)]}' { "log": [ { "commit": "a2a8474c3fff88d8dd52d05cb450563fb26fd26c", "tree": "455415da039a77627f47ed19318bb9c8aa17de4d", "parents": [ "dd5d241ea955006122d76af88af87de73fec25b4" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Sat Sep 05 11:17:13 2009 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Sep 05 11:30:42 2009 -0700" }, "message": "exec: do not sleep in TASK_TRACED under -\u003ecred_guard_mutex\n\nTom Horsley reports that his debugger hangs when it tries to read\n/proc/pid_of_tracee/maps, this happens since\n\n\t\"mm_for_maps: take -\u003ecred_guard_mutex to fix the race with exec\"\n\t04b836cbf19e885f8366bccb2e4b0474346c02d\n\ncommit in 2.6.31.\n\nBut the root of the problem lies in the fact that do_execve() path calls\ntracehook_report_exec() which can stop if the tracer sets PT_TRACE_EXEC.\n\nThe tracee must not sleep in TASK_TRACED holding this mutex. Even if we\nremove -\u003ecred_guard_mutex from mm_for_maps() and proc_pid_attr_write(),\nanother task doing PTRACE_ATTACH should not hang until it is killed or the\ntracee resumes.\n\nWith this patch do_execve() does not use -\u003ecred_guard_mutex directly and\nwe do not hold it throughout, instead:\n\n\t- introduce prepare_bprm_creds() helper, it locks the mutex\n\t and calls prepare_exec_creds() to initialize bprm-\u003ecred.\n\n\t- install_exec_creds() drops the mutex after commit_creds(),\n\t and thus before tracehook_report_exec()-\u003eptrace_stop().\n\n\t or, if exec fails,\n\n\t free_bprm() drops this mutex when bprm-\u003ecred !\u003d NULL which\n\t indicates install_exec_creds() was not called.\n\nReported-by: Tom Horsley \u003ctom.horsley@att.net\u003e\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nAcked-by: David Howells \u003cdhowells@redhat.com\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nCc: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6777d773a463ac045d333b989d4e44660f8d92ad", "tree": "17291984d71515cec0a1970ecce3d631ed2f7981", "parents": [ "3edf2fb9d80a46d6c32ba12547a42419845b4b76" ], "author": { "name": "Mimi Zohar", "email": "zohar@linux.vnet.ibm.com", "time": "Fri Aug 21 14:32:48 2009 -0400" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Mon Aug 24 14:58:23 2009 +1000" }, "message": "kernel_read: redefine offset type\n\nvfs_read() offset is defined as loff_t, but kernel_read()\noffset is only defined as unsigned long. Redefine\nkernel_read() offset as loff_t.\n\nCc: stable@kernel.org\nSigned-off-by: Mimi Zohar \u003czohar@us.ibm.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "793285fcafce4719a05e0c99fa74b188157fe7fe", "tree": "3395530c1d4e604beac506c703b3093bb13f23ee", "parents": [ "82e3310ace59794ecf0f531eca94647b2863dfda" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Sun Jul 05 12:08:26 2009 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Jul 06 13:57:04 2009 -0700" }, "message": "cred_guard_mutex: do not return -EINTR to user-space\n\ndo_execve() and ptrace_attach() return -EINTR if\nmutex_lock_interruptible(-\u003ecred_guard_mutex) fails.\n\nThis is not right, change the code to return ERESTARTNOINTR.\n\nPerhaps we should also change proc_pid_attr_write().\n\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nAcked-by: Roland McGrath \u003croland@redhat.com\u003e\nCc: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "8a1ca8cedd108c8e76a6ab34079d0bbb4f244799", "tree": "636c715524f1718599209cc289908ea44b6cb859", "parents": [ "b640f042faa2a2fad6464f259a8afec06e2f6386", "940010c5a314a7bd9b498593bc6ba1718ac5aec5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 11 14:01:07 2009 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 11 14:01:07 2009 -0700" }, "message": "Merge branch \u0027perfcounters-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip\n\n* \u0027perfcounters-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip: (574 commits)\n perf_counter: Turn off by default\n perf_counter: Add counter-\u003eid to the throttle event\n perf_counter: Better align code\n perf_counter: Rename L2 to LL cache\n perf_counter: Standardize event names\n perf_counter: Rename enums\n perf_counter tools: Clean up u64 usage\n perf_counter: Rename perf_counter_limit sysctl\n perf_counter: More paranoia settings\n perf_counter: powerpc: Implement generalized cache events for POWER processors\n perf_counters: powerpc: Add support for POWER7 processors\n perf_counter: Accurate period data\n perf_counter: Introduce struct for sample data\n perf_counter tools: Normalize data using per sample period data\n perf_counter: Annotate exit ctx recursion\n perf_counter tools: Propagate signals properly\n perf_counter tools: Small frequency related fixes\n perf_counter: More aggressive frequency adjustment\n perf_counter/x86: Fix the model number of Intel Core2 processors\n perf_counter, x86: Correct some event and umask values for Intel processors\n ...\n" }, { "commit": "2c9e703c618106f5383226fbb1f526cb11034f8a", "tree": "87d7548001ea82f655fede0640466fc16aabcdf7", "parents": [ "6470c077cae12227318f40f3e6d756caadcce4b0", "5805977e63a36ad56594a623f3bd2bebcb7db233" ], "author": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri May 22 18:40:59 2009 +1000" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri May 22 18:40:59 2009 +1000" }, "message": "Merge branch \u0027master\u0027 into next\n\nConflicts:\n\tfs/exec.c\n\nRemoved IMA changes (the IMA checks are now performed via may_open()).\n\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "b9fc745db833bbf74b4988493b8cd902a84c9415", "tree": "45a15174efb3b1c3dcbe5f0dc503e790c4f6fd70", "parents": [ "932995f0ce52525b32ff5127b522c2c164de3810" ], "author": { "name": "Mimi Zohar", "email": "zohar@linux.vnet.ibm.com", "time": "Tue May 19 13:25:57 2009 -0400" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri May 22 09:43:41 2009 +1000" }, "message": "integrity: path_check update\n\n- Add support in ima_path_check() for integrity checking without\nincrementing the counts. (Required for nfsd.)\n- rename and export opencount_get to ima_counts_get\n- replace ima_shm_check calls with ima_counts_get\n- export ima_path_check\n\nSigned-off-by: Mimi Zohar \u003czohar@us.ibm.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "dc3f81b129b5439ba7bac265bbc6a51a39275dae", "tree": "216030731d911249496d2e97206cd61431e31c89", "parents": [ "d2517a49d55536b38c7a87e5289550cfedaa4dcc", "1406de8e11eb043681297adf86d6892ff8efc27a" ], "author": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Mon May 18 07:37:44 2009 +0200" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Mon May 18 07:37:49 2009 +0200" }, "message": "Merge commit \u0027v2.6.30-rc6\u0027 into perfcounters/core\n\nMerge reason: this branch was on an -rc4 base, merge it up to -rc6\n to get the latest upstream fixes.\n\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\n" }, { "commit": "5e751e992f3fb08ba35e1ca8095ec8fbf9eda523", "tree": "711b1b47622dc9661f1d3d9c67d55c0b21456e8c", "parents": [ "d254117099d711f215e62427f55dfb8ebd5ad011" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri May 08 13:55:22 2009 +0100" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Mon May 11 08:15:36 2009 +1000" }, "message": "CRED: Rename cred_exec_mutex to reflect that it\u0027s a guard against ptrace\n\nRename cred_exec_mutex to reflect that it\u0027s a guard against foreign\nintervention on a process\u0027s credential state, such as is made by ptrace(). The\nattachment of a debugger to a process affects execve()\u0027s calculation of the new\ncredential state - _and_ also setprocattr()\u0027s calculation of that state.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "6e8341a11eb21826b7192d0bb88cb5b44900a9af", "tree": "f9e03050f0834c2c4a21f1e6a255b6b0d1262b25", "parents": [ "a44ddbb6d8a8ffe4e34e417048dfdd8f3dd1de4f" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Apr 06 11:16:22 2009 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat May 09 10:49:42 2009 -0400" }, "message": "Switch open_exec() and sys_uselib() to do_open_filp()\n\n... and make path_lookup_open() static\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "a44ddbb6d8a8ffe4e34e417048dfdd8f3dd1de4f", "tree": "a5f9962f00d8a7b2640682fffd6aefd3544b1fd3", "parents": [ "e24977d45f45d1675e050dc1a0aaf4bfc4ca9866" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Apr 06 09:38:49 2009 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat May 09 10:49:42 2009 -0400" }, "message": "Make open_exec() and sys_uselib() use may_open(), instead of duplicating its parts\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "74641f584da8eccf30becfbb5507ab457187db22", "tree": "da212b7ae1b5a2a50a4314b3a75df5763623295e", "parents": [ "77b4cf5cb0c9d6010a18030a0e0a8d2aaf6b43ec" ], "author": { "name": "Ivan Kokshaysky", "email": "ink@jurassic.park.msu.ru", "time": "Thu Apr 30 15:08:49 2009 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat May 02 15:36:10 2009 -0700" }, "message": "alpha: binfmt_aout fix\n\nThis fixes the problem introduced by commit 3bfacef412 (get rid of\nspecial-casing the /sbin/loader on alpha): osf/1 ecoff binary segfaults\nwhen binfmt_aout built as module. That happens because aout binary\nhandler gets on the top of the binfmt list due to late registration, and\nkernel attempts to execute the binary without preparatory work that must\nbe done by binfmt_loader.\n\nFixed by changing the registration order of the default binfmt handlers\nusing list_add_tail() and introducing insert_binfmt() function which\nplaces new handler on the top of the binfmt list. This might be generally\nuseful for installing arch-specific frontends for default handlers or just\nfor overriding them.\n\nSigned-off-by: Ivan Kokshaysky \u003cink@jurassic.park.msu.ru\u003e\nCc: Al Viro \u003cviro@ZenIV.linux.org.uk\u003e\nCc: Richard Henderson \u003crth@twiddle.net\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "e7fd5d4b3d240f42c30a9e3d20a4689c4d3a795a", "tree": "4ba588631dd8189a818a91c9e3976526071178b6", "parents": [ "1130b0296184bc21806225fd06d533515a99d2db", "56a50adda49b2020156616c4eb15353e0f9ad7de" ], "author": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Wed Apr 29 14:46:59 2009 +0200" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Wed Apr 29 14:47:05 2009 +0200" }, "message": "Merge branch \u0027linus\u0027 into perfcounters/core\n\nMerge reason: This brach was on -rc1, refresh it to almost-rc4 to pick up\n the latest upstream fixes.\n\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\n" }, { "commit": "437f7fdb607f32b737e4da9f14bebcfdac2c90c3", "tree": "2064149ad4406774bd3b1ade60782980206f2e82", "parents": [ "8c652f96d3852b97a49c331cd0bb02d22f3cb31b" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Fri Apr 24 01:02:45 2009 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 24 07:39:45 2009 -0700" }, "message": "check_unsafe_exec: s/lock_task_sighand/rcu_read_lock/\n\nwrite_lock(\u0026current-\u003efs-\u003elock) guarantees we can\u0027t wrongly miss\nLSM_UNSAFE_SHARE, this is what we care about. Use rcu_read_lock()\ninstead of -\u003esiglock to iterate over the sub-threads. We must see\nall CLONE_THREAD|CLONE_FS threads which didn\u0027t pass exit_fs(), it\ntakes fs-\u003elock too.\n\nWith or without this patch we can miss the freshly cloned thread\nand set LSM_UNSAFE_SHARE, we don\u0027t care.\n\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nAcked-by: Roland McGrath \u003croland@redhat.com\u003e\n[ Fixed lock/unlock typo - Hugh ]\nAcked-by: Hugh Dickins \u003chugh@veritas.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "8c652f96d3852b97a49c331cd0bb02d22f3cb31b", "tree": "9752969f2ae7312026bb4037ecd950dafd403d9b", "parents": [ "091069740304c979f957ceacec39c461d0192158" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Fri Apr 24 01:01:56 2009 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 24 07:39:45 2009 -0700" }, "message": "do_execve() must not clear fs-\u003ein_exec if it was set by another thread\n\nIf do_execve() fails after check_unsafe_exec(), it clears fs-\u003ein_exec\nunconditionally. This is wrong if we race with our sub-thread which\nalso does do_execve:\n\n\tTwo threads T1 and T2 and another process P, all share the same\n\t-\u003efs.\n\n\tT1 starts do_execve(BAD_FILE). It calls check_unsafe_exec(), since\n\t-\u003efs is shared, we set LSM_UNSAFE but not -\u003ein_exec.\n\n\tP exits and decrements fs-\u003eusers.\n\n\tT2 starts do_execve(), calls check_unsafe_exec(), now -\u003efs is not\n\tshared, we set fs-\u003ein_exec.\n\n\tT1 continues, open_exec(BAD_FILE) fails, we clear -\u003ein_exec and\n\treturn to the user-space.\n\n\tT1 does clone(CLONE_FS /* without CLONE_THREAD */).