)]}' { "log": [ { "commit": "a293980c2e261bd5b0d2a77340dd04f684caff58", "tree": "69f2b2747548deafb146c18953ebce21ae1f02d4", "parents": [ "725eae32df7754044809973034429a47e6035158" ], "author": { "name": "Neil Horman", "email": "nhorman@tuxdriver.com", "time": "Wed Sep 23 15:56:56 2009 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 24 07:21:00 2009 -0700" }, "message": "exec: let do_coredump() limit the number of concurrent dumps to pipes\n\nIntroduce core pipe limiting sysctl.\n\nSince we can dump cores to pipe, rather than directly to the filesystem,\nwe create a condition in which a user can create a very high load on the\nsystem simply by running bad applications.\n\nIf the pipe reader specified in core_pattern is poorly written, we can\nhave lots of ourstandig resources and processes in the system.\n\nThis sysctl introduces an ability to limit that resource consumption.\ncore_pipe_limit defines how many in-flight dumps may be run in parallel,\ndumps beyond this value are skipped and a note is made in the kernel log.\nA special value of 0 in core_pipe_limit denotes unlimited core dumps may\nbe handled (this is the default value).\n\n[akpm@linux-foundation.org: coding-style fixes]\nSigned-off-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nReported-by: Earl Chew \u003cearl_chew@agilent.com\u003e\nCc: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Andi Kleen \u003candi@firstfloor.org\u003e\nCc: Alan Cox \u003calan@lxorguk.ukuu.org.uk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "af91322ef3f29ae4114e736e2a72e28b4d619cf9", "tree": "debba08531c7dd78b90b5d8f2c03f6bf7c9e7877", "parents": [ "3a3b6ed2235f2f619889dd6096e24b6d93bf3339" ], "author": { "name": "Dave Young", "email": "hidave.darkstar@gmail.com", "time": "Tue Sep 22 16:43:33 2009 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Sep 23 07:39:28 2009 -0700" }, "message": "printk: add printk_delay to make messages readable for some scenarios\n\nWhen syslog is not possible, at the same time there\u0027s no serial/net\nconsole available, it will be hard to read the printk messages. For\nexample oops/panic/warning messages in shutdown phase.\n\nAdd a printk delay feature, we can make each printk message delay some\nmilliseconds.\n\nSetting the delay by proc/sysctl interface: /proc/sys/kernel/printk_delay\n\nThe value range from 0 - 10000, default value is 0\n\n[akpm@linux-foundation.org: fix a few things]\nSigned-off-by: Dave Young \u003chidave.darkstar@gmail.com\u003e\nAcked-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "b7f5ab6fbbb9459a91c0acae15097a495f800206", "tree": "fa04ab60b5fda96d37206653d5bafd838b19deb7", "parents": [ "627df23c61ce28043a0715a941605ab42dfeb05e" ], "author": { "name": "Horst Schirmeier", "email": "horst@schirmeier.com", "time": "Fri Jul 03 14:20:17 2009 +0200" }, "committer": { "name": "Jiri Kosina", "email": "jkosina@suse.cz", "time": "Mon Sep 21 15:14:53 2009 +0200" }, "message": "trivial: doc: document missing value 2 for randomize-va-space\n\nThe documentation for /proc/sys/kernel/* does not mention the possible\nvalue 2 for randomize-va-space yet. While being there, doing some\nreformatting, fixing grammar problems and clarifying the correlations\nbetween randomize-va-space, kernel parameter \"norandmaps\" and the\nCONFIG_COMPAT_BRK option.\n\nSigned-off-by: Horst Schirmeier \u003chorst@schirmeier.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\n" }, { "commit": "c114728af2acdca0bd8b1d2f5792e393c775f5fc", "tree": "7c4b6c31b66a8a7fd0806a3a786b540721a9d418", "parents": [ "275c340941991a925969c03ec6b900fd135d09dd" ], "author": { "name": "Hans-Joachim Picht", "email": "hans@de.ibm.com", "time": "Fri Sep 11 10:28:47 2009 +0200" }, "committer": { "name": "Martin Schwidefsky", "email": "schwidefsky@de.ibm.com", "time": "Fri Sep 11 10:29:49 2009 +0200" }, "message": "[S390] add call home support\n\nSigned-off-by: Hans-Joachim Picht \u003chans@de.ibm.com\u003e\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\n" }, { "commit": "d254117099d711f215e62427f55dfb8ebd5ad011", "tree": "0848ff8dd74314fec14a86497f8d288c86ba7c65", "parents": [ "07ff7a0b187f3951788f64ae1f30e8109bc8e9eb", "8c9ed899b44c19e81859fbb0e9d659fe2f8630fc" ], "author": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri May 08 17:56:47 2009 +1000" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri May 08 17:56:47 2009 +1000" }, "message": "Merge branch \u0027master\u0027 into next\n" }, { "commit": "760df93ecdd59fc1c213a491b5adee79f53606da", "tree": "305a4e0fae43549eb24a3ebcf9bcc15a16ef2138", "parents": [ "70eed8d06601ca3810a0e56035eae6496d57856b" ], "author": { "name": "Shen Feng", "email": "shen@cn.fujitsu.com", "time": "Thu Apr 02 16:57:20 2009 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Apr 02 19:04:53 2009 -0700" }, "message": "documentation: update Documentation/filesystem/proc.txt and Documentation/sysctls\n\nNow /proc/sys is described in many places and much information is\nredundant. This patch updates the proc.txt and move the /proc/sys\ndesciption out to the files in Documentation/sysctls.\n\nDetails are:\n\nmerge\n- 2.1 /proc/sys/fs - File system data\n- 2.11 /proc/sys/fs/mqueue - POSIX message queues filesystem\n- 2.17 /proc/sys/fs/epoll - Configuration options for the epoll interface\nwith Documentation/sysctls/fs.txt.\n\nremove\n- 2.2 /proc/sys/fs/binfmt_misc - Miscellaneous binary formats\nsince it\u0027s not better then the Documentation/binfmt_misc.txt.\n\nmerge\n- 2.3 /proc/sys/kernel - general kernel parameters\nwith Documentation/sysctls/kernel.txt\n\nremove\n- 2.5 /proc/sys/dev - Device specific parameters\nsince it\u0027s obsolete the sysfs is used now.\n\nremove\n- 2.6 /proc/sys/sunrpc - Remote procedure calls\nsince it\u0027s not better then the Documentation/sysctls/sunrpc.txt\n\nmove\n- 2.7 /proc/sys/net - Networking stuff\n- 2.9 Appletalk\n- 2.10 IPX\nto newly created Documentation/sysctls/net.txt.\n\nremove\n- 2.8 /proc/sys/net/ipv4 - IPV4 settings\nsince it\u0027s not better then the Documentation/networking/ip-sysctl.txt.\n\nadd\n- Chapter 3 Per-Process Parameters\nto descibe /proc/\u003cpid\u003e/xxx parameters.\n\nSigned-off-by: Shen Feng \u003cshen@cn.fujitsu.com\u003e\nCc: Randy Dunlap \u003crandy.dunlap@oracle.com\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3d43321b7015387cfebbe26436d0e9d299162ea1", "tree": "bae6bd123c8f573e844a7af11c96eb5f6a73e0ee", "parents": [ "8a6f83afd0c5355db6d11394a798e94950306239" ], "author": { "name": "Kees Cook", "email": "kees@ubuntu.com", "time": "Thu Apr 02 15:49:29 2009 -0700" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri Apr 03 11:47:11 2009 +1100" }, "message": "modules: sysctl to block module loading\n\nImplement a sysctl file that disables module-loading system-wide since\nthere is no longer a viable way to remove CAP_SYS_MODULE after the system\nbounding capability set was removed in 2.6.25.\n\nValue can only be set to \"1\", and is tested only if standard capability\nchecks allow CAP_SYS_MODULE. Given existing /dev/mem protections, this\nshould allow administrators a one-way method to block module loading\nafter initial boot-time module loading has finished.\n\nSigned-off-by: Kees Cook \u003ckees.cook@canonical.com\u003e\nAcked-by: Serge Hallyn \u003cserue@us.ibm.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "bb20698d46bac1b2b48cfe1fcb33e54ac885946a", "tree": "ac071e121a959babfe88d6343b415aaf0ff31106", "parents": [ "e946217e4fdaa67681bbabfa8e6b18641921f750" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Fri Oct 17 15:01:07 2008 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Oct 29 15:03:49 2008 -0700" }, "message": "Document kernel taint flags properly\n\nThis fills in the documentation for all of the current kernel taint\nflags, and fixes the number for TAINT_CRAP, which was incorrectly\ndescribed.\n\nCc: Michael Kerrisk \u003cmtk.manpages@gmail.com\u003e\nCc: Randy Dunlap \u003crdunlap@xenotime.