)]}' { "log": [ { "commit": "457c4cbc5a3dde259d2a1f15d5f9785290397267", "tree": "a2ceee88780cbce27433b9a4434b3e9251efd81a", "parents": [ "07feaebfcc10cd35e745c7073667935246494bee" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Wed Sep 12 12:01:34 2007 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:49:06 2007 -0700" }, "message": "[NET]: Make /proc/net per network namespace\n\nThis patch makes /proc/net per network namespace. It modifies the global\nvariables proc_net and proc_net_stat to be per network namespace.\nThe proc_net file helpers are modified to take a network namespace argument,\nand all of their callers are fixed to pass \u0026init_net for that argument.\nThis ensures that all of the /proc/net files are only visible and\nusable in the initial network namespace until the code behind them\nhas been updated to be handle multiple network namespaces.\n\nMaking /proc/net per namespace is necessary as at least some files\nin /proc/net depend upon the set of network devices which is per\nnetwork namespace, and even more files in /proc/net have contents\nthat are relevant to a single network namespace.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5096add84b9e96e2e0a9c72675c442fe5433388a", "tree": "f0444013cb7db32596d2b6febafc1ee4c2a4ea1f", "parents": [ "4a1ccb5b1eff949a90ab830869cb23d6609c3d5f" ], "author": { "name": "Kees Cook", "email": "kees@outflux.net", "time": "Tue May 08 00:26:04 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue May 08 11:15:02 2007 -0700" }, "message": "proc: maps protection\n\nThe /proc/pid/ \"maps\", \"smaps\", and \"numa_maps\" files contain sensitive\ninformation about the memory location and usage of processes. Issues:\n\n- maps should not be world-readable, especially if programs expect any\n kind of ASLR protection from local attackers.\n- maps cannot just be 0400 because \"-D_FORTIFY_SOURCE\u003d2 -O2\" makes glibc\n check the maps when %n is in a *printf call, and a setuid(getuid())\n process wouldn\u0027t be able to read its own maps file. (For reference\n see http://lkml.org/lkml/2006/1/22/150)\n- a system-wide toggle is needed to allow prior behavior in the case of\n non-root applications that depend on access to the maps contents.\n\nThis change implements a check using \"ptrace_may_attach\" before allowing\naccess to read the maps contents. To control this protection, the new knob\n/proc/sys/kernel/maps_protect has been added, with corresponding updates to\nthe procfs documentation.\n\n[akpm@linux-foundation.org: build fixes]\n[akpm@linux-foundation.org: New sysctl numbers are old hat]\nSigned-off-by: Kees Cook \u003ckees@outflux.net\u003e\nCc: Arjan van de Ven \u003carjan@infradead.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "05565b65a5309e3e5c86db1975b57f75661bee8f", "tree": "b7de5495abd95f89235c546068ed6512d4c90f5e", "parents": [ "2e175a90047a2dbc76fde169c990164895b25dfc" ], "author": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Apr 01 23:49:35 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Mon Apr 02 10:06:08 2007 -0700" }, "message": "[PATCH] proc: fix linkage with CONFIG_SYSCTL\u003dy, CONFIG_PROC_SYSCTL\u003dn\n\nWe\u0027re using #ifdef CONFIG_SYSCTL, but we should be using CONFIG_PROC_SYSCTL,\nso we get\n\n fs/built-in.o: In function `proc_root_init\u0027:\n /usr/src/linux/fs/proc/root.c:83: undefined reference to `proc_sys_init\u0027\n\nFix that up and remove an ifdef-in-C.\n\nCc: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nCc: Helge Hafting \u003chelgehaf@aitel.hist.no\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "77b14db502cb85a031fe8fde6c85d52f3e0acb63", "tree": "4201f6a4dfe1062d1dc00659c403d630401b87cc", "parents": [ "1ff007eb8e8c7c44e9a384a67d0fdd0fd06ba811" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Wed Feb 14 00:34:12 2007 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Feb 14 08:10:00 2007 -0800" }, "message": "[PATCH] sysctl: reimplement the sysctl proc support\n\nWith this change the sysctl inodes can be cached and nothing needs to be done\nwhen removing a sysctl table.