\n\n\tT2 continues without LSM_UNSAFE_SHARE while -\u003efs is shared with\n\tanother process.\n\nChange check_unsafe_exec() to return res \u003d 1 if we set -\u003ein_exec, and change\ndo_execve() to clear -\u003ein_exec depending on res.\n\nWhen do_execve() suceeds, it is safe to clear -\u003ein_exec unconditionally.\nIt can be set only if we don\u0027t share -\u003efs with another process, and since\nwe already killed all sub-threads either -\u003ein_exec \u003d\u003d 0 or we are the\nonly user of this -\u003efs.\n\nAlso, we do not need fs-\u003elock to clear fs-\u003ein_exec.\n\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nAcked-by: Roland McGrath \u003croland@redhat.com\u003e\nAcked-by: Hugh Dickins \u003chugh@veritas.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "8d1b2d9361b494bfc761700c348c65ebbe3deb5b", "tree": "284706b328133063bf530cb47c52a827b523b65a", "parents": [ "8740f9418c78dcad694b46ab25d1645d5aef1f5e" ], "author": { "name": "Peter Zijlstra", "email": "a.p.zijlstra@chello.nl", "time": "Wed Apr 08 15:01:30 2009 +0200" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Wed Apr 08 19:05:47 2009 +0200" }, "message": "perf_counter: track task-comm data\n\nSimilar to the mmap data stream, add one that tracks the task COMM field,\nso that the userspace reporting knows what to call a task.\n\nSigned-off-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nCc: Paul Mackerras \u003cpaulus@samba.org\u003e\nCc: Corey Ashford \u003ccjashfor@linux.vnet.ibm.com\u003e\nLKML-Reference: \u003c20090408130409.127422406@chello.nl\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\n" }, { "commit": "f541ae326fa120fa5c57433e4d9a133df212ce41", "tree": "bdbd94ec72cfc601118051cb35e8617d55510177", "parents": [ "e255357764f92afcafafbd4879b222b8c752065a", "0221c81b1b8eb0cbb6b30a0ced52ead32d2b4e4c" ], "author": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Mon Apr 06 09:02:57 2009 +0200" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Mon Apr 06 09:02:57 2009 +0200" }, "message": "Merge branch \u0027linus\u0027 into perfcounters/core-v2\n\nMerge reason: we have gathered quite a few conflicts, need to merge upstream\n\nConflicts:\n\tarch/powerpc/kernel/Makefile\n\tarch/x86/ia32/ia32entry.S\n\tarch/x86/include/asm/hardirq.h\n\tarch/x86/include/asm/unistd_32.h\n\tarch/x86/include/asm/unistd_64.h\n\tarch/x86/kernel/cpu/common.c\n\tarch/x86/kernel/irq.c\n\tarch/x86/kernel/syscall_table_32.S\n\tarch/x86/mm/iomap_32.c\n\tinclude/linux/sched.h\n\tkernel/Makefile\n\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\n" }, { "commit": "5ad4e53bd5406ee214ddc5a41f03f779b8b2d526", "tree": "b3dab5140284b3edf02bf2b13f74bfddb25aa62a", "parents": [ "ce3b0f8d5c2203301fc87f3aaaed73e5819e2a48" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sun Mar 29 19:50:06 2009 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Mar 31 23:00:27 2009 -0400" }, "message": "Get rid of indirect include of fs_struct.h\n\nDon\u0027t pull it in sched.h; very few files actually need it and those\ncan include directly. sched.h itself only needs forward declaration\nof struct fs_struct;\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "f1191b50ec11c8e2ca766d6d99eb5bb9d2c084a3", "tree": "7eae2387269bd3d2d4c6f334568f9fea6518c787", "parents": [ "498052bba55ecaff58db6a1436b0e25bfd75a7ff" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Mar 30 07:35:18 2009 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Mar 31 23:00:26 2009 -0400" }, "message": "check_unsafe_exec() doesn\u0027t care about signal handlers sharing\n\n... since we\u0027ll unshare sighand anyway\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "498052bba55ecaff58db6a1436b0e25bfd75a7ff", "tree": "bd3644ac60737e3733995a203acebd70cfd1b21b", "parents": [ "3e93cd671813e204c258f1e6c797959920cf7772" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Mar 30 07:20:30 2009 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Mar 31 23:00:26 2009 -0400" }, "message": "New locking/refcounting for fs_struct\n\n* all changes of current-\u003efs are done under task_lock and write_lock of\n old fs-\u003elock\n* refcount is not atomic anymore (same protection)\n* its decrements are done when removing reference from current; at the\n same time we decide whether to free it.\n* put_fs_struct() is gone\n* new field - -\u003ein_exec. Set by check_unsafe_exec() if we are trying to do\n execve() and only subthreads share fs_struct. Cleared when finishing exec\n (success and failure alike). Makes CLONE_FS fail with -EAGAIN if set.\n* check_unsafe_exec() may fail with -EAGAIN if another execve() from subthread\n is in progress.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "e426b64c412aaa3e9eb3e4b261dc5be0d5a83e78", "tree": "c1528139b34fef3e4595576266c64068098fe211", "parents": [ "53e9309e01277ec99c38e84e0ca16921287cf470" ], "author": { "name": "Hugh Dickins", "email": "hugh@veritas.com", "time": "Sat Mar 28 23:20:19 2009 +0000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 28 17:30:00 2009 -0700" }, "message": "fix setuid sometimes doesn\u0027t\n\nJoe Malicki reports that setuid sometimes doesn\u0027t: very rarely,\na setuid root program does not get root euid; and, by the way,\nthey have a health check running lsof every few minutes.\n\nRight, check_unsafe_exec() notes whether the files_struct is being\nshared by more threads than will get killed by the exec, and if so\nsets LSM_UNSAFE_SHARE to make bprm_set_creds() careful about euid.\nBut /proc/\u003cpid\u003e/fd and /proc/\u003cpid\u003e/fdinfo lookups make transient\nuse of get_files_struct(), which also raises that sharing count.\n\nThere\u0027s a rather simple fix for this: exec\u0027s check on files-\u003ecount\nhas been redundant ever since 2.6.1 made it unshare_files() (except\nwhile compat_do_execve() omitted to do so) - just remove that check.\n\n[Note to -stable: this patch will not apply before 2.6.29: earlier\nreleases should just remove the files-\u003ecount line from unsafe_exec().]\n\nReported-by: Joe Malicki \u003cjmalicki@metacarta.com\u003e\nNarrowed-down-by: Michael Itz \u003cmitz@metacarta.com\u003e\nTested-by: Joe Malicki \u003cjmalicki@metacarta.com\u003e\nSigned-off-by: Hugh Dickins \u003chugh@veritas.com\u003e\nCc: stable@kernel.org\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "703a3cd72817e99201cef84a8a7aecc60b2b3581", "tree": "3e943755178ff410694722bb031f523136fbc432", "parents": [ "df7f54c012b92ec93d56b68547351dcdf8a163d3", "8e0ee43bc2c3e19db56a4adaa9a9b04ce885cd84" ], "author": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Tue Mar 24 10:52:46 2009 +1100" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Tue Mar 24 10:52:46 2009 +1100" }, "message": "Merge branch \u0027master\u0027 into next\n" }, { "commit": "f9ce1f1cda8b73a36f47e424975a9dfa78b7840c", "tree": "66138b33dbf627f99f5ec67e0e39ce15ab830080", "parents": [ "523979adfa0b79d4e3aa053220c37a9233294206" ], "author": { "name": "Kentaro Takeda", "email": "takedakn@nttdata.co.jp", "time": "Thu Feb 05 17:18:11 2009 +0900" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Thu Feb 12 15:15:03 2009 +1100" }, "message": "Add in_execve flag into task_struct.\n\nThis patch allows LSM modules to determine whether current process is in an\nexecve operation or not so that they can behave differently while an execve\noperation is in progress.\n\nThis patch is needed by TOMOYO. Please see another patch titled \"LSM adapter\nfunctions.\" for backgrounds.\n\nSigned-off-by: Tetsuo Handa \u003cpenguin-kernel@I-love.SAKURA.ne.jp\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "95fd4845ed0ffcab305b4f30ce1c12dc34f1b56c", "tree": "aa2aac22a5b329b778a6771a87bbf1945ad49bbd", "parents": [ "d278c48435625cb6b7edcf6a547620768b175709", "8e4921515c1a379539607eb443d51c30f4f7f338" ], "author": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Wed Feb 11 09:22:04 2009 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Wed Feb 11 09:22:04 2009 +0100" }, "message": "Merge commit \u0027v2.6.29-rc4\u0027 into perfcounters/core\n\nConflicts:\n\tarch/x86/kernel/setup_percpu.c\n\tarch/x86/mm/fault.c\n\tdrivers/acpi/processor_idle.c\n\tkernel/irq/handle.c\n" }, { "commit": "0bf2f3aec5474da80a60e1baca629af87ecb67b6", "tree": "5c1a7733e24aaacbcf46e0434a11f033cfde43ca", "parents": [ "6cec50838ed04a9833fb5549f698d3756bbe7e72" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Feb 06 11:45:46 2009 +0000" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Sat Feb 07 08:46:18 2009 +1100" }, "message": "CRED: Fix SUID exec regression\n\nThe patch:\n\n\tcommit a6f76f23d297f70e2a6b3ec607f7aeeea9e37e8d\n\tCRED: Make execve() take advantage of copy-on-write credentials\n\nmoved the place in which the \u0027safeness\u0027 of a SUID/SGID exec was performed to\nbefore de_thread() was called. This means that LSM_UNSAFE_SHARE is now\ncalculated incorrectly. This flag is set if any of the usage counts for\nfs_struct, files_struct and sighand_struct are greater than 1 at the time the\ndetermination is made. All of which are true for threads created by the\npthread library.\n\nHowever, since we wish to make the security calculation before irrevocably\ndamaging the process so that we can return it an error code in the case where\nwe decide we want to reject the exec request on this basis, we have to make the\ndetermination before calling de_thread().\n\nSo, instead, we count up the number of threads (CLONE_THREAD) that are sharing\nour fs_struct (CLONE_FS), files_struct (CLONE_FILES) and sighand_structs\n(CLONE_SIGHAND/CLONE_THREAD) with us. These will be killed by de_thread() and\nso can be discounted by check_unsafe_exec().\n\nWe do have to be careful because CLONE_THREAD does not imply FS or FILES.\n\nWe _assume_ that there will be no extra references to these structs held by the\nthreads we\u0027re going to kill.\n\nThis can be tested with the attached pair of programs. Build the two programs\nusing the Makefile supplied, and run ./test1 as a non-root user. If\nsuccessful, you should see something like:\n\n\t[dhowells@andromeda tmp]$ ./test1\n\t--TEST1--\n\tuid\u003d4043, euid\u003d4043 suid\u003d4043\n\texec ./test2\n\t--TEST2--\n\tuid\u003d4043, euid\u003d0 suid\u003d0\n\tSUCCESS - Correct effective user ID\n\nand if unsuccessful, something like:\n\n\t[dhowells@andromeda tmp]$ ./test1\n\t--TEST1--\n\tuid\u003d4043, euid\u003d4043 suid\u003d4043\n\texec ./test2\n\t--TEST2--\n\tuid\u003d4043, euid\u003d4043 suid\u003d4043\n\tERROR - Incorrect effective user ID!\n\nThe non-root user ID you see will depend on the user you run as.\n\n[test1.c]\n#include \u003cstdio.h\u003e\n#include \u003cstdlib.h\u003e\n#include \u003cunistd.h\u003e\n#include \u003cpthread.h\u003e\n\nstatic void *thread_func(void *arg)\n{\n\twhile (1) {}\n}\n\nint main(int argc, char **argv)\n{\n\tpthread_t tid;\n\tuid_t uid, euid, suid;\n\n\tprintf(\"--TEST1--\\n\");\n\tgetresuid(\u0026uid, \u0026euid, \u0026suid);\n\tprintf(\"uid\u003d%d, euid\u003d%d suid\u003d%d\\n\", uid, euid, suid);\n\n\tif (pthread_create(\u0026tid, NULL, thread_func, NULL) \u003c 0) {\n\t\tperror(\"pthread_create\");\n\t\texit(1);\n\t}\n\n\tprintf(\"exec ./test2\\n\");\n\texeclp(\"./test2\", \"test2\", NULL);\n\tperror(\"./test2\");\n\t_exit(1);\n}\n\n[test2.c]\n#include \u003cstdio.h\u003e\n#include \u003cstdlib.h\u003e\n#include \u003cunistd.h\u003e\n\nint main(int argc, char **argv)\n{\n\tuid_t uid, euid, suid;\n\n\tgetresuid(\u0026uid, \u0026euid, \u0026suid);\n\tprintf(\"--TEST2--\\n\");\n\tprintf(\"uid\u003d%d, euid\u003d%d suid\u003d%d\\n\", uid, euid, suid);\n\n\tif (euid !\u003d 0) {\n\t\tfprintf(stderr, \"ERROR - Incorrect effective user ID!\\n\");\n\t\texit(1);\n\t}\n\tprintf(\"SUCCESS - Correct effective user ID\\n\");\n\texit(0);\n}\n\n[Makefile]\nCFLAGS \u003d -D_GNU_SOURCE -Wall -Werror -Wunused\nall: test1 test2\n\ntest1: test1.c\n\tgcc $(CFLAGS) -o test1 test1.c -lpthread\n\ntest2: test2.c\n\tgcc $(CFLAGS) -o test2 test2.c\n\tsudo chown root.root test2\n\tsudo chmod +s test2\n\nReported-by: David Smith \u003cdsmith@redhat.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nAcked-by: David Smith \u003cdsmith@redhat.