Re: [patch] perf_event_open.2: PERF_RECORD_MISC_PROC_MAP_PARSE_TIMEOUT

2016-10-18 Thread Michael Kerrisk (man-pages)
bcd9d4aa7e755678d33f3fe6f4 > +This bit is not set by the kernel. > +It is reserved for the userspace perf utility to indicate that > +.I /proc/xxx/maps > +parsing was taking too long and stopped and thus the mmap > +records may be truncated. > .RE > .TP > .I type > --

Re: [patch] perf_event_open.2: PERF_RECORD_MISC_PROC_MAP_PARSE_TIMEOUT

2016-10-18 Thread Michael Kerrisk (man-pages)
> +This bit is not set by the kernel. > +It is reserved for the userspace perf utility to indicate that > +.I /proc/xxx/maps > +parsing was taking too long and stopped and thus the mmap > +records may be truncated. > .RE > .TP > .I type > -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/

Re: [patch] perf_event_open.2: PERF_RECORD_LOST_SAMPLES record type

2016-10-17 Thread Michael Kerrisk (man-pages)
of samples may have been lost. > + > +.in +4n > +.nf > +struct { > +struct perf_event_header header; > +u64 lost; > +struct sample_id sample_id; > +}; > +.fi > +.RS > +.TP > +.I lost > +the number of potentially lost samples. > +.RE > .RE &g

Re: [patch] perf_event_open.2: PERF_RECORD_LOST_SAMPLES record type

2016-10-17 Thread Michael Kerrisk (man-pages)
> + > +.in +4n > +.nf > +struct { > +struct perf_event_header header; > +u64 lost; > +struct sample_id sample_id; > +}; > +.fi > +.RS > +.TP > +.I lost > +the number of potentially lost samples. > +.RE > .RE > .SS Overflow handling > Events c

Re: [patch] perf_event_open.2: PERF_SAMPLE_BRANCH_IND_JUMP branch_sample_type

2016-10-15 Thread Michael Kerrisk (man-pages)
> +.\" commit c9fdfa14c3792c0160849c484e83aa57afd80ccc > +Indirect jumps. > +.TP > .BR PERF_SAMPLE_BRANCH_COND " (since Linux 3.16)" > .\" commit bac52139f0b7ab31330e98fd87fc5a2664951050 > Conditional branches. > -- Michael Kerrisk Linux man-pages main

Re: [patch] perf_event_open.2: PERF_SAMPLE_BRANCH_IND_JUMP branch_sample_type

2016-10-15 Thread Michael Kerrisk (man-pages)
3792c0160849c484e83aa57afd80ccc > +Indirect jumps. > +.TP > .BR PERF_SAMPLE_BRANCH_COND " (since Linux 3.16)" > .\" commit bac52139f0b7ab31330e98fd87fc5a2664951050 > Conditional branches. > -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/

Re: [patch] perf_event_open.2: sample_max_stack support

2016-10-14 Thread Michael Kerrisk (man-pages)
LLCHAIN > +is requested and > +.I sample_max_stack > +is larger than the maximum specified in > +.IR /proc/sys/kernel/perf_event_max_stack . > +.TP > .B EPERM > Returned on many (but not all) architectures when an unsupported > .IR exclude_hv ", " exclude_idle ", " exclude_user ", or " exclude_kernel > -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/

Re: [patch] perf_event_open.2: sample_max_stack support

2016-10-14 Thread Michael Kerrisk (man-pages)
requested and > +.I sample_max_stack > +is larger than the maximum specified in > +.IR /proc/sys/kernel/perf_event_max_stack . > +.TP > .B EPERM > Returned on many (but not all) architectures when an unsupported > .IR exclude_hv ", " exclude_idle ", " exclude_user ", or " exclude_kernel > -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/

Re: Rewording language in mbind(2) to "threads" not "processes"

2016-10-14 Thread Michael Kerrisk (man-pages)
Hi Christoph, On 13 October 2016 at 20:16, Christoph Lameter <c...@linux.com> wrote: > On Thu, 13 Oct 2016, Michael Kerrisk (man-pages) wrote: > >> @@ -100,7 +100,10 @@ If, however, the shared memory region was created with >> the >> .B SHM_HUGETLB >> flag,

Re: Rewording language in mbind(2) to "threads" not "processes"

2016-10-14 Thread Michael Kerrisk (man-pages)
Hi Christoph, On 13 October 2016 at 20:16, Christoph Lameter wrote: > On Thu, 13 Oct 2016, Michael Kerrisk (man-pages) wrote: > >> @@ -100,7 +100,10 @@ If, however, the shared memory region was created with >> the >> .B SHM_HUGETLB >> flag, >> the hu

Rewording language in mbind(2) to "threads" not "processes"

2016-10-13 Thread Michael Kerrisk (man-pages)
reverts to system default policy +the thread's memory policy reverts to the system default policy or local allocation. When .B MPOL_DEFAULT is specified for a range of memory using .BR mbind (), any pages subsequently allocated for that range will use -the process's policy, as set by +th