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "061b1bd394ca8628b7c24eb4658ba3535da4249a", "tree": "5711de7ffa17f0f5d0084292707872d19e9b19ff", "parents": [ "b922df7383749a1c0b7ea64c50fa839263d3816b" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Sep 24 14:46:44 2008 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Fri Oct 10 15:31:05 2008 -0700" }, "message": "Staging: add TAINT_CRAP for all drivers/staging code\n\nWe need to add a flag for all code that is in the drivers/staging/\ndirectory to prevent all other kernel developers from worrying about\nissues here, and to notify users that the drivers might not be as good\nas they are normally used to.\n\nBased on code from Andreas Gruenbacher and Jeff Mahoney to provide a\nTAINT flag for the support level of a kernel module in the Novell\nenterprise kernel release.\n\nThis is the kernel portion of this feature, the ability for the flag to\nbe set needs to be done in the build process and will happen in a\nfollow-up patch.\n\nCc: Andreas Gruenbacher \u003cagruen@suse.de\u003e\nCc: Jeff Mahoney \u003cjeffm@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "b4d19cc84e8e6838f4aa0b26b3afcdc8c7f71505", "tree": "6686ed8811e0c157da1d1fd642653c2e4415ee4b", "parents": [ "db203d53d474aa068984e409d807628f5841da1b" ], "author": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Mon Sep 22 13:57:51 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Sep 23 08:09:14 2008 -0700" }, "message": "Documentation/sysctl/kernel.txt: fix softlockup_thresh description\n\n- s/s/seconds/\n\n- s/10 seconds/60 seconds/\n\n- Mention the zero-disables-it feature.\n\nCc: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ac76cff2ecd73944473a437cd87770f812635025", "tree": "fb4f50b247820cb98c8c5640ad833ac98657cdb4", "parents": [ "ed58f8027945f1cf415bfe3805e1fa3fe8ed9edf" ], "author": { "name": "Michael Opdenacker", "email": "michael-lists@free-electrons.com", "time": "Wed Feb 13 15:03:32 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Feb 13 16:21:20 2008 -0800" }, "message": "Documentation: sysctl/kernel.txt: fix documentation reference\n\nThis patch fixes a reference to Documentation/kmod.txt\nwhich was apparently renamed to Documentation/debugging-modules.txt\n\nSigned-off-by: Michael Opdenacker \u003cmichael@free-electrons.com\u003e\nCc: \"Randy.Dunlap\" \u003crdunlap@xenotime.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "1ec7fd50ba4f845d1cf6b67acabd774577ef13b6", "tree": "267a1c61fa9a324c90ac8b59203e9bc1087f7dc7", "parents": [ "6697c05296fab4d113c7144459b72b6172b485a5" ], "author": { "name": "Jiri Kosina", "email": "jkosina@suse.cz", "time": "Sat Feb 09 23:24:08 2008 +0100" }, "committer": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Sat Feb 09 23:24:08 2008 +0100" }, "message": "brk: document randomize_va_space and CONFIG_COMPAT_BRK (was Re:\n\nDocument randomize_va_space and CONFIG_COMPAT_BRK.\n\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\n" }, { "commit": "c4f3b63fe15b4629aa1ec163c95ab30423d0f76a", "tree": "432723f1c7ac2fcff0aa57377c31187140d69145", "parents": [ "a5f2ce3c6024a5bb895647b6bd88ecae5001020a" ], "author": { "name": "Ravikiran G Thirumalai", "email": "kiran@scalex86.org", "time": "Tue Oct 16 23:26:09 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Oct 17 08:42:47 2007 -0700" }, "message": "softlockup: add a /proc tuning parameter\n\nControl the trigger limit for softlockup warnings. This is useful for\ndebugging softlockups, by lowering the softlockup_thresh to identify\npossible softlockups earlier.\n\nThis patch:\n1. Adds a sysctl softlockup_thresh with valid values of 1-60s\n (Higher value to disable false positives)\n2. Changes the softlockup printk to print the cpu softlockup time\n\n[akpm@linux-foundation.org: Fix various warnings and add definition of \"two\"]\nSigned-off-by: Ravikiran Thirumalai \u003ckiran@scalex86.org\u003e\nSigned-off-by: Shai Fultheim \u003cshai@scalex86.org\u003e\nAcked-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "a982ac06b069f6ee9ea1b64f4ce68cdf2e138742", "tree": "fb120a416db15d09722e8780b7a09d0da1a9b94e", "parents": [ "148e423f909e14564d8af13239c5d060f7df273e" ], "author": { "name": "Matt LaPlante", "email": "kernel1@cyberdogtech.com", "time": "Wed May 09 07:35:06 2007 +0200" }, "committer": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Wed May 09 08:58:15 2007 +0200" }, "message": "misc doc and kconfig typos\n\nFix various typos in kernel docs and Kconfigs, 2.6.21-rc4.