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "cb5629b10d64a8006622ce3a52bc887d91057d69", "tree": "7c06d8f30783115e3384721046258ce615b129c5", "parents": [ "8920d5ad6ba74ae8ab020e90cc4d976980e68701", "f01d1d546abb2f4028b5299092f529eefb01253a" ], "author": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri Feb 06 11:01:45 2009 +1100" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri Feb 06 11:01:45 2009 +1100" }, "message": "Merge branch \u0027master\u0027 into next\n\nConflicts:\n\tfs/namei.c\n\nManually merged per:\n\ndiff --cc fs/namei.c\nindex 734f2b5,bbc15c2..0000000\n--- a/fs/namei.c\n+++ b/fs/namei.c\n@@@ -860,9 -848,8 +849,10 @@@ static int __link_path_walk(const char\n \t\tnd-\u003eflags |\u003d LOOKUP_CONTINUE;\n \t\terr \u003d exec_permission_lite(inode);\n \t\tif (err \u003d\u003d -EAGAIN)\n- \t\t\terr \u003d vfs_permission(nd, MAY_EXEC);\n+ \t\t\terr \u003d inode_permission(nd-\u003epath.dentry-\u003ed_inode,\n+ \t\t\t\t\t MAY_EXEC);\n +\t\tif (!err)\n +\t\t\terr \u003d ima_path_check(\u0026nd-\u003epath, MAY_EXEC);\n \t\tif (err)\n \t\t\tbreak;\n\n@@@ -1525,14 -1506,9 +1509,14 @@@ int may_open(struct path *path, int acc\n \t\tflag \u0026\u003d ~O_TRUNC;\n \t}\n\n- \terror \u003d vfs_permission(nd, acc_mode);\n+ \terror \u003d inode_permission(inode, acc_mode);\n \tif (error)\n \t\treturn error;\n +\n- \terror \u003d ima_path_check(\u0026nd-\u003epath,\n++\terror \u003d ima_path_check(path,\n +\t\t\t acc_mode \u0026 (MAY_READ | MAY_WRITE | MAY_EXEC));\n +\tif (error)\n +\t\treturn error;\n \t/*\n \t * An append-only file must be opened in append mode for writing.\n \t */\n\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "6146f0d5e47ca4047ffded0fb79b6c25359b386c", "tree": "edd792e52ad56d4a5d3ac6caa8437d3283fc157e", "parents": [ "659aaf2bb5496a425ba14036b5b5900f593e4484" ], "author": { "name": "Mimi Zohar", "email": "zohar@linux.vnet.ibm.com", "time": "Wed Feb 04 09:06:57 2009 -0500" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri Feb 06 09:05:30 2009 +1100" }, "message": "integrity: IMA hooks\n\nThis patch replaces the generic integrity hooks, for which IMA registered\nitself, with IMA integrity hooks in the appropriate places directly\nin the fs directory.\n\nSigned-off-by: Mimi Zohar \u003czohar@us.ibm.com\u003e\nAcked-by: Serge Hallyn \u003cserue@us.ibm.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "77835492ed489c0b870f82f4c50687bd267acc0a", "tree": "d80903ce1b8dd30aa44ccfc756616ad4d6c74d63", "parents": [ "af37501c792107c2bde1524bdae38d9a247b841a", "1de9e8e70f5acc441550ca75433563d91b269bbe" ], "author": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Wed Jan 21 16:37:27 2009 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Wed Jan 21 16:37:27 2009 +0100" }, "message": "Merge commit \u0027v2.6.29-rc2\u0027 into perfcounters/core\n\nConflicts:\n\tinclude/linux/syscalls.h\n" }, { "commit": "1e7bfb2134dfec37ce04fb3a4ca89299e892d10c", "tree": "99c676262e696754dcbfb2d6f59499972cd0c38c", "parents": [ "c4ea37c26a691ad0b7e86aa5884aab27830e95c9" ], "author": { "name": "Heiko Carstens", "email": "heiko.carstens@de.ibm.com", "time": "Wed Jan 14 14:14:29 2009 +0100" }, "committer": { "name": "Heiko Carstens", "email": "heiko.carstens@de.ibm.com", "time": "Wed Jan 14 14:15:29 2009 +0100" }, "message": "[CVE-2009-0029] System call wrappers part 27\n\nSigned-off-by: Heiko Carstens \u003cheiko.carstens@de.ibm.com\u003e\n" }, { "commit": "506c10f26c481b7f8ef27c1c79290f68989b2e9e", "tree": "03de82e812f00957aa6276dac2fe51c3358e88d7", "parents": [ "e1df957670aef74ffd9a4ad93e6d2c90bf6b4845", "c59765042f53a79a7a65585042ff463b69cb248c" ], "author": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Sun Jan 11 02:42:53 2009 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Sun Jan 11 02:42:53 2009 +0100" }, "message": "Merge commit \u0027v2.6.29-rc1\u0027 into perfcounters/core\n\nConflicts:\n\tinclude/linux/kernel_stat.h\n" }, { "commit": "8cd3ac3aca3f2afe8570708066d64d893da468e8", "tree": "ff8d828f3da57880e5d679f32485b5d77d5d3679", "parents": [ "4cb0e11b15d2badad455fcd538af0cccf05dc012" ], "author": { "name": "WANG Cong", "email": "wangcong@zeuux.org", "time": "Tue Jan 06 14:42:48 2009 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Jan 06 15:59:29 2009 -0800" }, "message": "fs/exec.c: make do_coredump() void\n\nNo one cares do_coredump()\u0027s return value, and also it seems that it\nis also not necessary. So make it void.\n\n[akpm@linux-foundation.org: coding-style fixes]\nSigned-off-by: WANG Cong \u003cwangcong@zeuux.org\u003e\nCc: Alexander Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "350eaf791bebccb9ad5999351f3e328319545f03", "tree": "7a9b18b1c2ab34cf62ae5862fbf1cc629ed383fa", "parents": [ "26e5438e4b77f04a51870f9415ffed68004fac1d" ], "author": { "name": "Tetsuo Handa", "email": "penguin-kernel@i-love.sakura.ne.jp", "time": "Tue Jan 06 14:41:11 2009 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Jan 06 15:59:14 2009 -0800" }, "message": "do_coredump(): check return from argv_split()\n\ndo_coredump() accesses helper_argv[0] without checking helper_argv !\u003d\nNULL. This can happen if page allocation failed.\n\nSigned-off-by: Tetsuo Handa \u003cpenguin-kernel@I-love.SAKURA.ne.jp\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "eaccbfa564e48c87626594511f42dc8c0ad2daae", "tree": "9a23430bf4f82d4f3d26c9314d0149b14d0fab70", "parents": [ "bca1033b092a6fab2ed00036e8a7f6e2df5d99a2" ], "author": { "name": "Luiz Fernando N. Capitulino", "email": "lcapitulino@mandriva.com.br", "time": "Tue Jan 06 14:40:44 2009 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Jan 06 15:59:11 2009 -0800" }, "message": "fs/exec.c:__bprm_mm_init(): clean up error handling\n\nUntangle the error unwinding in this function, saving a test of local\nvariable `vma\u0027.\n\nSigned-off-by: Luiz Fernando N. Capitulino \u003clcapitulino@mandriva.com.br\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6110e3abbff8b785907d4db50240e63c1be726e3", "tree": "79bc025df5f7e192c22df4044193abce8a5bb461", "parents": [ "56ff5efad96182f4d3cb3dc6b07396762c658f16" ], "author": { "name": "Eric Paris", "email": "eparis@redhat.com", "time": "Wed Dec 17 13:53:20 2008 -0500" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Jan 05 11:54:28 2009 -0500" }, "message": "sys_execve and sys_uselib do not call into fsnotify\n\nsys_execve and sys_uselib do not call into fsnotify so inotify does not get\nopen events for these types of syscalls. This patch simply makes the\nrequisite fsnotify calls.\n\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "3bfacef412b4bc993a8992217e50f1245f2fd3a6", "tree": "bcf92bc34b30383dfc542f9850f59858681556cb", "parents": [ "17580d7f2f632ff8c9786d609508c35c9f56e1f3" ], "author": { "name": "Al Viro", "email": "viro@ftp.linux.org.uk", "time": "Sat Jan 03 07:16:33 2009 +0000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 03 11:45:54 2009 -0800" }, "message": "get rid of special-casing the /sbin/loader on alpha\n\n... just make it a binfmt handler like #! one.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "cb23beb55100171646e69e248fb45f10db6e99a4", "tree": "a8868859b02f14dc27ef560de903088ca35b4ad4", "parents": [ "3fb64190aa3c23c10e6e9fd0124ac030115c99bf" ], "author": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Fri Oct 24 09:59:29 2008 +0200" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Dec 31 18:07:41 2008 -0500" }, "message": "kill vfs_permission\n\nWith all the nameidata removal there\u0027s no point anymore for this helper.\nOf the three callers left two will go away with the next lookup series\nanyway.\n\nAlso add proper kerneldoc to inode_permission as this is the main\npermission check routine now.\n\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "bb758e9637e5ddcff84a97177415499ae1fed498", "tree": "a4dbc2a0427a30fc9c54148c6ff7ecf21947e3ae", "parents": [ "5f34fe1cfc1bdd8b4711bbe37421fba4ed0d1ed4", "32e8d18683adb322c994d1a0fe02d66380991f45" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 30 16:16:21 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 30 16:16:21 2008 -0800" }, "message": "Merge branch \u0027timers-core-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip\n\n* \u0027timers-core-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip:\n hrtimers: fix warning in kernel/hrtimer.c\n x86: make sure we really have an hpet mapping before using it\n x86: enable HPET on Fujitsu u9200\n linux/timex.h: cleanup for userspace\n posix-timers: simplify de_thread()-\u003eexit_itimers() path\n posix-timers: check -\u003eit_signal instead of -\u003eit_pid to validate the timer\n posix-timers: use \"struct pid*\" instead of \"struct task_struct*\"\n nohz: suppress needless timer reprogramming\n clocksource, acpi_pm.c: put acpi_pm_read_slow() under CONFIG_PCI\n nohz: no softirq pending warnings for offline cpus\n hrtimer: removing all ur callback modes, fix\n hrtimer: removing all ur callback modes, fix hotplug\n hrtimer: removing all ur callback modes\n x86: correct link to HPET timer specification\n rtc-cmos: export second NVRAM bank\n\nFixed up conflicts in sound/drivers/pcsp/pcsp.c and sound/core/hrtimer.c\nmanually.\n" }, { "commit": "e1df957670aef74ffd9a4ad93e6d2c90bf6b4845", "tree": "bca1fcfef55b3e3e82c9a822b4ac6428fce2b419", "parents": [ "2b583d8bc8d7105b58d7481a4a0ceb718dac49c6", "3c92ec8ae91ecf59d88c798301833d7cf83f2179" ], "author": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Mon Dec 29 09:45:15 2008 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Mon Dec 29 09:45:15 2008 +0100" }, "message": "Merge branch \u0027linus\u0027 into perfcounters/core\n\nConflicts:\n\tfs/exec.c\n\tinclude/linux/init_task.h\n\nSimple context conflicts.\n" }, { "commit": "cbacc2c7f066a1e01b33b0e27ae5efbf534bc2db", "tree": "90d1093131d2a3543a8b3b1f3364e7c6f4081a93", "parents": [ "4a6908a3a050aacc9c3a2f36b276b46c0629ad91", "74192246910ff4fb95309ba1a683215644beeb62" ], "author": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Thu Dec 25 11:40:09 2008 +1100" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Thu Dec 25 11:40:09 2008 +1100" }, "message": "Merge branch \u0027next\u0027 into for-linus\n" }, { "commit": "f65cb45cba63f249458b669aa67069eabc37b2f5", "tree": "5ebb0ec9a74704e8059e23625179e5e55c4ce016", "parents": [ "0cc0c027d4e028632933f1be2dc4cd730358183b" ], "author": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Tue Dec 16 13:40:44 2008 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Tue Dec 16 14:00:15 2008 +0100" }, "message": "perfcounters: flush on setuid exec\n\nPavel Machek pointed out that performance counters should be flushed\nwhen crossing protection domains on setuid execution.\n\nReported-by: Pavel Machek \u003cpavel@suse.cz\u003e\nAcked-by: Pavel Machek \u003cpavel@suse.cz\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\n" }, { "commit": "8187926bdae98648db24db3391c4efd21ec669b1", "tree": "e3f35eee71cdaefcf6af15471a7aee3444e658d4", "parents": [ "899921025b406a71a8aeb2d7855658ea0cf0ed23" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Mon Dec 01 14:18:16 2008 -0800" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Fri Dec 12 17:01:03 2008 +0100" }, "message": "posix-timers: simplify de_thread()-\u003eexit_itimers() path\n\nImpact: simplify code\n\nde_thread() postpones release_task(leader) until after exit_itimers().\nThis was needed because !SIGEV_THREAD_ID timers could use -\u003egroup_leader\nwithout get_task_struct(). With the recent changes we can release the\nleader earlier and simplify the code.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\n" }, { "commit": "85f334666a771680472722eee43ae0fc8730a619", "tree": "0a0ec4eb701b86a0504827ce496f2bdcf541cb72", "parents": [ "437f2f91d6597c67662f847d9ed4c99cb3c440cd" ], "author": { "name": "Roland McGrath", "email": "roland@redhat.com", "time": "Tue Dec 09 19:36:38 2008 -0800" }, "committer": { "name": "Roland McGrath", "email": "roland@redhat.com", "time": "Tue Dec 09 19:36:38 2008 -0800" }, "message": "tracehook: exec double-reporting fix\n\nThe patch 6341c39 \"tracehook: exec\" introduced a small regression in\n2.6.27 regarding binfmt_misc exec event reporting. Since the reporting\nis now done in the common search_binary_handler() function, an exec\nof a misc binary will result in two (or possibly multiple) exec events\nbeing reported, instead of just a single one, because the misc handler\ncontains a recursive call to search_binary_handler.\n\nTo add to the confusion, if PTRACE_O_TRACEEXEC is not active, the multiple\nSIGTRAP signals will in fact cause only a single ptrace intercept, as the\nsignals are not queued. However, if PTRACE_O_TRACEEXEC is on, the debugger\nwill actually see multiple ptrace intercepts (PTRACE_EVENT_EXEC).\n\nThe test program included below demonstrates the problem.\n\nThis change fixes the bug by calling tracehook_report_exec() only in the\noutermost search_binary_handler() call (bprm-\u003erecursion_depth \u003d\u003d 0).\n\nThe additional change to restore bprm-\u003erecursion_depth after each binfmt\nload_binary call is actually superfluous for this bug, since we test the\nvalue saved on entry to search_binary_handler(). But it keeps the use of\nof the depth count to its most obvious expected meaning. Depending on what\nbinfmt handlers do in certain cases, there could have been false-positive\ntests for recursion limits before this change.