I won't apply this version, please send v6 with the changes below.

On Tue, 10 Nov 2026 18:26:50 +0100, Vladimir Riabchun 
<[email protected]> wrote:
> @@ -929,6 +932,7 @@ static void ve_destroy(struct cgroup_subsys_state *css)
>  {
>       struct ve_struct *ve = css_to_ve(css);
>
> +     ve_drop_cred(ve);

- Item 4 of the cover letter reply: fix the two "ve isn't running"
  comments in ve_capable() and ve_capable_noaudit()
  (kernel/capability.c).

After this patch init_cred stays set until ve_destroy(), so a stopped
VE still has it. NULL now only means the VE was never started, and
the comments say otherwise.

-- 
Konstantin Khorenko,
Virtuozzo Linux Kernel Team

_______________________________________________
Devel mailing list
[email protected]
https://lists.openvz.org/mailman/listinfo/devel

Reply via email to