Rewording language in mbind(2) to "threads" not "processes"

2016-10-13 Thread Michael Kerrisk (man-pages)
reverts to system default policy +the thread's memory policy reverts to the system default policy or local allocation. When .B MPOL_DEFAULT is specified for a range of memory using .BR mbind (), any pages subsequently allocated for that range will use -the process's policy, as set by +th

Re: [PATCH v3 0/1] man/set_mempolicy.2,mbind.2: add MPOL_LOCAL NUMA memory policy documentation

2016-10-13 Thread Michael Kerrisk (man-pages)
On 10/12/2016 09:55 PM, Christoph Lameter wrote: > On Wed, 12 Oct 2016, Piotr Kwapulinski wrote: > >> That's right. This could be "local allocation" or any other memory policy. > > Correct. > Thanks, Piotr and Christoph. Cheers, Michael -- Michael Kerrisk L

Re: [PATCH v3 0/1] man/set_mempolicy.2,mbind.2: add MPOL_LOCAL NUMA memory policy documentation

2016-10-13 Thread Michael Kerrisk (man-pages)
On 10/12/2016 09:55 PM, Christoph Lameter wrote: > On Wed, 12 Oct 2016, Piotr Kwapulinski wrote: > >> That's right. This could be "local allocation" or any other memory policy. > > Correct. > Thanks, Piotr and Christoph. Cheers, Michael -- Michael Kerrisk L

Re: [PATCH v3 0/1] man/set_mempolicy.2,mbind.2: add MPOL_LOCAL NUMA memory policy documentation

2016-10-12 Thread Michael Kerrisk (man-pages)
Hi Christoph, On 12 October 2016 at 16:08, Christoph Lameter <c...@linux.com> wrote: > On Wed, 12 Oct 2016, Michael Kerrisk (man-pages) wrote: > >> > +arguments must specify the empty set. If the "local node" is low >> > +on free memory the kerne

Re: [PATCH v3 0/1] man/set_mempolicy.2,mbind.2: add MPOL_LOCAL NUMA memory policy documentation

2016-10-12 Thread Michael Kerrisk (man-pages)
Hi Christoph, On 12 October 2016 at 16:08, Christoph Lameter wrote: > On Wed, 12 Oct 2016, Michael Kerrisk (man-pages) wrote: > >> > +arguments must specify the empty set. If the "local node" is low >> > +on free memory the kernel will try to allocate memory

Re: [PATCH v3 0/1] man/set_mempolicy.2,mbind.2: add MPOL_LOCAL NUMA memory policy documentation

2016-10-12 Thread Michael Kerrisk (man-pages)
try to allocate memory from other > +nodes. The kernel will allocate memory from the "local node" > +whenever memory for this node is available. If the "local node" > +is not allowed by the process's current cpuset context the kernel > +will try to allocate memory from other nodes. The kernel will > +allocate memory from the "local node" whenever it becomes allowed > +by the process's current cpuset context. > + > The thread memory policy is preserved across an > .BR execve (2), > and is inherited by child threads created using > -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/

Re: [PATCH v3 0/1] man/set_mempolicy.2,mbind.2: add MPOL_LOCAL NUMA memory policy documentation

2016-10-12 Thread Michael Kerrisk (man-pages)
kernel will allocate memory from the "local node" > +whenever memory for this node is available. If the "local node" > +is not allowed by the process's current cpuset context the kernel > +will try to allocate memory from other nodes. The kernel will > +allocate memory from the "local node" whenever it becomes allowed > +by the process's current cpuset context. > + > The thread memory policy is preserved across an > .BR execve (2), > and is inherited by child threads created using > -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/

man-pages-4.08 is released

2016-10-08 Thread Michael Kerrisk (man-pages)
-10-08, Munich New and rewritten pages --- quotactl.2 Eugene Syromyatnikov [Michael Kerrisk] Updated information regarding disk quota flags Added information regarding DQF_SYS_FILE flag; updated definition of V1_DQF_RSQUASH, which has been

man-pages-4.08 is released

2016-10-08 Thread Michael Kerrisk (man-pages)
-10-08, Munich New and rewritten pages --- quotactl.2 Eugene Syromyatnikov [Michael Kerrisk] Updated information regarding disk quota flags Added information regarding DQF_SYS_FILE flag; updated definition of V1_DQF_RSQUASH, which has been

Re: [PATCH] mlock.2: document that is a bad idea to fork() after mlock()

2016-08-30 Thread Michael Kerrisk (man-pages)
. > + > The memory lock on an address range is automatically removed > if the address range is unmapped via > .BR munmap (2). > -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/

Re: [PATCH] mlock.2: document that is a bad idea to fork() after mlock()

2016-08-30 Thread Michael Kerrisk (man-pages)
rocess. Therefore it is crucial not to > +invoke > +.BR fork (2) > +after the > +.BR mlockall () > +or > +.BR mlock () > +operation not even from thread which runs at a low priority within a process > +which also has a thread running at elevated priority. > + > The memory lo