\n\n /* Test program using PTRACE_O_TRACEEXEC.\n This forks and exec\u0027s the first argument with the rest of the arguments,\n while ptrace\u0027ing. It expects to see one PTRACE_EVENT_EXEC stop and\n then a successful exit, with no other signals or events in between.\n\n Test for kernel doing two PTRACE_EVENT_EXEC stops for a binfmt_misc exec:\n\n $ gcc -g traceexec.c -o traceexec\n $ sudo sh -c \u0027echo :test:M::foobar::/bin/cat: \u003e /proc/sys/fs/binfmt_misc/register\u0027\n $ echo \u0027foobar test\u0027 \u003e ./foobar\n $ chmod +x ./foobar\n $ ./traceexec ./foobar; echo $?\n \u003d\u003d\u003e good \u003c\u003d\u003d\n foobar test\n 0\n $\n \u003d\u003d\u003e bad \u003c\u003d\u003d\n foobar test\n unexpected status 0x4057f !\u003d 0\n 3\n $\n\n */\n\n #include \u003cstdio.h\u003e\n #include \u003csys/types.h\u003e\n #include \u003csys/wait.h\u003e\n #include \u003csys/ptrace.h\u003e\n #include \u003cunistd.h\u003e\n #include \u003csignal.h\u003e\n #include \u003cstdlib.h\u003e\n\n static void\n wait_for (pid_t child, int expect)\n {\n int status;\n pid_t p \u003d wait (\u0026status);\n if (p !\u003d child)\n\t{\n\t perror (\"wait\");\n\t exit (2);\n\t}\n if (status !\u003d expect)\n\t{\n\t fprintf (stderr, \"unexpected status %#x !\u003d %#x\\n\", status, expect);\n\t exit (3);\n\t}\n }\n\n int\n main (int argc, char **argv)\n {\n pid_t child \u003d fork ();\n\n if (child \u003c 0)\n\t{\n\t perror (\"fork\");\n\t return 127;\n\t}\n else if (child \u003d\u003d 0)\n\t{\n\t ptrace (PTRACE_TRACEME);\n\t raise (SIGUSR1);\n\t execv (argv[1], \u0026argv[1]);\n\t perror (\"execve\");\n\t _exit (127);\n\t}\n\n wait_for (child, W_STOPCODE (SIGUSR1));\n\n if (ptrace (PTRACE_SETOPTIONS, child,\n\t\t 0L, (void *) (long) PTRACE_O_TRACEEXEC) !\u003d 0)\n\t{\n\t perror (\"PTRACE_SETOPTIONS\");\n\t return 4;\n\t}\n\n if (ptrace (PTRACE_CONT, child, 0L, 0L) !\u003d 0)\n\t{\n\t perror (\"PTRACE_CONT\");\n\t return 5;\n\t}\n\n wait_for (child, W_STOPCODE (SIGTRAP | (PTRACE_EVENT_EXEC \u003c\u003c 8)));\n\n if (ptrace (PTRACE_CONT, child, 0L, 0L) !\u003d 0)\n\t{\n\t perror (\"PTRACE_CONT\");\n\t return 6;\n\t}\n\n wait_for (child, W_EXITCODE (0, 0));\n\n return 0;\n }\n\nReported-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nCC: Ulrich Weigand \u003culrich.weigand@de.ibm.com\u003e\nSigned-off-by: Roland McGrath \u003croland@redhat.com\u003e\n" }, { "commit": "a6f76f23d297f70e2a6b3ec607f7aeeea9e37e8d", "tree": "8f95617996d0974507f176163459212a7def8b9a", "parents": [ "d84f4f992cbd76e8f39c488cf0c5d123843923b1" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 14 10:39:24 2008 +1100" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri Nov 14 10:39:24 2008 +1100" }, "message": "CRED: Make execve() take advantage of copy-on-write credentials\n\nMake execve() take advantage of copy-on-write credentials, allowing it to set\nup the credentials in advance, and then commit the whole lot after the point\nof no return.\n\nThis patch and the preceding patches have been tested with the LTP SELinux\ntestsuite.\n\nThis patch makes several logical sets of alteration:\n\n (1) execve().\n\n The credential bits from struct linux_binprm are, for the most part,\n replaced with a single credentials pointer (bprm-\u003ecred). This means that\n all the creds can be calculated in advance and then applied at the point\n of no return with no possibility of failure.\n\n I would like to replace bprm-\u003ecap_effective with:\n\n\tcap_isclear(bprm-\u003ecap_effective)\n\n but this seems impossible due to special behaviour for processes of pid 1\n (they always retain their parent\u0027s capability masks where normally they\u0027d\n be changed - see cap_bprm_set_creds()).\n\n The following sequence of events now happens:\n\n (a) At the start of do_execve, the current task\u0027s cred_exec_mutex is\n \t locked to prevent PTRACE_ATTACH from obsoleting the calculation of\n \t creds that we make.\n\n (a) prepare_exec_creds() is then called to make a copy of the current\n \t task\u0027s credentials and prepare it. This copy is then assigned to\n \t bprm-\u003ecred.\n\n \t This renders security_bprm_alloc() and security_bprm_free()\n \t unnecessary, and so they\u0027ve been removed.\n\n (b) The determination of unsafe execution is now performed immediately\n \t after (a) rather than later on in the code. The result is stored in\n \t bprm-\u003eunsafe for future reference.\n\n (c) prepare_binprm() is called, possibly multiple times.\n\n \t (i) This applies the result of set[ug]id binaries to the new creds\n \t attached to bprm-\u003ecred. Personality bit clearance is recorded,\n \t but now deferred on the basis that the exec procedure may yet\n \t fail.\n\n (ii) This then calls the new security_bprm_set_creds(). This should\n\t calculate the new LSM and capability credentials into *bprm-\u003ecred.\n\n\t This folds together security_bprm_set() and parts of\n\t security_bprm_apply_creds() (these two have been removed).\n\t Anything that might fail must be done at this point.\n\n (iii) bprm-\u003ecred_prepared is set to 1.\n\n\t bprm-\u003ecred_prepared is 0 on the first pass of the security\n\t calculations, and 1 on all subsequent passes. This allows SELinux\n\t in (ii) to base its calculations only on the initial script and\n\t not on the interpreter.\n\n (d) flush_old_exec() is called to commit the task to execution. This\n \t performs the following steps with regard to credentials:\n\n\t (i) Clear pdeath_signal and set dumpable on certain circumstances that\n\t may not be covered by commit_creds().\n\n (ii) Clear any bits in current-\u003epersonality that were deferred from\n (c.i).\n\n (e) install_exec_creds() [compute_creds() as was] is called to install the\n \t new credentials. This performs the following steps with regard to\n \t credentials:\n\n (i) Calls security_bprm_committing_creds() to apply any security\n requirements, such as flushing unauthorised files in SELinux, that\n must be done before the credentials are changed.\n\n\t This is made up of bits of security_bprm_apply_creds() and\n\t security_bprm_post_apply_creds(), both of which have been removed.\n\t This function is not allowed to fail; anything that might fail\n\t must have been done in (c.ii).\n\n (ii) Calls commit_creds() to apply the new credentials in a single\n assignment (more or less). Possibly pdeath_signal and dumpable\n should be part of struct creds.\n\n\t (iii) Unlocks the task\u0027s cred_replace_mutex, thus allowing\n\t PTRACE_ATTACH to take place.\n\n (iv) Clears The bprm-\u003ecred pointer as the credentials it was holding\n are now immutable.\n\n (v) Calls security_bprm_committed_creds() to apply any security\n alterations that must be done after the creds have been changed.\n SELinux uses this to flush signals and signal handlers.\n\n (f) If an error occurs before (d.i), bprm_free() will call abort_creds()\n \t to destroy the proposed new credentials and will then unlock\n \t cred_replace_mutex. No changes to the credentials will have been\n \t made.\n\n (2) LSM interface.\n\n A number of functions have been changed, added or removed:\n\n (*) security_bprm_alloc(), -\u003ebprm_alloc_security()\n (*) security_bprm_free(), -\u003ebprm_free_security()\n\n \t Removed in favour of preparing new credentials and modifying those.\n\n (*) security_bprm_apply_creds(), -\u003ebprm_apply_creds()\n (*) security_bprm_post_apply_creds(), -\u003ebprm_post_apply_creds()\n\n \t Removed; split between security_bprm_set_creds(),\n \t security_bprm_committing_creds() and security_bprm_committed_creds().\n\n (*) security_bprm_set(), -\u003ebprm_set_security()\n\n \t Removed; folded into security_bprm_set_creds().\n\n (*) security_bprm_set_creds(), -\u003ebprm_set_creds()\n\n \t New. The new credentials in bprm-\u003ecreds should be checked and set up\n \t as appropriate. bprm-\u003ecred_prepared is 0 on the first call, 1 on the\n \t second and subsequent calls.\n\n (*) security_bprm_committing_creds(), -\u003ebprm_committing_creds()\n (*) security_bprm_committed_creds(), -\u003ebprm_committed_creds()\n\n \t New. Apply the security effects of the new credentials. This\n \t includes closing unauthorised files in SELinux. This function may not\n \t fail. When the former is called, the creds haven\u0027t yet been applied\n \t to the process; when the latter is called, they have.\n\n \t The former may access bprm-\u003ecred, the latter may not.\n\n (3) SELinux.\n\n SELinux has a number of changes, in addition to those to support the LSM\n interface changes mentioned above:\n\n (a) The bprm_security_struct struct has been removed in favour of using\n \t the credentials-under-construction approach.\n\n (c) flush_unauthorized_files() now takes a cred pointer and passes it on\n \t to inode_has_perm(), file_has_perm() and dentry_open().\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nAcked-by: Serge Hallyn \u003cserue@us.ibm.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "d84f4f992cbd76e8f39c488cf0c5d123843923b1", "tree": "fc4a0349c42995715b93d0f7a3c78e9ea9b3f36e", "parents": [ "745ca2475a6ac596e3d8d37c2759c0fbe2586227" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 14 10:39:23 2008 +1100" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri Nov 14 10:39:23 2008 +1100" }, "message": "CRED: Inaugurate COW credentials\n\nInaugurate copy-on-write credentials management. This uses RCU to manage the\ncredentials pointer in the task_struct with respect to accesses by other tasks.\nA process may only modify its own credentials, and so does not need locking to\naccess or modify its own credentials.\n\nA mutex (cred_replace_mutex) is added to the task_struct to control the effect\nof PTRACE_ATTACHED on credential calculations, particularly with respect to\nexecve().\n\nWith this patch, the contents of an active credentials struct may not be\nchanged directly; rather a new set of credentials must be prepared, modified\nand committed using something like the following sequence of events:\n\n\tstruct cred *new \u003d prepare_creds();\n\tint ret \u003d blah(new);\n\tif (ret \u003c 0) {\n\t\tabort_creds(new);\n\t\treturn ret;\n\t}\n\treturn commit_creds(new);\n\nThere are some exceptions to this rule: the keyrings pointed to by the active\ncredentials may be instantiated - keyrings violate the COW rule as managing\nCOW keyrings is tricky, given that it is possible for a task to directly alter\nthe keys in a keyring in use by another task.\n\nTo help enforce this, various pointers to sets of credentials, such as those in\nthe task_struct, are declared const. The purpose of this is compile-time\ndiscouragement of altering credentials through those pointers. Once a set of\ncredentials has been made public through one of these pointers, it may not be\nmodified, except under special circumstances:\n\n (1) Its reference count may incremented and decremented.\n\n (2) The keyrings to which it points may be modified, but not replaced.\n\nThe only safe way to modify anything else is to create a replacement and commit\nusing the functions described in Documentation/credentials.txt (which will be\nadded by a later patch).\n\nThis patch and the preceding patches have been tested with the LTP SELinux\ntestsuite.\n\nThis patch makes several logical sets of alteration:\n\n (1) execve().\n\n This now prepares and commits credentials in various places in the\n security code rather than altering the current creds directly.\n\n (2) Temporary credential overrides.\n\n do_coredump() and sys_faccessat() now prepare their own credentials and\n temporarily override the ones currently on the acting thread, whilst\n preventing interference from other threads by holding cred_replace_mutex\n on the thread being dumped.\n\n This will be replaced in a future patch by something that hands down the\n credentials directly to the functions being called, rather than altering\n the task\u0027s objective credentials.\n\n (3) LSM interface.\n\n A number of functions have been changed, added or removed:\n\n (*) security_capset_check(), -\u003ecapset_check()\n (*) security_capset_set(), -\u003ecapset_set()\n\n \t Removed in favour of security_capset().\n\n (*) security_capset(), -\u003ecapset()\n\n \t New. This is passed a pointer to the new creds, a pointer to the old\n \t creds and the proposed capability sets. It should fill in the new\n \t creds or return an error. All pointers, barring the pointer to the\n \t new creds, are now const.