The commit is pushed to "branch-rh7-3.10.0-1127.10.1.vz7.162.x-ovz" and will
appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-1127.10.1.vz7.162.9
------>
commit 01720c50bea3ccb84a6ca4a588a06b4fc6d6e1f5
Author: Kirill Tkhai <[email protected]>
Date: Tue Mar 12 15:45:46 2019 +0300
mempolicy: Prohibit VE processes numa binding syscalls
NUMA mustn't not available in CT, so let's prohibit these
calls. For CT tasks this will look like kernel compiled
without NUMA support.
https://jira.sw.ru/browse/PSBM-92583
Signed-off-by: Kirill Tkhai <[email protected]>
---
mm/mempolicy.c | 12 ++++++++++++
1 file changed, 12 insertions(+)
diff --git a/mm/mempolicy.c b/mm/mempolicy.c
index 8517079c559e4..0867e4273ef2e 100644
--- a/mm/mempolicy.c
+++ b/mm/mempolicy.c
@@ -1407,6 +1407,9 @@ SYSCALL_DEFINE6(mbind, unsigned long, start, unsigned
long, len,
int err;
unsigned short mode_flags;
+ if (!ve_is_super(get_exec_env()))
+ return -ENOSYS;
+
mode_flags = mode & MPOL_MODE_FLAGS;
mode &= ~MPOL_MODE_FLAGS;
if (mode >= MPOL_MAX)
@@ -1428,6 +1431,9 @@ SYSCALL_DEFINE3(set_mempolicy, int, mode, unsigned long
__user *, nmask,
nodemask_t nodes;
unsigned short flags;
+ if (!ve_is_super(get_exec_env()))
+ return -ENOSYS;
+
flags = mode & MPOL_MODE_FLAGS;
mode &= ~MPOL_MODE_FLAGS;
if ((unsigned int)mode >= MPOL_MAX)
@@ -1453,6 +1459,9 @@ SYSCALL_DEFINE4(migrate_pages, pid_t, pid, unsigned long,
maxnode,
nodemask_t *new;
NODEMASK_SCRATCH(scratch);
+ if (!ve_is_super(get_exec_env()))
+ return -ENOSYS;
+
if (!scratch)
return -ENOMEM;
@@ -1544,6 +1553,9 @@ SYSCALL_DEFINE5(get_mempolicy, int __user *, policy,
int uninitialized_var(pval);
nodemask_t nodes;
+ if (!ve_is_super(get_exec_env()))
+ return -ENOSYS;
+
if (nmask != NULL && maxnode < MAX_NUMNODES)
return -EINVAL;
_______________________________________________
Devel mailing list
[email protected]
https://lists.openvz.org/mailman/listinfo/devel