\n\nSigned-off-by: Matt LaPlante \u003ckernel1@cyberdogtech.com\u003e\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\n" }, { "commit": "beb7dd86a101263bf63a78c7c6d4da3849b35bd6", "tree": "9afe81ca9e92ab8aacc999ae118b27d547721f11", "parents": [ "3dde6ad8fc3939d345a3768464ecff43c91d511a" ], "author": { "name": "Robert P. J. Day", "email": "rpjday@mindspring.com", "time": "Wed May 09 07:14:03 2007 +0200" }, "committer": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Wed May 09 07:14:03 2007 +0200" }, "message": "Fix misspellings collected by members of KJ list.\n\nFix the misspellings of \"propogate\", \"writting\" and (oh, the shame\n:-) \"kenrel\" in the source tree.\n\nSigned-off-by: Robert P. J. Day \u003crpjday@mindspring.com\u003e\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\n" }, { "commit": "0741f4d207a644482d7a040f05cd264c98cf7ee8", "tree": "787f2fffc12871d0f19e492fc4258cda254aa42d", "parents": [ "c7a3392e9e53e43c44a971de3dd480a8e2788e75" ], "author": { "name": "Chuck Ebbert", "email": "76306.1226@compuserve.com", "time": "Thu Dec 07 02:14:11 2006 +0100" }, "committer": { "name": "Andi Kleen", "email": "andi@basil.nowhere.org", "time": "Thu Dec 07 02:14:11 2006 +0100" }, "message": "[PATCH] x86: add sysctl for kstack_depth_to_print\n\nAdd sysctl for kstack_depth_to_print. This lets users change\nthe amount of raw stack data printed in dump_stack() without\nhaving to reboot.\n\nSigned-off-by: Chuck Ebbert \u003c76306.1226@compuserve.com\u003e\nSigned-off-by: Andi Kleen \u003cak@suse.de\u003e\n" }, { "commit": "cd0810410beb86c570aeb3dcd3dc1fc5ab9e6077", "tree": "4a2dcbf9b0e66a9aef69a94bf0d6ce8c7fe1fee8", "parents": [ "01a3ee2b203e511e20f98b85a9172fd32c53e87c" ], "author": { "name": "Matthias Urlichs", "email": "smurf@smurf.noris.de", "time": "Wed Oct 11 01:21:57 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Wed Oct 11 11:14:22 2006 -0700" }, "message": "[PATCH] document the core-dump-to-a-pipe patch\n\nThe pipe-a-coredump-to-a-program feature was undocumented.\n*Grumble*.\n\nNB: a good enhancement to that patch would be: save all the stuff that a\ncore file can get from the %x expansions in the environment.\n\nSigned-off-by: Matthias Urlichs \u003cmatthias@urlichs.de\u003e\nCc: Andi Kleen \u003cak@suse.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "a2e0b56316fa90e137802fdad6a7c6a9b85c86c3", "tree": "b9ea6534c1e1e1dd6a0e24bdadebc9e4be147590", "parents": [ "cc36e7f124da139a819ad316c39d9dbcb5ba1897" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Sun Aug 27 01:23:28 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Sun Aug 27 11:01:28 2006 -0700" }, "message": "[PATCH] Fix docs for fs.suid_dumpable\n\nSergey Vlasov noticed that there is not kernel.suid_dumpable, but\nfs.suid_dumpable.\n\nHow KERN_SETUID_DUMPABLE ended up in fs_table[]? Hell knows...\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "8b23d04dd26e6d170adc644cf12a0d9dfa1f5094", "tree": "01657165733560aa789c09913d90d1954045e6fa", "parents": [ "2f34931fdc78b4895553aaa33748939cc7697c99" ], "author": { "name": "Maxime Bizon", "email": "mbizon@freebox.fr", "time": "Sat Aug 05 12:14:32 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Sun Aug 06 08:57:47 2006 -0700" }, "message": "[PATCH] doc: update panic_on_oops documentation\n\nSigned-off-by: Maxime Bizon \u003cmbizon@freebox.fr\u003e\nAcked-by: Simon Horman \u003chorms@verge.net.au\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "c255d844dd73616f23e4b4733edcc2e5fa4042b2", "tree": "33665c47a67c3e168095e13329e71c6b5d18fd4d", "parents": [ "6303dbf570e410067380daec670fdb4137ac0d1d" ], "author": { "name": "Pavel Machek", "email": "pavel@ucw.cz", "time": "Mon Feb 20 18:27:58 2006 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Mon Feb 20 20:00:10 2006 -0800" }, "message": "[PATCH] suspend-to-ram: allow video options to be set at runtime\n\nCurrently, acpi video options can only be set on kernel command line. That\u0027s\nlittle inflexible; I\u0027d like userland s2ram application that just works, and\nmodifying kernel command line according to whitelist is not fun. It is better\nto just allow s2ram application to set video options just before suspend\n(according to the whitelist).