\n\n (*) security_bprm_apply_creds(), -\u003ebprm_apply_creds()\n\n \t Changed; now returns a value, which will cause the process to be\n \t killed if it\u0027s an error.\n\n (*) security_task_alloc(), -\u003etask_alloc_security()\n\n \t Removed in favour of security_prepare_creds().\n\n (*) security_cred_free(), -\u003ecred_free()\n\n \t New. Free security data attached to cred-\u003esecurity.\n\n (*) security_prepare_creds(), -\u003ecred_prepare()\n\n \t New. Duplicate any security data attached to cred-\u003esecurity.\n\n (*) security_commit_creds(), -\u003ecred_commit()\n\n \t New. Apply any security effects for the upcoming installation of new\n \t security by commit_creds().\n\n (*) security_task_post_setuid(), -\u003etask_post_setuid()\n\n \t Removed in favour of security_task_fix_setuid().\n\n (*) security_task_fix_setuid(), -\u003etask_fix_setuid()\n\n \t Fix up the proposed new credentials for setuid(). This is used by\n \t cap_set_fix_setuid() to implicitly adjust capabilities in line with\n \t setuid() changes. Changes are made to the new credentials, rather\n \t than the task itself as in security_task_post_setuid().\n\n (*) security_task_reparent_to_init(), -\u003etask_reparent_to_init()\n\n \t Removed. Instead the task being reparented to init is referred\n \t directly to init\u0027s credentials.\n\n\t NOTE! This results in the loss of some state: SELinux\u0027s osid no\n\t longer records the sid of the thread that forked it.\n\n (*) security_key_alloc(), -\u003ekey_alloc()\n (*) security_key_permission(), -\u003ekey_permission()\n\n \t Changed. These now take cred pointers rather than task pointers to\n \t refer to the security context.\n\n (4) sys_capset().\n\n This has been simplified and uses less locking. The LSM functions it\n calls have been merged.\n\n (5) reparent_to_kthreadd().\n\n This gives the current thread the same credentials as init by simply using\n commit_thread() to point that way.\n\n (6) __sigqueue_alloc() and switch_uid()\n\n __sigqueue_alloc() can\u0027t stop the target task from changing its creds\n beneath it, so this function gets a reference to the currently applicable\n user_struct which it then passes into the sigqueue struct it returns if\n successful.\n\n switch_uid() is now called from commit_creds(), and possibly should be\n folded into that. commit_creds() should take care of protecting\n __sigqueue_alloc().\n\n (7) [sg]et[ug]id() and co and [sg]et_current_groups.\n\n The set functions now all use prepare_creds(), commit_creds() and\n abort_creds() to build and check a new set of credentials before applying\n it.\n\n security_task_set[ug]id() is called inside the prepared section. This\n guarantees that nothing else will affect the creds until we\u0027ve finished.\n\n The calling of set_dumpable() has been moved into commit_creds().\n\n Much of the functionality of set_user() has been moved into\n commit_creds().\n\n The get functions all simply access the data directly.\n\n (8) security_task_prctl() and cap_task_prctl().\n\n security_task_prctl() has been modified to return -ENOSYS if it doesn\u0027t\n want to handle a function, or otherwise return the return value directly\n rather than through an argument.\n\n Additionally, cap_task_prctl() now prepares a new set of credentials, even\n if it doesn\u0027t end up using it.\n\n (9) Keyrings.\n\n A number of changes have been made to the keyrings code:\n\n (a) switch_uid_keyring(), copy_keys(), exit_keys() and suid_keys() have\n \t all been dropped and built in to the credentials functions directly.\n \t They may want separating out again later.\n\n (b) key_alloc() and search_process_keyrings() now take a cred pointer\n \t rather than a task pointer to specify the security context.\n\n (c) copy_creds() gives a new thread within the same thread group a new\n \t thread keyring if its parent had one, otherwise it discards the thread\n \t keyring.\n\n (d) The authorisation key now points directly to the credentials to extend\n \t the search into rather pointing to the task that carries them.\n\n (e) Installing thread, process or session keyrings causes a new set of\n \t credentials to be created, even though it\u0027s not strictly necessary for\n \t process or session keyrings (they\u0027re shared).\n\n(10) Usermode helper.\n\n The usermode helper code now carries a cred struct pointer in its\n subprocess_info struct instead of a new session keyring pointer. This set\n of credentials is derived from init_cred and installed on the new process\n after it has been cloned.\n\n call_usermodehelper_setup() allocates the new credentials and\n call_usermodehelper_freeinfo() discards them if they haven\u0027t been used. A\n special cred function (prepare_usermodeinfo_creds()) is provided\n specifically for call_usermodehelper_setup() to call.\n\n call_usermodehelper_setkeys() adjusts the credentials to sport the\n supplied keyring as the new session keyring.\n\n(11) SELinux.\n\n SELinux has a number of changes, in addition to those to support the LSM\n interface changes mentioned above:\n\n (a) selinux_setprocattr() no longer does its check for whether the\n \t current ptracer can access processes with the new SID inside the lock\n \t that covers getting the ptracer\u0027s SID. Whilst this lock ensures that\n \t the check is done with the ptracer pinned, the result is only valid\n \t until the lock is released, so there\u0027s no point doing it inside the\n \t lock.\n\n(12) is_single_threaded().\n\n This function has been extracted from selinux_setprocattr() and put into\n a file of its own in the lib/ directory as join_session_keyring() now\n wants to use it too.\n\n The code in SELinux just checked to see whether a task shared mm_structs\n with other tasks (CLONE_VM), but that isn\u0027t good enough. We really want\n to know if they\u0027re part of the same thread group (CLONE_THREAD).\n\n(13) nfsd.\n\n The NFS server daemon now has to use the COW credentials to set the\n credentials it is going to use. It really needs to pass the credentials\n down to the functions it calls, but it can\u0027t do that until other patches\n in this series have been applied.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "86a264abe542cfececb4df129bc45a0338d8cdb9", "tree": "30152f04ba847f311028d5ca697f864c16c7ebb3", "parents": [ "f1752eec6145c97163dbce62d17cf5d928e28a27" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 14 10:39:18 2008 +1100" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri Nov 14 10:39:18 2008 +1100" }, "message": "CRED: Wrap current-\u003ecred and a few other accessors\n\nWrap current-\u003ecred and a few other accessors to hide their actual\nimplementation.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nAcked-by: Serge Hallyn \u003cserue@us.ibm.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "b6dff3ec5e116e3af6f537d4caedcad6b9e5082a", "tree": "9e76f972eb7ce9b84e0146c8e4126a3f86acb428", "parents": [ "15a2460ed0af7538ca8e6c610fe607a2cd9da142" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 14 10:39:16 2008 +1100" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri Nov 14 10:39:16 2008 +1100" }, "message": "CRED: Separate task security context from task_struct\n\nSeparate the task security context from task_struct. At this point, the\nsecurity data is temporarily embedded in the task_struct with two pointers\npointing to it.\n\nNote that the Alpha arch is altered as it refers to (E)UID and (E)GID in\nentry.S via asm-offsets.\n\nWith comment fixes Signed-off-by: Marc Dionne \u003cmarc.c.dionne@gmail.com\u003e\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nAcked-by: Serge Hallyn \u003cserue@us.ibm.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "da9592edebceeba1b9301beafe80ec8b9c2db0ce", "tree": "00c110cd8ff6d211d76ab4868b6175096a38aad5", "parents": [ "82ab8deda7fef36f067ccdeacc3b3caefc970f89" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 14 10:39:05 2008 +1100" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Fri Nov 14 10:39:05 2008 +1100" }, "message": "CRED: Wrap task credential accesses in the filesystem subsystem\n\nWrap access to task credentials so that they can be separated more easily from\nthe task_struct during the introduction of COW creds.\n\nChange most current-\u003e(|e|s|fs)[ug]id to current_(|e|s|fs)[ug]id().\n\nChange some task-\u003ee?[ug]id to task_e?[ug]id(). In some places it makes more\nsense to use RCU directly rather than a convenient wrapper; these will be\naddressed by later patches.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nReviewed-by: James Morris \u003cjmorris@namei.org\u003e\nAcked-by: Serge Hallyn \u003cserue@us.ibm.com\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "6409324b385f3f63a03645b4422e3be67348d922", "tree": "97e44f11995236086c7ee712640b2913c94b7000", "parents": [ "b747c8c102cc0677a7a8056a093f58d7c9b500e7" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Sat Oct 18 20:28:22 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Oct 20 08:52:39 2008 -0700" }, "message": "coredump: format_corename: don\u0027t append .%pid if multi-threaded\n\nIf the coredumping is multi-threaded, format_corename() appends .%pid to\nthe corename. This was needed before the proper multi-thread core dump\nsupport, now all the threads in the mm go into a single unified core file.\n\nRemove this special case, it is not even documented and we have \"%p\"\nand core_uses_pid.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Michael Kerrisk \u003cmtk.manpages@googlemail.com\u003e\nCc: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Alan Cox \u003calan@lxorguk.ukuu.org.uk\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nCc: Andi Kleen \u003candi@firstfloor.org\u003e\nCc: La Monte Yarroll \u003cpiggy@laurelnetworks.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c8d8a2321f9c4ee18fbcc399fdc2a77e580a03b9", "tree": "edfd028285e21ba549d047c0caa4ffe523272f94", "parents": [ "e4856a70cfc23266631a78e78277cf2b195babee", "118a9069f06ff591d51a3133e242f0c256ba2db7" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 16 12:38:34 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 16 12:38:34 2008 -0700" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux-2.6-for-linus\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux-2.6-for-linus:\n module: remove CONFIG_KMOD in comment after #endif\n remove CONFIG_KMOD from fs\n remove CONFIG_KMOD from drivers\n\nManually fix conflict due to include cleanups in drivers/md/md.c\n" }, { "commit": "07edbde508869be63c38c5f2504bd8e8279cc535", "tree": "696b78b5eae2716f07261f6c037ec770332e10f4", "parents": [ "f221e726bf4e082a05dcd573379ac859bfba7126" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Wed Oct 15 22:04:25 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 16 11:21:47 2008 -0700" }, "message": "pid_ns: de_thread: kill the now unneeded -\u003echild_reaper change\n\nde_thread() checks if the old leader was the -\u003echild_reaper, this is not\npossible any longer. With the previous patch -\u003egroup_leader itself will\nchange -\u003echild_reaper on exit.\n\nHenceforth find_new_reaper() is the only function (apart from\ninitialization) which plays with -\u003echild_reaper.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nAcked-by: Serge Hallyn \u003cserue@us.ibm.com\u003e\nAcked-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nAcked-by: Sukadev Bhattiprolu \u003csukadev@linux.vnet.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "53112488bebe25c0f5f8a002470046c0fe9a6c61", "tree": "6f685c176c7802e356d729984648d759f0ae0ba4", "parents": [ "cde162c2a963dba6d1b6921b58917ef8f27f4150" ], "author": { "name": "Kirill A. Shutemov", "email": "kirill@shutemov.name", "time": "Wed Oct 15 22:02:37 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 16 11:21:38 2008 -0700" }, "message": "alpha: introduce field \u0027taso\u0027 into struct linux_binprm\n\nThis change is Alpha-specific. It adds field \u0027taso\u0027 into struct\nlinux_binprm to remember if the application is TASO. Previously, field\nsh_bang was used for this purpose.\n\nSigned-off-by: Kirill A. Shutemov \u003ckirill@shutemov.name\u003e\nCc: Richard Henderson \u003crth@twiddle.net\u003e\nCc: Ivan Kokshaysky \u003cink@jurassic.park.msu.ru\u003e\nCc: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nCc: Alexander Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "362e6663ef2369d77251496d865ad02a2376f962", "tree": "48155cf15d85a303623a3f672f719652b0585178", "parents": [ "9679e4dd628743b9ef4375d60ae69923c3766173" ], "author": { "name": "Jason Baron", "email": "jbaron@redhat.com", "time": "Wed Oct 15 22:01:52 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 16 11:21:32 2008 -0700" }, "message": "exec.c, compat.c: fix count(), compat_count() bounds checking\n\nWith MAX_ARG_STRINGS set to 0x7FFFFFFF, and being passed to \u0027count()\u0027 and\ncompat_count(), it would appear that the current max bounds check of\nfs/exec.c:394:\n\n\tif(++i \u003e max)\n\t\treturn -E2BIG;\n\nwould never trigger. Since \u0027i\u0027 is of type int, so values would wrap and the\nfunction would continue looping.