nesterov <[EMAIL PROTECTED]>
| Cc: Containers <[EMAIL PROTECTED]>, Pavel Emelianov <[EMAIL PROTECTED]>
| Subject: Re: [PATCH] Fix capability.c to work with threaded init
|
| Oleg Nesterov [EMAIL PROTECTED] wrote:
| | On 08/03, Dave Hansen wrote:
| | >
| | > On Thu, 2007-08-02 at 23:26 -0700, [EMAIL PROTECTED] wrote:
| | > >
| | > > Callers of is_container_init() should pass in task->group_leader
| | > > to ensure they work with threaded-init.
| | >
| | > Can you explain this in a little more detail? That's a pretty sparse
| | > changelog.
| |
|
| You are right. The changelog could be better. How about this:
|
| |
| | Without this change cap_set_all() skips only the main thread of /sbin/init,
| | but we should skip the entire process as the comment states.
| |
| | Oleg.
|
|
| ---
|
| From: Sukadev Bhattiprolu <[EMAIL PROTECTED]>
| Subject: [PATCH] cap_set_all() must skip all threads of init
|
| When setting capabilities, cap_set_all() must skip all threads of the
| container_init process - not just the main thread.
|
| Signed-off-by: Sukadev Bhattiprolu <[EMAIL PROTECTED]>
| ---
| kernel/capability.c | 2 +-
| 1 file changed, 1 insertion(+), 1 deletion(-)
|
| Index: lx26-23-rc1-mm1/kernel/capability.c
| ===================================================================
| --- lx26-23-rc1-mm1.orig/kernel/capability.c 2007-08-02 22:58:02.000000000
-0700
| +++ lx26-23-rc1-mm1/kernel/capability.c 2007-08-02 22:58:17.000000000
-0700
| @@ -137,7 +137,7 @@ static inline int cap_set_all(kernel_cap
| int found = 0;
|
| do_each_thread(g, target) {
| - if (target == current || is_container_init(target))
| + if (target == current ||
is_container_init(target->group_leader))
| continue;
| found = 1;
| if (security_capset_check(target, effective, inheritable,
|
| _______________________________________________
| Containers mailing list
| [EMAIL PROTECTED]
| https://lists.linux-foundation.org/mailman/listinfo/containers
----- End forwarded message -----
_______________________________________________
Containers mailing list
[EMAIL PROTECTED]
https://lists.linux-foundation.org/mailman/listinfo/containers
_______________________________________________
Devel mailing list
[email protected]
https://openvz.org/mailman/listinfo/devel