[PATCH v2 8/8] pipe: cap initial pipe capacity according to pipe-max-size limit

2016-08-28 Thread Michael Kerrisk (man-pages)
t;penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 3 +++ 1 file changed, 3 insertions(+) diff --gi

[PATCH v2 7/8] pipe: make account_pipe_buffers() return a value, and use it

2016-08-28 Thread Michael Kerrisk (man-pages)
gt; Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 36 ++-- 1 file changed, 18 insertions(+), 18 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index 41a580a..7415

[PATCH v2 5/8] pipe: simplify logic in alloc_pipe_info()

2016-08-28 Thread Michael Kerrisk (man-pages)
Cc: socketp...@gmail.com Cc: Tetsuo Handa <penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa.

[PATCH v2 7/8] pipe: make account_pipe_buffers() return a value, and use it

2016-08-28 Thread Michael Kerrisk (man-pages)
use of atomic_long_read() to get the value user->pipe_bufs. Cc: Willy Tarreau Cc: Vegard Nossum Cc: socketp...@gmail.com Cc: Tetsuo Handa Cc: Jens Axboe Cc: Al Viro Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.

[PATCH v2 5/8] pipe: simplify logic in alloc_pipe_info()

2016-08-28 Thread Michael Kerrisk (man-pages)
Axboe Cc: Al Viro Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 45 +++-- 1 file changed, 23 insertions(+), 22 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index f45a173..256fc5a 100644

[PATCH v2 8/8] pipe: cap initial pipe capacity according to pipe-max-size limit

2016-08-28 Thread Michael Kerrisk (man-pages)
nux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/fs/pipe.c b/fs/pipe.c index 741560b..10c5ad5 100644 --- a/fs/pipe.c +++ b/fs/pipe.c @@ -631,6 +631,9 @@ struct pipe_inode_info *alloc_pipe_info(void) if (pipe == N

[PATCH v2 6/8] pipe: fix limit checking in alloc_pipe_info()

2016-08-28 Thread Michael Kerrisk (man-pages)
gmail.com Cc: Tetsuo Handa <penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 20

[PATCH v2 6/8] pipe: fix limit checking in alloc_pipe_info()

2016-08-28 Thread Michael Kerrisk (man-pages)
Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 20 +--- 1 file changed, 13 insertions(+), 7 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index 256fc5a..41a580a 100644 --- a/fs/pipe.c +++ b/fs/pipe.c @@ -632,24

[PATCH v2 2/8] pipe: move limit checking logic into pipe_set_size()

2016-08-28 Thread Michael Kerrisk (man-pages)
.eu> Cc: Vegard Nossum <vegard.nos...@oracle.com> Cc: socketp...@gmail.com Cc: Tetsuo Handa <penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-

[PATCH v2 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-28 Thread Michael Kerrisk (man-pages)
returned 8388608 8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x--- /* test_F_SETPIPE_SZ.c (C) 2016, Michael Kerrisk; licensed under GNU GPL version 2 or later Test operation of fcntl(F_SETPIPE_SZ) for setting pipe capacity and interactions with limits defined by

[PATCH v2 3/8] pipe: refactor argument for account_pipe_buffers()

2016-08-28 Thread Michael Kerrisk (man-pages)
nda <penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 10 +- 1 file changed, 5

[PATCH v2 2/8] pipe: move limit checking logic into pipe_set_size()

2016-08-28 Thread Michael Kerrisk (man-pages)
Nossum Cc: socketp...@gmail.com Cc: Tetsuo Handa Cc: Jens Axboe Cc: Al Viro Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 41 ++--- 1 file changed, 18 insertions(+), 23 deletions(-) diff --git

[PATCH v2 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-28 Thread Michael Kerrisk (man-pages)
returned 8388608 8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x--- /* test_F_SETPIPE_SZ.c (C) 2016, Michael Kerrisk; licensed under GNU GPL version 2 or later Test operation of fcntl(F_SETPIPE_SZ) for setting pipe capacity and interactions with limits defined by

[PATCH v2 3/8] pipe: refactor argument for account_pipe_buffers()

2016-08-28 Thread Michael Kerrisk (man-pages)
-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index 4b98fd0..37b7f5e 100644 --- a/fs/pipe.c +++ b/fs/pipe.c @@ -604,10 +604,10 @@ pipe_fasync(int fd

[PATCH v2 1/8] pipe: relocate round_pipe_size() above pipe_set_size()

2016-08-28 Thread Michael Kerrisk (man-pages)
<penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 24

[PATCH v2 0/8] pipe: fix limit handling

2016-08-28 Thread Michael Kerrisk (man-pages)
Nossum <vegard.nos...@oracle.com> Cc: socketp...@gmail.com Cc: Tetsuo Handa <penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael K

[PATCH v2 1/8] pipe: relocate round_pipe_size() above pipe_set_size()