\n\nSimple fix seems to be chaning ++i to i++ and checking for \u0027\u003e\u003d\u0027.\n\nSigned-off-by: Jason Baron \u003cjbaron@redhat.com\u003e\nAcked-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nCc: \"Ollie Wild\" \u003caaw@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "5f4123be3cdb1dbd77fa9d6d2bb96bb9689a0a19", "tree": "e636c2ae7d5a5459f4f4625d44754737f45a984f", "parents": [ "a65e5d782f9db2a61a914dc01a329e0c2dcf92a1" ], "author": { "name": "Johannes Berg", "email": "johannes@sipsolutions.net", "time": "Wed Jul 09 10:28:40 2008 +0200" }, "committer": { "name": "Rusty Russell", "email": "rusty@rustcorp.com.au", "time": "Fri Oct 17 02:38:36 2008 +1100" }, "message": "remove CONFIG_KMOD from fs\n\nJust always compile the code when the kernel is modular.\nConvert load_nls to use try_then_request_module to tidy\nup the code.\n\nSigned-off-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: Rusty Russell \u003crusty@rustcorp.com.au\u003e\n" }, { "commit": "31a78f23bac0069004e69f98808b6988baccb6b6", "tree": "edca8cffb4682de6be2e79b0b8d381dbb1b70964", "parents": [ "bf5cb66447e7d9f7f111c1d0ebb6d7c90ec24b4d" ], "author": { "name": "Balbir Singh", "email": "balbir@linux.vnet.ibm.com", "time": "Sun Sep 28 23:09:31 2008 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 29 08:41:47 2008 -0700" }, "message": "mm owner: fix race between swapoff and exit\n\nThere\u0027s a race between mm-\u003eowner assignment and swapoff, more easily\nseen when task slab poisoning is turned on. The condition occurs when\ntry_to_unuse() runs in parallel with an exiting task. A similar race\ncan occur with callers of get_task_mm(), such as /proc/\u003cpid\u003e/\u003cmmstats\u003e\nor ptrace or page migration.\n\nCPU0 CPU1\n try_to_unuse\n looks at mm \u003d task0-\u003emm\n increments mm-\u003emm_users\ntask 0 exits\nmm-\u003eowner needs to be updated, but no\nnew owner is found (mm_users \u003e 1, but\nno other task has task-\u003emm \u003d task0-\u003emm)\nmm_update_next_owner() leaves\n mmput(mm) decrements mm-\u003emm_users\ntask0 freed\n dereferencing mm-\u003eowner fails\n\nThe fix is to notify the subsystem via mm_owner_changed callback(),\nif no new owner is found, by specifying the new task as NULL.\n\nJiri Slaby:\nmm-\u003eowner was set to NULL prior to calling cgroup_mm_owner_callbacks(), but\nmust be set after that, so as not to pass NULL as old owner causing oops.\n\nDaisuke Nishimura:\nmm_update_next_owner() may set mm-\u003eowner to NULL, but mem_cgroup_from_task()\nand its callers need to take account of this situation to avoid oops.\n\nHugh Dickins:\nLockdep warning and hang below exec_mmap() when testing these patches.\nexit_mm() up_reads mmap_sem before calling mm_update_next_owner(),\nso exec_mmap() now needs to do the same. And with that repositioning,\nthere\u0027s now no point in mm_need_new_owner() allowing for NULL mm.\n\nReported-by: Hugh Dickins \u003chugh@veritas.com\u003e\nSigned-off-by: Balbir Singh \u003cbalbir@linux.vnet.ibm.com\u003e\nSigned-off-by: Jiri Slaby \u003cjirislaby@gmail.com\u003e\nSigned-off-by: Daisuke Nishimura \u003cnishimura@mxp.nes.nec.co.jp\u003e\nSigned-off-by: Hugh Dickins \u003chugh@veritas.com\u003e\nCc: KAMEZAWA Hiroyuki \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nCc: Paul Menage \u003cmenage@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ca5b172bd2b2fe489e7ba11cedd46ddf772d132f", "tree": "8b006a799624fdcc923ba85f1fcce856eb5615d6", "parents": [ "63add2f2072e69c1eb7a5f6ca8f415122da889b9" ], "author": { "name": "Hugh Dickins", "email": "hugh@veritas.com", "time": "Mon Jul 28 15:46:18 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Jul 28 16:30:20 2008 -0700" }, "message": "exec: include pagemap.h again to fix build\n\nFix compilation errors on avr32 and without CONFIG_SWAP, introduced by\nba92a43dbaee339cf5915ef766d3d3ffbaaf103c (\"exec: remove some includes\")\n\n In file included from include/asm/tlb.h:24,\n from fs/exec.c:55:\n include/asm-generic/tlb.h: In function \u0027tlb_flush_mmu\u0027:\n include/asm-generic/tlb.h:76: error: implicit declaration of function \u0027release_pages\u0027\n include/asm-generic/tlb.h: In function \u0027tlb_remove_page\u0027:\n include/asm-generic/tlb.h:105: error: implicit declaration of function \u0027page_cache_release\u0027\n make[1]: *** [fs/exec.o] Error 1\n\nThis straightforward part-revert is nobody\u0027s favourite patch to address\nthe underlying tlb.h needs swap.h needs pagemap.h (but sparc won\u0027t like\nthat) mess; but appropriate to fix the build now before any overhaul.\n\nReported-by: Yoichi Yuasa \u003cyoichi_yuasa@tripeaks.co.jp\u003e\nReported-by: Haavard Skinnemoen \u003chaavard.skinnemoen@atmel.com\u003e\nSigned-off-by: Hugh Dickins \u003chugh@veritas.com\u003e\nTested-by: Adrian Bunk \u003cbunk@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "964bd183624c03680796b63b4ab97ee3905a806a", "tree": "801fa25ccd01a7c7bf8ee793ba910edc8ce3f55a", "parents": [ "516e0cc5646f377ab80fcc2ee639892eccb99853" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat Jul 26 03:33:14 2008 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat Jul 26 20:53:41 2008 -0400" }, "message": "[PATCH] get rid of __user_path_lookup_open\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "30524472c2f728c20d6bf35191042a5d455c0a64", "tree": "e9985d3883b45c4a9f5ef8185fa79c7b568bb4bd", "parents": [ "e56b6a5dda1a36ffaa532df6f975ea324298fa4d" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Jul 22 00:02:33 2008 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat Jul 26 20:53:30 2008 -0400" }, "message": "[PATCH] take noexec checks to very few callers that care\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "e56b6a5dda1a36ffaa532df6f975ea324298fa4d", "tree": "700077a8ea298076d1a90e581ea577f4ad27d2dd", "parents": [ "beb29e058c35ab69e96e455a12ccf7505f6de425" ], "author": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Mon May 19 07:53:34 2008 +0200" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat Jul 26 20:53:29 2008 -0400" }, "message": "Re: [PATCH 3/6] vfs: open_exec cleanup\n\nOn Mon, May 19, 2008 at 12:01:49AM +0200, Marcin Slusarz wrote:\n\u003e open_exec is needlessly indented, calls ERR_PTR with 0 argument\n\u003e (which is not valid errno) and jumps into middle of function\n\u003e just to return value.\n\u003e So clean it up a bit.\n\nStill looks rather messy. See below for a better version.\n\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "b77b0646ef4efe31a7449bb3d9360fd00f95433d", "tree": "f8487fe832fbe23400c9f98e808555f0251fb158", "parents": [ "a110343f0d6d41f68b7cf8c00b57a3172c67f816" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Thu Jul 17 09:37:02 2008 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat Jul 26 20:53:22 2008 -0400" }, "message": "[PATCH] pass MAY_OPEN to vfs_permission() explicitly\n\n... and get rid of the last \"let\u0027s deduce mask from nameidata-\u003eflags\"\nbit.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "6341c393fcc37d58727865f1ee2f65e632e9d4f0", "tree": "6e88d928e17f663b225884e81877a7a069d7c514", "parents": [ "88ac2921a71f788ed693bcd44731dd6bc1994640" ], "author": { "name": "Roland McGrath", "email": "roland@redhat.com", "time": "Fri Jul 25 19:45:44 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 26 12:00:08 2008 -0700" }, "message": "tracehook: exec\n\nThis moves all the ptrace hooks related to exec into tracehook.h inlines.\n\nThis also lifts the calls for tracing out of the binfmt load_binary hooks\ninto search_binary_handler() after it calls into the binfmt module. This\nchange has no effect, since all the binfmt modules\u0027 load_binary functions\ndid the call at the end on success, and now search_binary_handler() does\nit immediately after return if successful. We consolidate the repeated\ncode, and binfmt modules no longer need to import ptrace_notify().\n\nSigned-off-by: Roland McGrath \u003croland@redhat.com\u003e\nCc: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nReviewed-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "565b9b14e7f48131bca58840aa404bbef058fa89", "tree": "7925875b10dae248a9fa887c6881c544f59c6173", "parents": [ "a94e2d408eaedbd85aae259621d46fafc10479a2" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:47 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:40 2008 -0700" }, "message": "coredump: format_corename: fix the \"core_uses_pid\" logic\n\nI don\u0027t understand why the multi-thread coredump implies the core_uses_pid\nbehaviour, but we shouldn\u0027t use mm-\u003emm_users for that. This counter can\nbe incremented by get_task_mm(). Use the valued returned by\ncoredump_wait() instead.\n\nAlso, remove the \"const char *pattern\" argument, format_corename() can use\ncore_pattern directly.\n\n[akpm@linux-foundation.org: coding-style fixes]\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nCc: Alan Cox \u003calan@lxorguk.ukuu.org.uk\u003e\nCc: Andi Kleen \u003candi@firstfloor.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "a94e2d408eaedbd85aae259621d46fafc10479a2", "tree": "d853f7b2e183875c6ad90fb6ab38e084b037d043", "parents": [ "182c515fd2a942623aed4e4e0e0b37fe96571b05" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:46 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:40 2008 -0700" }, "message": "coredump: kill mm-\u003ecore_done\n\nNow that we have core_state-\u003edumper list we can use it to wake up the\nsub-threads waiting for the coredump completion.\n\nThis uglifies the code and .text grows by 47 bytes, but otoh mm_struct\nlessens by sizeof(struct completion). Also, with this change we can\ndecouple exit_mm() from the coredumping code.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "b564daf806d492dd4f7afe9b6c83b8d35d137669", "tree": "fbd6d186035b9a0a270fca97887da5d6b106a60c", "parents": [ "9d5b327bf198d2720666de958dcc2ae219d86952" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:44 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:40 2008 -0700" }, "message": "coredump: construct the list of coredumping threads at startup time\n\nbinfmt-\u003ecore_dump() has to iterate over the all threads in system in order\nto find the coredumping threads and construct the list using the\nGFP_ATOMIC allocations.\n\nWith this patch each thread allocates the list node on exit_mm()\u0027s stack and\nadds itself to the list.\n\nThis allows us to do further changes:\n\n\t- simplify -\u003ecore_dump()\n\n\t- change exit_mm() to clear -\u003emm first, then wait for -\u003ecore_done.\n\t this makes the coredumping process visible to oom_kill\n\n\t- kill mm-\u003ecore_done\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nAcked-by: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "9d5b327bf198d2720666de958dcc2ae219d86952", "tree": "2eba6fe178581c2291393a061ff42d09da95386b", "parents": [ "c5f1cc8c1828486a61ab3e575da6e2c62b34d399" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:43 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:40 2008 -0700" }, "message": "coredump: make mm-\u003ecore_state visible to -\u003ecore_dump()\n\nMove the \"struct core_state core_state\" from coredump_wait() to\ndo_coredump(), this makes mm-\u003ecore_state visible to binfmt-\u003ecore_dump().\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nAcked-by: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c5f1cc8c1828486a61ab3e575da6e2c62b34d399", "tree": "9cc88e7d1dae063482e1e9117ded747578cbd7ad", "parents": [ "8cd9c249128a59e8e833d454a784b0cbd338d468" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:42 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:39 2008 -0700" }, "message": "coredump: turn core_state-\u003enr_threads into atomic_t\n\nTurn core_state-\u003enr_threads into atomic_t and kill now unneeded\ndown_write(\u0026mm-\u003emmap_sem) in exit_mm().\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "8cd9c249128a59e8e833d454a784b0cbd338d468", "tree": "54adf775bdd63fd55fc52b5ac70130a17058d866", "parents": [ "999d9fc1670bc082928b93b11d1f2e0e417d973c" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:42 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:39 2008 -0700" }, "message": "coredump: simplify core_state-\u003enr_threads calculation\n\nChange zap_process() to return int instead of incrementing\nmm-\u003ecore_state-\u003enr_threads directly. Change zap_threads() to set\nmm-\u003ecore_state only on success.