\n\nThis implements sysctl to allow setting suspend video options without reboot.\n\n(akpm: Documentation updates for this new sysctl are pending..)\n\nSigned-off-by: Pavel Machek \u003cpavel@suse.cz\u003e\nCc: \"Brown, Len\" \u003clen.brown@intel.com\u003e\nCc: \"Antonino A. Daplas\" \u003cadaplas@pol.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "d6e711448137ca3301512cec41a2c2ce852b3d0a", "tree": "f0765ebd90fdbdf270c05fcd7f3d32b24ba56681", "parents": [ "8b0914ea7475615c7c8965c1ac8fe4069270f25c" ], "author": { "name": "Alan Cox", "email": "alan@lxorguk.ukuu.org.uk", "time": "Thu Jun 23 00:09:43 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@ppc970.osdl.org", "time": "Thu Jun 23 09:45:26 2005 -0700" }, "message": "[PATCH] setuid core dump\n\nAdd a new `suid_dumpable\u0027 sysctl:\n\nThis value can be used to query and set the core dump mode for setuid\nor otherwise protected/tainted binaries. The modes are\n\n0 - (default) - traditional behaviour. Any process which has changed\n privilege levels or is execute only will not be dumped\n\n1 - (debug) - all processes dump core when possible. The core dump is\n owned by the current user and no security is applied. This is intended\n for system debugging situations only. Ptrace is unchecked.\n\n2 - (suidsafe) - any binary which normally would not be dumped is dumped\n readable by root only. This allows the end user to remove such a dump but\n not access it directly. For security reasons core dumps in this mode will\n not overwrite one another or other files. This mode is appropriate when\n adminstrators are attempting to debug problems in a normal environment.\n\n(akpm:\n\n\u003e \u003e +EXPORT_SYMBOL(suid_dumpable);\n\u003e\n\u003e EXPORT_SYMBOL_GPL?\n\nNo problem to me.\n\n\u003e \u003e \tif (current-\u003eeuid \u003d\u003d current-\u003euid \u0026\u0026 current-\u003eegid \u003d\u003d current-\u003egid)\n\u003e \u003e \t\tcurrent-\u003emm-\u003edumpable \u003d 1;\n\u003e\n\u003e Should this be SUID_DUMP_USER?\n\nActually the feedback I had from last time was that the SUID_ defines\nshould go because its clearer to follow the numbers. They can go\neverywhere (and there are lots of places where dumpable is tested/used\nas a bool in untouched code)\n\n\u003e Maybe this should be renamed to `dump_policy\u0027 or something. Doing that\n\u003e would help us catch any code which isn\u0027t using the #defines, too.\n\nFair comment. The patch was designed to be easy to maintain for Red Hat\nrather than for merging. Changing that field would create a gigantic\ndiff because it is used all over the place.\n\n)\n\nSigned-off-by: Alan Cox \u003calan@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "tree": "0bba044c4ce775e45a88a51686b5d9f90697ea9d", "parents": [], "author": { "name": "Linus Torvalds", "email": "torvalds@ppc970.osdl.org", "time": "Sat Apr 16 15:20:36 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@ppc970.osdl.org", "time": "Sat Apr 16 15:20:36 2005 -0700" }, "message": "Linux-2.6.12-rc2\n\nInitial git repository build. I\u0027m not bothering with the full history,\neven though we have it. We can create a separate \"historical\" git\narchive of that later if we want to, and in the meantime it\u0027s about\n3.2GB when imported into git - space that would just make the early\ngit days unnecessarily complicated, when we don\u0027t have a lot of good\ninfrastructure for it.\n\nLet it rip!\n" } ] }