2016-08-28 Thread Michael Kerrisk (man-pages)
-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 24 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index 4ebe6b2..7d7c21e 100644 --- a/fs/pipe.c +++ b/fs/pipe.c @@ -1011,6 +1011,18 @@ const

[PATCH v2 0/8] pipe: fix limit handling

2016-08-28 Thread Michael Kerrisk (man-pages)
...@gmail.com Cc: Tetsuo Handa Cc: Jens Axboe Cc: Al Viro Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk Michael Kerrisk (8): pipe: relocate round_pipe_size() above pipe_set_size() pipe: move limit checking logic into pipe_set_size() pipe

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-22 Thread Michael Kerrisk (man-pages)
Hi Willy, On 08/22/2016 09:35 AM, Willy Tarreau wrote: > Hi Michael, > > On Mon, Aug 22, 2016 at 09:15:35AM +1200, Michael Kerrisk (man-pages) wrote: >> Hi Willy, >> >> Might you have a chance to further review of this patch series? >> It would be great if yo

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-22 Thread Michael Kerrisk (man-pages)
Hi Willy, On 08/22/2016 09:35 AM, Willy Tarreau wrote: > Hi Michael, > > On Mon, Aug 22, 2016 at 09:15:35AM +1200, Michael Kerrisk (man-pages) wrote: >> Hi Willy, >> >> Might you have a chance to further review of this patch series? >> It would be great if yo

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-21 Thread Michael Kerrisk (man-pages)
On 08/21/2016 10:33 PM, Vegard Nossum wrote: > On 08/20/2016 01:17 AM, Michael Kerrisk (man-pages) wrote: >> On 08/20/2016 08:56 AM, Michael Kerrisk (man-pages) wrote: >>> On 08/19/2016 08:30 PM, Vegard Nossum wrote: >>>> Is there any reason why we couldn't do th

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-21 Thread Michael Kerrisk (man-pages)
On 08/21/2016 10:33 PM, Vegard Nossum wrote: > On 08/20/2016 01:17 AM, Michael Kerrisk (man-pages) wrote: >> On 08/20/2016 08:56 AM, Michael Kerrisk (man-pages) wrote: >>> On 08/19/2016 08:30 PM, Vegard Nossum wrote: >>>> Is there any reason why we couldn't do th

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-21 Thread Michael Kerrisk (man-pages)
bly worth swapping the size > check and capable() below to save a function call in the normal path : > > On Fri, Aug 19, 2016 at 05:25:35PM +1200, Michael Kerrisk (man-pages) wrote: >> +if (nr_pages > pipe->buffers) { >> +if (!capable(CAP_S

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-21 Thread Michael Kerrisk (man-pages)
bly worth swapping the size > check and capable() below to save a function call in the normal path : > > On Fri, Aug 19, 2016 at 05:25:35PM +1200, Michael Kerrisk (man-pages) wrote: >> +if (nr_pages > pipe->buffers) { >> +if (!capable(CAP_S

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-19 Thread Michael Kerrisk (man-pages)
On 08/20/2016 08:56 AM, Michael Kerrisk (man-pages) wrote: > Hi Vegard, > > On 08/19/2016 08:30 PM, Vegard Nossum wrote: >> On 08/19/2016 07:25 AM, Michael Kerrisk (man-pages) wrote: >>> The limit checking in pipe_set_size() (used by fcntl(F_SETPIPE_SZ)) >&g

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-19 Thread Michael Kerrisk (man-pages)
On 08/20/2016 08:56 AM, Michael Kerrisk (man-pages) wrote: > Hi Vegard, > > On 08/19/2016 08:30 PM, Vegard Nossum wrote: >> On 08/19/2016 07:25 AM, Michael Kerrisk (man-pages) wrote: >>> The limit checking in pipe_set_size() (used by fcntl(F_SETPIPE_SZ)) >&g

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-19 Thread Michael Kerrisk (man-pages)
Hi Vegard, On 08/19/2016 08:30 PM, Vegard Nossum wrote: > On 08/19/2016 07:25 AM, Michael Kerrisk (man-pages) wrote: >> The limit checking in pipe_set_size() (used by fcntl(F_SETPIPE_SZ)) >> has the following problems: > [...] >> @@ -1030,6 +1030,7 @@ static l

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-19 Thread Michael Kerrisk (man-pages)
Hi Vegard, On 08/19/2016 08:30 PM, Vegard Nossum wrote: > On 08/19/2016 07:25 AM, Michael Kerrisk (man-pages) wrote: >> The limit checking in pipe_set_size() (used by fcntl(F_SETPIPE_SZ)) >> has the following problems: > [...] >> @@ -1030,6 +1030,7 @@ static l

Re: [PATCH 7/8] pipe: make account_pipe_buffers() return a value, and use it

2016-08-19 Thread Michael Kerrisk (man-pages)
On 08/19/2016 09:36 PM, Vegard Nossum wrote: > On 08/19/2016 07:25 AM, Michael Kerrisk (man-pages) wrote: >> This is an optional patch, to provide a small performance improvement. >> Alter account_pipe_buffers() so that it returns the new value in >> user->pipe_bufs