\n\nThis patch restores the original size of .text, and more importantly now\n-\u003enr_threads is used in two places only.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "999d9fc1670bc082928b93b11d1f2e0e417d973c", "tree": "e540e7fd2fab970ba2be5e39ac9f8282a373bc24", "parents": [ "32ecb1f26dd50eeaac4e3f4dea4541c97848e459" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:41 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:39 2008 -0700" }, "message": "coredump: move mm-\u003ecore_waiters into struct core_state\n\nMove mm-\u003ecore_waiters into \"struct core_state\" allocated on stack. This\nshrinks mm_struct a little bit and allows further changes.\n\nThis patch mostly does s/core_waiters/core_state. The only essential\nchange is that coredump_wait() must clear mm-\u003ecore_state before return.\n\nThe coredump_wait()\u0027s path is uglified and .text grows by 30 bytes, this\nis fixed by the next patch.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "32ecb1f26dd50eeaac4e3f4dea4541c97848e459", "tree": "4c2f3b6af9ff6babf2f395432de8e870508f2ec3", "parents": [ "24d5288f06ed8b3a368eba967d587cdb012dfdf7" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:41 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:39 2008 -0700" }, "message": "coredump: turn mm-\u003ecore_startup_done into the pointer to struct core_state\n\nmm-\u003ecore_startup_done points to \"struct completion startup_done\" allocated\non the coredump_wait()\u0027s stack. Introduce the new structure, core_state,\nwhich holds this \"struct completion\". This way we can add more info\nvisible to the threads participating in coredump without enlarging\nmm_struct.\n\nNo changes in affected .o files.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "15b9f360c0316c06d37c09b02d85565edbaf9dd3", "tree": "5e874b98b6f16ca1f376f5e4bd480da7ae5143b6", "parents": [ "246bb0b1deb29726990620d8b5e55ca29f331362" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:39 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:39 2008 -0700" }, "message": "coredump: zap_threads() must skip kernel threads\n\nThe main loop in zap_threads() must skip kthreads which may use the same\nmm. Otherwise we \"kill\" this thread erroneously (for example, it can not\nfork or exec after that), and the coredumping task stucks in the\nTASK_UNINTERRUPTIBLE state forever because of the wrong -\u003ecore_waiters\ncount.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7b34e4283c685f5cc6ba6d30e939906eee0d4bcf", "tree": "6822edd5c63db79e97b8c5379a18a058bc5405ff", "parents": [ "3d749b9e676b26584a47e75c235aa6f69d0697ae" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:37 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:39 2008 -0700" }, "message": "introduce PF_KTHREAD flag\n\nIntroduce the new PF_KTHREAD flag to mark the kernel threads. It is set\nby INIT_TASK() and copied to the forked childs (we could set it in\nkthreadd() along with PF_NOFREEZE instead).\n\ndaemonize() was changed as well. In that case testing of PF_KTHREAD is\nracy, but daemonize() is hopeless anyway.\n\nThis flag is cleared in do_execve(), before search_binary_handler().\nProbably not the best place, we can do this in exec_mmap() or in\nstart_thread(), or clear it along with PF_FORKNOEXEC. But I think this\ndoesn\u0027t matter in practice, and if do_execve() fails kthread should die\nsoon.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "e4901f92a8dbe843e76651a50f7a2a6dd3d53474", "tree": "4cfd5edd17fcf1fe5e4372611c561928a99107d0", "parents": [ "2b201a9eddf509e8e935b45e573648e36f4b623f" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Jul 25 01:47:31 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:38 2008 -0700" }, "message": "coredump: zap_threads: comments \u0026\u0026 use while_each_thread()\n\nNo changes in fs/exec.o\n\nThe for_each_process() loop in zap_threads() is very subtle, it is not\nclear why we don\u0027t race with fork/exit/exec. Add the fat comment.\n\nAlso, change the code to use while_each_thread().\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nAcked-by: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ba92a43dbaee339cf5915ef766d3d3ffbaaf103c", "tree": "eacaba8fedc91caec87fc5d10f213ad533c1d1e1", "parents": [ "2b4bc46052ea8cd7c370b67ca0b9c26586f1439a" ], "author": { "name": "Hugh Dickins", "email": "hugh@veritas.com", "time": "Fri Jul 25 01:45:43 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:28 2008 -0700" }, "message": "exec: remove some includes\n\nfs/exec.c used to need mman.h pagemap.h swap.h and rmap.h when it did\nmm-ish stuff in install_arg_page(); but no need for them after 2.6.22.\n\n[akpm@linux-foundation.org: unbreak arm]\nSigned-off-by: Hugh Dickins \u003chugh@veritas.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "42b7772812d15b86543a23b82bd6070eef9a08b1", "tree": "10665ee01fe82ce17c68a6278d044531b1ed64c0", "parents": [ "a352894d07059649398c4769dc8b645e1a1dad88" ], "author": { "name": "Jan Beulich", "email": "jbeulich@novell.com", "time": "Wed Jul 23 21:27:10 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 24 10:47:15 2008 -0700" }, "message": "mm: remove double indirection on tlb parameter to free_pgd_range() \u0026 Co\n\nThe double indirection here is not needed anywhere and hence (at least)\nconfusing.\n\nSigned-off-by: Jan Beulich \u003cjbeulich@novell.com\u003e\nCc: Hugh Dickins \u003chugh@veritas.com\u003e\nCc: Nick Piggin \u003cnpiggin@suse.de\u003e\nCc: Christoph Lameter \u003ccl@linux-foundation.org\u003e\nCc: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nCc: Paul Mackerras \u003cpaulus@samba.org\u003e\nCc: \"Luck, Tony\" \u003ctony.luck@intel.com\u003e\nCc: Paul Mundt \u003clethal@linux-sh.org\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nAcked-by: Jeremy Fitzhardinge \u003cjeremy@goop.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "96a8e13ed44e380fc2bb6c711d74d5ba698c00b2", "tree": "62eb5b26a3cfe678f82f9d5c131b08114950f551", "parents": [ "f8804d39462dc019ae9d1a6e4d45512e9dfec2bf" ], "author": { "name": "Hugh Dickins", "email": "hugh@veritas.com", "time": "Thu Jul 10 21:19:20 2008 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 10 13:25:43 2008 -0700" }, "message": "exec: fix stack excutability without PT_GNU_STACK\n\nKernel Bugzilla #11063 points out that on some architectures (e.g. x86_32)\nexec\u0027ing an ELF without a PT_GNU_STACK program header should default to an\nexecutable stack; but this got broken by the unlimited argv feature because\nstack vma is now created before the right personality has been established:\nso breaking old binaries using nested function trampolines.\n\nTherefore re-evaluate VM_STACK_FLAGS in setup_arg_pages, where stack\nvm_flags used to be set, before the mprotect_fixup. Checking through\nour existing VM_flags, none would have changed since insert_vm_struct:\nso this seems safer than finding a way through the personality labyrinth.\n\nReported-by: pageexec@freemail.hu\nSigned-off-by: Hugh Dickins \u003chugh@veritas.com\u003e\nCc: stable@kernel.org\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "702773b16e83fcddc41e0019b8214d3c3cecedbe", "tree": "be9fa9552f6583249b61fee0373c11e1cfab1562", "parents": [ "b052beb0432616aa4dac2b167e7809feae993991" ], "author": { "name": "David Woodhouse", "email": "dwmw2@infradead.org", "time": "Mon Jun 16 12:11:54 2008 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Jun 16 10:20:57 2008 -0700" }, "message": "Include \u003casm/a.out.h\u003e in fs/exec.c only for Alpha.\n\nWe only need it for the /sbin/loader hack for OSF/1 executables, and we\ndon\u0027t want to include it otherwise.\n\nWhile we\u0027re at it, remove the redundant \u0027\u0026\u0026 CONFIG_ARCH_SUPPORTS_AOUT\u0027\nin the ifdef around that code. It\u0027s already dependent on __alpha__, and\nCONFIG_ARCH_SUPPORTS_AOUT is hard-coded to \u0027y\u0027 there.\n\nSigned-off-by: David Woodhouse \u003cdwmw2@infradead.org\u003e\nAcked-by: Peter Korsgaard \u003cjacmet@sunsite.dk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "cbaffba12ce08beb3e80bfda148ee0fa14aac188", "tree": "b35f29814b46593d864e8c8921e9eccac5a5a173", "parents": [ "c8e85b4f4b9ee23bf0e79bdeb3da274a0f9c663f" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Mon May 26 20:55:42 2008 +0400" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon May 26 10:37:07 2008 -0700" }, "message": "posix timers: discard SI_TIMER signals on exec\n\nBased on Roland\u0027s patch. This approach was suggested by Austin Clements\nfrom the very beginning, and then by Linus.\n\nAs Austin pointed out, the execing task can be killed by SI_TIMER signal\nbecause exec flushes the signal handlers, but doesn\u0027t discard the pending\nsignals generated by posix timers. Perhaps not a bug, but people find this\nsurprising. See http://bugzilla.kernel.org/show_bug.cgi?id\u003d10460\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Austin Clements \u003camdragon+kernelbugzilla@mit.edu\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "08a6fac1c63233c87eec129938022f1a9a4d51f6", "tree": "4fd7a2a906cf5ca0a42b3b8cb30351465f0f6cee", "parents": [ "5f719558edf9c84bfbb1f7ad37e84c483282d09f" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat May 10 16:38:25 2008 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Fri May 16 17:23:05 2008 -0400" }, "message": "[PATCH] get rid of leak in compat_execve()\n\nEven though copy_compat_strings() doesn\u0027t cache the pages,\ncopy_strings_kernel() and stuff indirectly called by e.g.\n-\u003eload_binary() is doing that, so we need to drop the\ncache contents in the end.\n\n[found by WANG Cong \u003cwangcong@zeuux.org\u003e]\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "4cd1a8fc3d3cd740416b14ece2693dbb5d065eaf", "tree": "2acebe40e15b91a3df78ea5b677a84c509a30ae0", "parents": [ "c9bfcb3151040cff6714542d1da04ccd7e2d3efc" ], "author": { "name": "KOSAKI Motohiro", "email": "kosaki.motohiro@jp.fujitsu.com", "time": "Mon May 12 14:02:31 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue May 13 08:02:25 2008 -0700" }, "message": "memcg: fix possible panic when CONFIG_MM_OWNER\u003dy\n\nWhen mm destruction happens, we should pass mm_update_next_owner() the old mm.\n But unfortunately new mm is passed in exec_mmap().\n\nThus, kernel panic is possible when a multi-threaded process uses exec().\n\nAlso, the owner member comment description is wrong. mm-\u003eowner does not\nnecessarily point to the thread group leader.\n\n[akpm@linux-foundation.org: coding-style fixes]\nSigned-off-by: KOSAKI Motohiro \u003ckosaki.motohiro@jp.fujitsu.com\u003e\nAcked-by: Balbir Singh \u003cbalbir@linux.vnet.ibm.com\u003e\nCc: \"Paul Menage\" \u003cmenage@google.com\u003e\nCc: \"KAMEZAWA Hiroyuki\" \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "9f3acc3140444a900ab280de942291959f0f615d", "tree": "0d7f3f9698071ff90fb9a127a4c6e86e1c37c945", "parents": [ "a2dcb44c3c5a8151d2d9f6ac8ad0789efcdbe184" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Thu Apr 24 07:44:08 2008 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Thu May 01 13:08:16 2008 -0400" }, "message": "[PATCH] split linux/file.h\n\nInitial splitoff of the low-level stuff; taken to fdtable.h\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "2800d8d19e51414403df8144eaa214bb03400b87", "tree": "d5b01302c7109d7ffdc140ce8d6e31cebcdb233a", "parents": [ "376e1d2531860358c8a79fecf5f4f42994d03c4d" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Wed Apr 30 00:53:12 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Apr 30 08:29:38 2008 -0700" }, "message": "document de_thread() with exit_notify() connection\n\nAdd a couple of small comments, it is not easy to see what this code does.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7a5e873f096e04e6d8719e4ecb7b70d2decca503", "tree": "2d3f7cc6c15e03de02484f9d754a9174ce2fff76", "parents": [ "fae5fa44f1fd079ffbed8e0add929dd7bbd1347f" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Wed Apr 30 00:53:04 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Apr 30 08:29:37 2008 -0700" }, "message": "signals: de_thread: simplify the -\u003echild_reaper switching\n\nNow that we rely on SIGNAL_UNKILLABLE flag, de_thread() doesn\u0027t need the nasty\nhack to kill the old -\u003echild_reaper during the mt-exec.\n\nThis also means we can avoid taking tasklist_lock around zap_other_threads().