\n\nFor a cost of 2K code we will save about 4K of static tables (when we remove\nde from ctl_table) and 70K in proc_dir_entries that we will not allocate, or\nabout half that on a 32bit arch.\n\nThe speed feels about the same, even though we can now cache the sysctl\ndentries :(\n\nWe get the core advantage that we don\u0027t need to have a 1 to 1 mapping between\nctl table entries and proc files. Making it possible to have /proc/sys vary\ndepending on the namespace you are in. The currently merged namespaces don\u0027t\nhave an issue here but the network namespace under /proc/sys/net needs to have\ndifferent directories depending on which network adapters are visible. By\nsimply being a cache different directories being visible depending on who you\nare is trivial to implement.\n\n[akpm@osdl.org: fix uninitialised var]\n[akpm@osdl.org: fix ARM build]\n[bunk@stusta.de: make things static]\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nCc: Russell King \u003crmk@arm.linux.org.uk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "00977a59b951207d38380c75f03a36829950265c", "tree": "26933feafebffca95df02c19df03f5e56aada47e", "parents": [ "d54b1fdb1d9f82e375a299e22bd366aad52d4c34" ], "author": { "name": "Arjan van de Ven", "email": "arjan@linux.intel.com", "time": "Mon Feb 12 00:55:34 2007 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Mon Feb 12 09:48:45 2007 -0800" }, "message": "[PATCH] mark struct file_operations const 6\n\nMany struct file_operations in the kernel can be \"const\". Marking them const\nmoves these to the .rodata section, which avoids false sharing with potential\ndirty data. In addition it\u0027ll catch accidental writes at compile time to\nthese shared resources.\n\nSigned-off-by: Arjan van de Ven \u003carjan@linux.intel.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "dbf8685c8e21404e3a8ed244bd0219d3c4b89101", "tree": "716b83de856049b51abf9770840ea122b7ca3285", "parents": [ "d00c7b993712e4bb16d0012b35b654e40159b327" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 27 01:50:19 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Wed Sep 27 08:26:14 2006 -0700" }, "message": "[PATCH] NOMMU: Implement /proc/pid/maps for NOMMU\n\nImplement /proc/pid/maps for NOMMU by reading the vm_area_list attached to\ncurrent-\u003emm-\u003econtext.vmlist.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "13b41b09491e5d75e8027dca1ee78f5e073bc4c0", "tree": "3f08183a4f59075fc3015165183b8ef17cb562a6", "parents": [ "99f895518368252ba862cc15ce4eb98ebbe1bec6" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Mon Jun 26 00:25:56 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Mon Jun 26 09:58:26 2006 -0700" }, "message": "[PATCH] proc: Use struct pid not struct task_ref\n\nIncrementally update my proc-dont-lock-task_structs-indefinitely patches so\nthat they work with struct pid instead of struct task_ref.\n\nMostly this is a straight 1-1 substitution.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "99f895518368252ba862cc15ce4eb98ebbe1bec6", "tree": "a9dcc01963221d1fd6a7e357b95d361ebfe91c6d", "parents": [ "8578cea7509cbdec25b31d08b48a92fcc3b1a9e3" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Mon Jun 26 00:25:55 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Mon Jun 26 09:58:25 2006 -0700" }, "message": "[PATCH] proc: don\u0027t lock task_structs indefinitely\n\nEvery inode in /proc holds a reference to a struct task_struct. If a\ndirectory or file is opened and remains open after the the task exits this\npinning continues. With 8K stacks on a 32bit machine the amount pinned per\nfile descriptor is about 10K.\n\nNormally I would figure a reasonable per user process limit is about 100\nprocesses. With 80 processes, with a 1000 file descriptors each I can trigger\nthe 00M killer on a 32bit kernel, because I have pinned about 800MB of useless\ndata.\n\nThis patch replaces the struct task_struct pointer with a pointer to a struct\ntask_ref which has a struct task_struct pointer. The so the pinning of dead\ntasks does not happen.