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-19 Thread Michael Kerrisk (man-pages)
On 08/19/2016 05:48 PM, Willy Tarreau wrote: > Hi Michael, > > Since you're changing this code, it's probably worth swapping the size > check and capable() below to save a function call in the normal path : > > On Fri, Aug 19, 2016 at 05:25:35PM +1200, Michael Kerrisk

Re: [PATCH 7/8] pipe: make account_pipe_buffers() return a value, and use it

2016-08-19 Thread Michael Kerrisk (man-pages)
On 08/19/2016 09:36 PM, Vegard Nossum wrote: > On 08/19/2016 07:25 AM, Michael Kerrisk (man-pages) wrote: >> This is an optional patch, to provide a small performance improvement. >> Alter account_pipe_buffers() so that it returns the new value in >> user->pipe_bufs

Re: [PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-19 Thread Michael Kerrisk (man-pages)
On 08/19/2016 05:48 PM, Willy Tarreau wrote: > Hi Michael, > > Since you're changing this code, it's probably worth swapping the size > check and capable() below to save a function call in the normal path : > > On Fri, Aug 19, 2016 at 05:25:35PM +1200, Michael Kerrisk

[PATCH 1/8] pipe: relocate round_pipe_size() above pipe_set_size()

2016-08-19 Thread Michael Kerrisk (man-pages)
<penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 24

[PATCH 1/8] pipe: relocate round_pipe_size() above pipe_set_size()

2016-08-19 Thread Michael Kerrisk (man-pages)
-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 24 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index 4ebe6b2..7d7c21e 100644 --- a/fs/pipe.c +++ b/fs/pipe.c @@ -1011,6 +1011,18 @@ const

[PATCH 0/8] pipe: fix limit handling

2016-08-19 Thread Michael Kerrisk (man-pages)
Tetsuo Handa <penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> Michael Kerrisk (8): pipe: relocate r

[PATCH 0/8] pipe: fix limit handling

2016-08-19 Thread Michael Kerrisk (man-pages)
-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk Michael Kerrisk (8): pipe: relocate round_pipe_size() above pipe_set_size() pipe: move limit checking logic into pipe_set_size() pipe: refactor argument for account_pipe_buffers() pipe: fix limit checking

[PATCH 3/8] pipe: refactor argument for account_pipe_buffers()

2016-08-18 Thread Michael Kerrisk (man-pages)
Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/fs/pipe.

[PATCH 3/8] pipe: refactor argument for account_pipe_buffers()

2016-08-18 Thread Michael Kerrisk (man-pages)
-by: Michael Kerrisk --- fs/pipe.c | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index 4b98fd0..37b7f5e 100644 --- a/fs/pipe.c +++ b/fs/pipe.c @@ -604,10 +604,10 @@ pipe_fasync(int fd, struct file *filp, int on) return retval

[PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-18 Thread Michael Kerrisk (man-pages)
returned 8388608 8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x--- /* test_F_SETPIPE_SZ.c (C) 2016, Michael Kerrisk; licensed under GNU GPL version 2 or later Test operation of fcntl(F_SETPIPE_SZ) for setting pipe capacity and interactions with limits defined by

[PATCH 4/8] pipe: fix limit checking in pipe_set_size()

2016-08-18 Thread Michael Kerrisk (man-pages)
returned 8388608 8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x---8x--- /* test_F_SETPIPE_SZ.c (C) 2016, Michael Kerrisk; licensed under GNU GPL version 2 or later Test operation of fcntl(F_SETPIPE_SZ) for setting pipe capacity and interactions with limits defined by

[PATCH 2/8] pipe: move limit checking logic into pipe_set_size()

2016-08-18 Thread Michael Kerrisk (man-pages)
e.com> Cc: socketp...@gmail.com Cc: Tetsuo Handa <penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa..

[PATCH 2/8] pipe: move limit checking logic into pipe_set_size()

2016-08-18 Thread Michael Kerrisk (man-pages)
Cc: Jens Axboe Cc: Al Viro Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 41 ++--- 1 file changed, 18 insertions(+), 23 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index 7d7c21e..4b98fd0

[PATCH 6/8] pipe: fix limit checking in alloc_pipe_info()

2016-08-18 Thread Michael Kerrisk (man-pages)
er.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 20 1 file changed, 12 insertions(+), 8 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index 613c6b9..705d79f 100644 --- a/fs/pipe.c +++ b/fs/pipe.c @@ -632,

[PATCH 8/8] pipe: cap initial pipe capacity according to pipe-max-size limit

2016-08-18 Thread Michael Kerrisk (man-pages)
lly Tarreau <w...@1wt.eu> Cc: Vegard Nossum <vegard.nos...@oracle.com> Cc: socketp...@gmail.com Cc: Tetsuo Handa <penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.

[PATCH 5/8] pipe: simplify logic in alloc_pipe_info()

2016-08-18 Thread Michael Kerrisk (man-pages)
<penguin-ker...@i-love.sakura.ne.jp> Cc: Jens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 45 +++--

[PATCH 6/8] pipe: fix limit checking in alloc_pipe_info()

2016-08-18 Thread Michael Kerrisk (man-pages)
the operation to fail. Cc: Willy Tarreau Cc: Vegard Nossum Cc: socketp...@gmail.com Cc: Tetsuo Handa Cc: Jens Axboe Cc: Al Viro Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 20 1 file changed, 12 insertions(+), 8

[PATCH 8/8] pipe: cap initial pipe capacity according to pipe-max-size limit

2016-08-18 Thread Michael Kerrisk (man-pages)
lly Tarreau Cc: Vegard Nossum Cc: socketp...@gmail.com Cc: Tetsuo Handa Cc: Jens Axboe Cc: Al Viro Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/fs/pipe.c b/fs/pipe.c in

[PATCH 5/8] pipe: simplify logic in alloc_pipe_info()

2016-08-18 Thread Michael Kerrisk (man-pages)
-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 45 +++-- 1 file changed, 23 insertions(+), 22 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index a7470a9..613c6b9 100644 --- a/fs/pipe.c +++ b/fs/pipe.c @@ -625,33

[PATCH 7/8] pipe: make account_pipe_buffers() return a value, and use it

2016-08-18 Thread Michael Kerrisk (man-pages)
gt; Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 34 +- 1 file changed, 17 insertions(+), 17 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index 705d79f..ada1777 100644

[PATCH 7/8] pipe: make account_pipe_buffers() return a value, and use it

2016-08-18 Thread Michael Kerrisk (man-pages)
use of atomic_long_read() to get the value user->pipe_bufs. Cc: Willy Tarreau Cc: Vegard Nossum Cc: socketp...@gmail.com Cc: Tetsuo Handa Cc: Jens Axboe Cc: Al Viro Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.

Re: [PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-18 Thread Michael Kerrisk (man-pages)
Andrew, Thanks for picking up this patch series in -mm. Please drop it. After discussions with Vegard, I have something better now. Cheers, Michael On 08/16/2016 11:14 PM, Michael Kerrisk (man-pages) wrote: > As currently implemented, when creating a new pipe or increasing > a pipe's ca

Re: [PATCH 1/2] pipe: check limits only when increasing pipe capacity

2016-08-18 Thread Michael Kerrisk (man-pages)
Andrew, thanks for picking up this patch series in -mm. Please drop it. After discussions with Vegard, I have something better now. Cheers, Michael On 08/16/2016 11:10 PM, Michael Kerrisk (man-pages) wrote: > When changing a pipe's capacity with fcntl(F_SETPIPE_SZ), various > limits d

Re: [PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-18 Thread Michael Kerrisk (man-pages)
Andrew, Thanks for picking up this patch series in -mm. Please drop it. After discussions with Vegard, I have something better now. Cheers, Michael On 08/16/2016 11:14 PM, Michael Kerrisk (man-pages) wrote: > As currently implemented, when creating a new pipe or increasing > a pipe's ca

Re: [PATCH 1/2] pipe: check limits only when increasing pipe capacity

2016-08-18 Thread Michael Kerrisk (man-pages)
Andrew, thanks for picking up this patch series in -mm. Please drop it. After discussions with Vegard, I have something better now. Cheers, Michael On 08/16/2016 11:10 PM, Michael Kerrisk (man-pages) wrote: > When changing a pipe's capacity with fcntl(F_SETPIPE_SZ), various > limits d

Re: [PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-17 Thread Michael Kerrisk (man-pages)
Hello Vegard, On 08/18/2016 07:34 AM, Vegard Nossum wrote: > On 08/17/2016 10:02 AM, Michael Kerrisk (man-pages) wrote: >> On 08/17/2016 10:00 AM, Vegard Nossum wrote: >>>>> Isn't there also a race where two or more concurrent pipe()/fnctl() >>>>> calls can

Re: [PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-17 Thread Michael Kerrisk (man-pages)
Hello Vegard, On 08/18/2016 07:34 AM, Vegard Nossum wrote: > On 08/17/2016 10:02 AM, Michael Kerrisk (man-pages) wrote: >> On 08/17/2016 10:00 AM, Vegard Nossum wrote: >>>>> Isn't there also a race where two or more concurrent pipe()/fnctl() >>>>> calls can

Re: [PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-17 Thread Michael Kerrisk (man-pages)
Hi Vegard, On 08/17/2016 10:00 AM, Vegard Nossum wrote: > On 08/16/2016 10:21 PM, Michael Kerrisk (man-pages) wrote: >>>> @@ -1132,8 +1136,8 @@ long pipe_fcntl(struct file *file, unsigned int cmd, >>>> unsigned long arg) >>>>

Re: [PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-17 Thread Michael Kerrisk (man-pages)
Hi Vegard, On 08/17/2016 10:00 AM, Vegard Nossum wrote: > On 08/16/2016 10:21 PM, Michael Kerrisk (man-pages) wrote: >>>> @@ -1132,8 +1136,8 @@ long pipe_fcntl(struct file *file, unsigned int cmd, >>>> unsigned long arg) >>>>