\n\nThe code now has to contend with the fact that the task may now exit at any\ntime. Which is a little but not muh more complicated.\n\nWith this change it takes about 1000 processes each opening up 1000 file\ndescriptors before I can trigger the OOM killer. Much better.\n\n[mlp@google.com: task_mmu small fixes]\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nCc: Trond Myklebust \u003ctrond.myklebust@fys.uio.no\u003e\nCc: Paul Jackson \u003cpj@sgi.com\u003e\nCc: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Albert Cahalan \u003cacahalan@gmail.com\u003e\nSigned-off-by: Prasanna Meda \u003cmlp@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "662795deb854b31501e0ffb42b7f0cce802c134a", "tree": "d4849ad5ca7383ca9d0c9b6d46db83097d5dba85", "parents": [ "6e66b52bf587f0dd9a8e0a581b9570e5c1969e33" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Mon Jun 26 00:25:48 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Mon Jun 26 09:58:24 2006 -0700" }, "message": "[PATCH] proc: Move proc_maps_operations into task_mmu.c\n\nAll of the functions for proc_maps_operations are already defined in\ntask_mmu.c so move the operations structure to keep the functionality\ntogether.\n\nSince task_nommu.c implements a dummy version of /proc/\u003cpid\u003e/maps give it a\nsimplified version of proc_maps_operations that it can modify to best suit its\nneeds.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "aed7a6c476d90660ac5af860158407ae9fe61c68", "tree": "b8b92412f457598a2348de0eb304b9b4ec204157", "parents": [ "87bfbf679ffb1e95dd9ada694f66aafc4bfa5959" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Mon Jun 26 00:25:44 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Mon Jun 26 09:58:24 2006 -0700" }, "message": "[PATCH] proc: Replace proc_inode.type with proc_inode.fd\n\nThe sole renaming use of proc_inode.type is to discover the file descriptor\nnumber, so just store the file descriptor number and don\u0027t wory about\nprocessing this field. This removes any /proc limits on the maximum number of\nfile descriptors, and clears the path to make the hard coded /proc inode\nnumbers go away.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "99ac48f54a91d02140c497edc31dc57d4bc5c85d", "tree": "68719391694a6914191bdf73d2071875f7653f6f", "parents": [ "ec1b9466cb4f6ae6d950bd67055d9410d1056d2a" ], "author": { "name": "Arjan van de Ven", "email": "arjan@infradead.org", "time": "Tue Mar 28 01:56:41 2006 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Tue Mar 28 09:16:05 2006 -0800" }, "message": "[PATCH] mark f_ops const in the inode\n\nMark the f_ops members of inodes as const, as well as fix the\nripple-through this causes by places that copy this f_ops and then \"do\nstuff\" with it.\n\nSigned-off-by: Arjan van de Ven \u003carjan@infradead.org\u003e\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "fee781e6c25772db862d3322b4745a896022a4f1", "tree": "ab1d3ea15594c684eb054bd333a8a38d2ab873a6", "parents": [ "80851ef2a5a404e6054211ca96ecd5ac4b06d297" ], "author": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Sun Jan 08 01:04:16 2006 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Sun Jan 08 20:14:03 2006 -0800" }, "message": "[PATCH] fs/proc/: function prototypes belong in header files\n\nFunction prototypes belong into header files.\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "tree": "0bba044c4ce775e45a88a51686b5d9f90697ea9d", "parents": [], "author": { "name": "Linus Torvalds", "email": "torvalds@ppc970.osdl.org", "time": "Sat Apr 16 15:20:36 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@ppc970.osdl.org", "time": "Sat Apr 16 15:20:36 2005 -0700" }, "message": "Linux-2.6.12-rc2\n\nInitial git repository build. I\u0027m not bothering with the full history,\neven though we have it. We can create a separate \"historical\" git\narchive of that later if we want to, and in the meantime it\u0027s about\n3.2GB when imported into git - space that would just make the early\ngit days unnecessarily complicated, when we don\u0027t have a lot of good\ninfrastructure for it.\n\nLet it rip!\n" } ] }