Re: [PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-16 Thread Michael Kerrisk (man-pages)
Hello Vegard, On 08/17/2016 12:07 AM, Vegard Nossum wrote: > On 08/16/2016 01:14 PM, Michael Kerrisk (man-pages) wrote: >> As currently implemented, when creating a new pipe or increasing >> a pipe's capacity with fcntl(F_SETPIPE_SZ), the checks against >> the limits in /

Re: [PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-16 Thread Michael Kerrisk (man-pages)
Hello Vegard, On 08/17/2016 12:07 AM, Vegard Nossum wrote: > On 08/16/2016 01:14 PM, Michael Kerrisk (man-pages) wrote: >> As currently implemented, when creating a new pipe or increasing >> a pipe's capacity with fcntl(F_SETPIPE_SZ), the checks against >> the limits in /

[PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-16 Thread Michael Kerrisk (man-pages)
ens Axboe <ax...@fb.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: sta...@vger.kernel.org Cc: linux-...@vger.kernel.org Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk <mtk.manpa...@gmail.com> --- fs/pipe.c | 24 ++-- 1 file changed, 14 inser

[PATCH 2/2] pipe: make pipe user buffer limit checks more precise

2016-08-16 Thread Michael Kerrisk (man-pages)
g Cc: linux-kernel@vger.kernel.org Signed-off-by: Michael Kerrisk --- fs/pipe.c | 24 ++-- 1 file changed, 14 insertions(+), 10 deletions(-) diff --git a/fs/pipe.c b/fs/pipe.c index a98ebca..397d8d9 100644 --- a/fs/pipe.c +++ b/fs/pipe.c @@ -610,16 +610,20 @@ static void account_p

[PATCH 1/2] pipe: check limits only when increasing pipe capacity

2016-08-16 Thread Michael Kerrisk (man-pages)
8x---8x---8x---8x---8x---8x---8x--- /* test_F_SETPIPE_SZ.c (C) 2016, Michael Kerrisk; licensed under GNU GPL version 2 or later Test operation of fcntl(F_SETPIPE_SZ) for setting pipe capacity and interactions with limits defined by /proc/sys/fs/pipe-* files. */ int main(int argc, char *argv[]) { int (*pfd)[

[PATCH 1/2] pipe: check limits only when increasing pipe capacity

2016-08-16 Thread Michael Kerrisk (man-pages)
8x---8x---8x---8x---8x---8x---8x--- /* test_F_SETPIPE_SZ.c (C) 2016, Michael Kerrisk; licensed under GNU GPL version 2 or later Test operation of fcntl(F_SETPIPE_SZ) for setting pipe capacity and interactions with limits defined by /proc/sys/fs/pipe-* files. */ int main(int argc, char *argv[]) { int (*pfd)[

Re: [PATCH 0/5 RFC] Add an interface to discover relationships between namespaces

2016-07-31 Thread Michael Kerrisk (man-pages)
Hi Eric, On 07/29/2016 08:05 PM, Eric W. Biederman wrote: "Michael Kerrisk (man-pages)" <mtk.manpa...@gmail.com> writes: Hi Eric, On 07/28/2016 02:56 PM, Eric W. Biederman wrote: "Michael Kerrisk (man-pages)" <mtk.manpa...@gmail.com> writes: On 07/26/2

Re: [PATCH 0/5 RFC] Add an interface to discover relationships between namespaces

2016-07-31 Thread Michael Kerrisk (man-pages)
Hi Eric, On 07/29/2016 08:05 PM, Eric W. Biederman wrote: "Michael Kerrisk (man-pages)" writes: Hi Eric, On 07/28/2016 02:56 PM, Eric W. Biederman wrote: "Michael Kerrisk (man-pages)" writes: On 07/26/2016 10:39 PM, Andrew Vagin wrote: On Tue, Jul 26, 2016 at 09:17

Re: [PATCH 0/5 RFC] Add an interface to discover relationships between namespaces

2016-07-28 Thread Michael Kerrisk (man-pages)
Hi Eric, On 07/28/2016 02:56 PM, Eric W. Biederman wrote: "Michael Kerrisk (man-pages)" <mtk.manpa...@gmail.com> writes: On 07/26/2016 10:39 PM, Andrew Vagin wrote: On Tue, Jul 26, 2016 at 09:17:31PM +0200, Michael Kerrisk (man-pages) wrote: If we want to compare two

Re: [PATCH 0/5 RFC] Add an interface to discover relationships between namespaces

2016-07-28 Thread Michael Kerrisk (man-pages)
Hi Eric, On 07/28/2016 02:56 PM, Eric W. Biederman wrote: "Michael Kerrisk (man-pages)" writes: On 07/26/2016 10:39 PM, Andrew Vagin wrote: On Tue, Jul 26, 2016 at 09:17:31PM +0200, Michael Kerrisk (man-pages) wrote: If we want to compare two file descriptors of the curre

Re: [PATCH 0/5 RFC] Add an interface to discover relationships between namespaces

2016-07-28 Thread Michael Kerrisk (man-pages)
On 07/26/2016 10:39 PM, Andrew Vagin wrote: On Tue, Jul 26, 2016 at 09:17:31PM +0200, Michael Kerrisk (man-pages) wrote: Hello Andrew, On 26 July 2016 at 20:25, Andrew Vagin <ava...@virtuozzo.com> wrote: On Tue, Jul 26, 2016 at 10:03:25AM +0200, Michael Kerrisk (man-pages) wrote: On

Re: [PATCH 0/5 RFC] Add an interface to discover relationships between namespaces

2016-07-28 Thread Michael Kerrisk (man-pages)
On 07/26/2016 10:39 PM, Andrew Vagin wrote: On Tue, Jul 26, 2016 at 09:17:31PM +0200, Michael Kerrisk (man-pages) wrote: Hello Andrew, On 26 July 2016 at 20:25, Andrew Vagin wrote: On Tue, Jul 26, 2016 at 10:03:25AM +0200, Michael Kerrisk (man-pages) wrote: On 07/26/2016 04:54 AM, Andrew

Re: [PATCH 0/5 RFC] Add an interface to discover relationships between namespaces

2016-07-26 Thread Michael Kerrisk (man-pages)
Hello Andrew, On 26 July 2016 at 20:25, Andrew Vagin <ava...@virtuozzo.com> wrote: > On Tue, Jul 26, 2016 at 10:03:25AM +0200, Michael Kerrisk (man-pages) wrote: >> On 07/26/2016 04:54 AM, Andrew Vagin wrote: >> > On Mon, Jul 25, 2016 at 09:59:43AM -0500, Eric W. Biederma

Re: [PATCH 0/5 RFC] Add an interface to discover relationships between namespaces

2016-07-26 Thread Michael Kerrisk (man-pages)
Hello Andrew, On 26 July 2016 at 20:25, Andrew Vagin wrote: > On Tue, Jul 26, 2016 at 10:03:25AM +0200, Michael Kerrisk (man-pages) wrote: >> On 07/26/2016 04:54 AM, Andrew Vagin wrote: >> > On Mon, Jul 25, 2016 at 09:59:43AM -0500, Eric W. Biederman wrote: >> > &g

Re: [PATCH v2 00/10] userns: sysctl limits for namespaces

2016-07-26 Thread Michael Kerrisk (man-pages)
On 26 July 2016 at 18:52, Kees Cook <keesc...@chromium.org> wrote: > On Tue, Jul 26, 2016 at 8:06 AM, Eric W. Biederman > <ebied...@xmission.com> wrote: >> "Michael Kerrisk (man-pages)" <mtk.manpa...@gmail.com> writes: >> >>> Hello Eric,

Re: [PATCH v2 00/10] userns: sysctl limits for namespaces

2016-07-26 Thread Michael Kerrisk (man-pages)
On 26 July 2016 at 18:52, Kees Cook wrote: > On Tue, Jul 26, 2016 at 8:06 AM, Eric W. Biederman > wrote: >> "Michael Kerrisk (man-pages)" writes: >> >>> Hello Eric, >>> >>> I realized I had a question after the last mail.

Re: [PATCH v2 00/10] userns: sysctl limits for namespaces

2016-07-26 Thread Michael Kerrisk (man-pages)
Hello Eric, I realized I had a question after the last mail. On 07/21/2016 06:39 PM, Eric W. Biederman wrote: This patchset addresses two use cases: - Implement a sane upper bound on the number of namespaces. - Provide a way for sandboxes to limit the attack surface from namespaces. Can

Re: [PATCH v2 00/10] userns: sysctl limits for namespaces

2016-07-26 Thread Michael Kerrisk (man-pages)
Hello Eric, I realized I had a question after the last mail. On 07/21/2016 06:39 PM, Eric W. Biederman wrote: This patchset addresses two use cases: - Implement a sane upper bound on the number of namespaces. - Provide a way for sandboxes to limit the attack surface from namespaces. Can

Re: [PATCH v2 00/10] userns: sysctl limits for namespaces

2016-07-26 Thread Michael Kerrisk (man-pages)
Hello Eric, On 07/21/2016 06:39 PM, Eric W. Biederman wrote: This patchset addresses two use cases: - Implement a sane upper bound on the number of namespaces. - Provide a way for sandboxes to limit the attack surface from namespaces. The maximum sane case I can imagine is if every process

Re: [PATCH v2 00/10] userns: sysctl limits for namespaces

2016-07-26 Thread Michael Kerrisk (man-pages)
Hello Eric, On 07/21/2016 06:39 PM, Eric W. Biederman wrote: This patchset addresses two use cases: - Implement a sane upper bound on the number of namespaces. - Provide a way for sandboxes to limit the attack surface from namespaces. The maximum sane case I can imagine is if every process

<    4   5   6   7   8   9   10   11   12   13   >