\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "925d1c401fa6cfd0df5d2e37da8981494ccdec07", "tree": "4f3b7a09311cd99783b822350628125e44f9902d", "parents": [ "e93b4ea20adb20f1f1f07f10ba5d7dd739d2843e" ], "author": { "name": "Matt Helsley", "email": "matthltc@us.ibm.com", "time": "Tue Apr 29 01:01:36 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 29 08:06:17 2008 -0700" }, "message": "procfs task exe symlink\n\nThe kernel implements readlink of /proc/pid/exe by getting the file from\nthe first executable VMA. Then the path to the file is reconstructed and\nreported as the result.\n\nBecause of the VMA walk the code is slightly different on nommu systems.\nThis patch avoids separate /proc/pid/exe code on nommu systems. Instead of\nwalking the VMAs to find the first executable file-backed VMA we store a\nreference to the exec\u0027d file in the mm_struct.\n\nThat reference would prevent the filesystem holding the executable file\nfrom being unmounted even after unmapping the VMAs. So we track the number\nof VM_EXECUTABLE VMAs and drop the new reference when the last one is\nunmapped. This avoids pinning the mounted filesystem.\n\n[akpm@linux-foundation.org: improve comments]\n[yamamoto@valinux.co.jp: fix dup_mmap]\nSigned-off-by: Matt Helsley \u003cmatthltc@us.ibm.com\u003e\nCc: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc:\"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nCc: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Hugh Dickins \u003chugh@veritas.com\u003e\nSigned-off-by: YAMAMOTO Takashi \u003cyamamoto@valinux.co.jp\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "cf475ad28ac35cc9ba612d67158f29b73b38b05d", "tree": "2c7cd568d00357bd42643ea602884e731cc24f26", "parents": [ "29486df325e1fe6e1764afcb19e3370804c2b002" ], "author": { "name": "Balbir Singh", "email": "balbir@linux.vnet.ibm.com", "time": "Tue Apr 29 01:00:16 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 29 08:06:10 2008 -0700" }, "message": "cgroups: add an owner to the mm_struct\n\nRemove the mem_cgroup member from mm_struct and instead adds an owner.\n\nThis approach was suggested by Paul Menage. The advantage of this approach\nis that, once the mm-\u003eowner is known, using the subsystem id, the cgroup\ncan be determined. It also allows several control groups that are\nvirtually grouped by mm_struct, to exist independent of the memory\ncontroller i.e., without adding mem_cgroup\u0027s for each controller, to\nmm_struct.\n\nA new config option CONFIG_MM_OWNER is added and the memory resource\ncontroller selects this config option.\n\nThis patch also adds cgroup callbacks to notify subsystems when mm-\u003eowner\nchanges. The mm_cgroup_changed callback is called with the task_lock() of\nthe new task held and is called just prior to changing the mm-\u003eowner.\n\nI am indebted to Paul Menage for the several reviews of this patchset and\nhelping me make it lighter and simpler.\n\nThis patch was tested on a powerpc box, it was compiled with both the\nMM_OWNER config turned on and off.\n\nAfter the thread group leader exits, it\u0027s moved to init_css_state by\ncgroup_exit(), thus all future charges from runnings threads would be\nredirected to the init_css_set\u0027s subsystem.\n\nSigned-off-by: Balbir Singh \u003cbalbir@linux.vnet.ibm.com\u003e\nCc: Pavel Emelianov \u003cxemul@openvz.org\u003e\nCc: Hugh Dickins \u003chugh@veritas.com\u003e\nCc: Sudhir Kumar \u003cskumar@linux.vnet.ibm.com\u003e\nCc: YAMAMOTO Takashi \u003cyamamoto@valinux.co.jp\u003e\nCc: Hirokazu Takahashi \u003ctaka@valinux.co.jp\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e,\nCc: Balbir Singh \u003cbalbir@linux.vnet.ibm.com\u003e\nAcked-by: KAMEZAWA Hiroyuki \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nAcked-by: Pekka Enberg \u003cpenberg@cs.helsinki.fi\u003e\nReviewed-by: Paul Menage \u003cmenage@google.com\u003e\nCc: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "175a06ae300188af8a61db68a78e1af44dc7d44f", "tree": "ed088932ad725985ead11fbf9e4cd7754af0dcc8", "parents": [ "ecd0fa9825a1270e31fb48bc9edcfb28918b6c51" ], "author": { "name": "Tetsuo Handa", "email": "penguin-kernel@i-love.sakura.ne.jp", "time": "Tue Apr 29 00:59:17 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 29 08:06:03 2008 -0700" }, "message": "exec: remove argv_len from struct linux_binprm\n\nI noticed that 2.6.24.2 calculates bprm-\u003eargv_len at do_execve(). But it\ndoesn\u0027t update bprm-\u003eargv_len after \"remove_arg_zero() +\ncopy_strings_kernel()\" at load_script() etc.\n\naudit_bprm() is called from search_binary_handler() and\nsearch_binary_handler() is called from load_script() etc. Thus, I think the\ncondition check\n\n if (bprm-\u003eargv_len \u003e (audit_argv_kb \u003c\u003c 10))\n return -E2BIG;\n\nin audit_bprm() might return wrong result when strlen(removed_arg) !\u003d\nstrlen(spliced_args). Why not update bprm-\u003eargv_len at load_script() etc. ?\n\nBy the way, 2.6.25-rc3 seems to not doing the condition check. Is the field\nbprm-\u003eargv_len no longer needed?\n\nSigned-off-by: Tetsuo Handa \u003cpenguin-kernel@I-love.SAKURA.ne.jp\u003e\nCc: Ollie Wild \u003caaw@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3b1253880b7a9e6db54b943b2d40bcf2202f58ab", "tree": "5301be7b4d4310faa8db5a0d027b81421e36570e", "parents": [ "fd8328be874f4190a811c58cd4778ec2c74d2c05" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Apr 22 05:31:30 2008 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Fri Apr 25 09:23:59 2008 -0400" }, "message": "[PATCH] sanitize unshare_files/reset_files_struct\n\n* let unshare_files() give caller the displaced files_struct\n* don\u0027t bother with grabbing reference only to drop it in the\n caller if it hadn\u0027t been shared in the first place\n* in that form unshare_files() is trivially implemented via\n unshare_fd(), so we eliminate the duplicate logics in fork.c\n* reset_files_struct() is not just only called for current;\n it will break the system if somebody ever calls it for anything\n else (we can\u0027t modify -\u003efiles of somebody else). Lose the\n task_struct * argument.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "fd8328be874f4190a811c58cd4778ec2c74d2c05", "tree": "b44ae8e99ce96a1a4739b04d4d1a23c40ab8b163", "parents": [ "6b335d9c80d7f3c2a3f6545f664ae9007a0f3821" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Apr 22 05:11:59 2008 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Fri Apr 25 09:23:53 2008 -0400" }, "message": "[PATCH] sanitize handling of shared descriptor tables in failing execve()\n\n* unshare_files() can fail; doing it after irreversible actions is wrong\n and de_thread() is certainly irreversible.\n* since we do it unconditionally anyway, we might as well do it in do_execve()\n and save ourselves the PITA in binfmt handlers, etc.\n* while we are at it, binfmt_som actually leaked files_struct on failure.\n\nAs a side benefit, unshare_files(), put_files_struct() and reset_files_struct()\nbecome unexported.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "a64e715fc74b1a7dcc5944f848acc38b2c4d4ee2", "tree": "6a5dfc2b0ff946406082a8ad4dc046964d259dea", "parents": [ "a345b4ba2086bacc63884e5d72268415a97bcbff" ], "author": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Mon Mar 03 10:12:14 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Mon Mar 03 10:12:14 2008 -0800" }, "message": "Allow ARG_MAX execve string space even with a small stack limit\n\nThe new code that removed the limitation on the execve string size\n(which was historically 32 pages) replaced it with a much softer limit\nbased on RLIMIT_STACK which is usually much larger than the traditional\nlimit. See commit b6a2fea39318e43fee84fa7b0b90d68bed92d2ba (\"mm:\nvariable length argument support\") for details.\n\nHowever, if you have a small stack limit (perhaps because you need lots\nof stacks in a threaded environment), the new heuristic of allowing up\nto 1/4th of RLIMIT_STACK to be used for argument and environment strings\ncould actually be smaller than the old limit.\n\nSo just say that it\u0027s ok to have up to ARG_MAX strings regardless of the\nvalue of RLIMIT_STACK, and check the rlimit only when going over that\ntraditional limit.\n\n(Of course, if you actually have a *really* small stack limit, the whole\nstack itself will be limited before you hit ARG_MAX, but that has always\nbeen true and is clearly the right behaviour anyway).\n\nAcked-by: Carlos O\u0027Donell \u003ccarlos@codesourcery.com\u003e\nCc: Michael Kerrisk \u003cmichael.kerrisk@googlemail.com\u003e\nCc: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nCc: Ollie Wild \u003caaw@google.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "1d957f9bf87da74f420424d16ece005202bbebd3", "tree": "363d4770c0c74a536524c99ccd2762ce96ee9bbe", "parents": [ "4ac9137858e08a19f29feac4e1f4df7c268b0ba5" ], "author": { "name": "Jan Blunck", "email": "jblunck@suse.de", "time": "Thu Feb 14 19:34:35 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Feb 14 21:13:33 2008 -0800" }, "message": "Introduce path_put()\n\n* Add path_put() functions for releasing a reference to the dentry and\n vfsmount of a struct path in the right order\n\n* Switch from path_release(nd) to path_put(\u0026nd-\u003epath)\n\n* Rename dput_path() to path_put_conditional()\n\n[akpm@linux-foundation.org: fix cifs]\nSigned-off-by: Jan Blunck \u003cjblunck@suse.de\u003e\nSigned-off-by: Andreas Gruenbacher \u003cagruen@suse.de\u003e\nAcked-by: Christoph Hellwig \u003chch@lst.de\u003e\nCc: \u003clinux-fsdevel@vger.kernel.org\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Steven French \u003csfrench@us.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "4ac9137858e08a19f29feac4e1f4df7c268b0ba5", "tree": "f5b5d84fd12fcc2b0ba0e7ce1a79ff381ad8f5dd", "parents": [ "c5e725f33b733a77de622e91b6ba5645fcf070be" ], "author": { "name": "Jan Blunck", "email": "jblunck@suse.de", "time": "Thu Feb 14 19:34:32 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Feb 14 21:13:33 2008 -0800" }, "message": "Embed a struct path into struct nameidata instead of nd-\u003e{dentry,mnt}\n\nThis is the central patch of a cleanup series. In most cases there is no good\nreason why someone would want to use a dentry for itself. This series reflects\nthat fact and embeds a struct path into nameidata.\n\nTogether with the other patches of this series\n- it enforced the correct order of getting/releasing the reference count on\n \u003cdentry,vfsmount\u003e pairs\n- it prepares the VFS for stacking support since it is essential to have a\n struct path in every place where the stack can be traversed\n- it reduces the overall code size:\n\nwithout patch series:\n text data bss dec hex filename\n5321639 858418 715768 6895825 6938d1 vmlinux\n\nwith patch series:\n text data bss dec hex filename\n5320026 858418 715768 6894212 693284 vmlinux\n\nThis patch:\n\nSwitch from nd-\u003e{dentry,mnt} to nd-\u003epath.{dentry,mnt} everywhere.\n\n[akpm@linux-foundation.org: coding-style fixes]\n[akpm@linux-foundation.org: fix cifs]\n[akpm@linux-foundation.org: fix smack]\nSigned-off-by: Jan Blunck \u003cjblunck@suse.de\u003e\nSigned-off-by: Andreas Gruenbacher \u003cagruen@suse.de\u003e\nAcked-by: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Casey Schaufler \u003ccasey@schaufler-ca.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "abe8be3abe4c2043bd766f32d7eba62c12dbb0b3", "tree": "f4c9100fd70abd8cfc9128bd16e84c19c4ae45f2", "parents": [ "531d7d4256f3726b93f7a91f97132a944ab28148" ], "author": { "name": "Andi Kleen", "email": "andi@firstfloor.org", "time": "Fri Feb 08 04:20:23 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Feb 08 09:22:34 2008 -0800" }, "message": "Allow executables larger than 2GB\n\nThis allows us to use executables \u003e2GB.\n\nBased on a patch by Dave Anderson\n\nSigned-off-by: Andi Kleen \u003cak@suse.de\u003e\nCc: Dave Anderson \u003canderson@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7fa3031500ec9b0a7460c8c23751799006ffee74", "tree": "2a7e9202b35a39dc8217e95825263c0629e67e35", "parents": [ "b0b933c08bd5fd053bbba8ba6387f543be03d49f" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Feb 08 04:19:28 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Feb 08 09:22:30 2008 -0800" }, "message": "aout: suppress A.OUT library support if !CONFIG_ARCH_SUPPORTS_AOUT\n\nSuppress A.OUT library support if CONFIG_ARCH_SUPPORTS_AOUT is not set.\n\nNot all architectures support the A.OUT binfmt, so the ELF binfmt should not\nbe permitted to go looking for A.OUT libraries to load in such a case. Not\nonly that, but under such conditions A.OUT core dumps are not produced either.\n\nTo make this work, this patch also does the following:\n\n (1) Makes the existence of the contents of linux/a.out.h contingent on\n CONFIG_ARCH_SUPPORTS_AOUT.\n\n (2) Renames dump_thread() to aout_dump_thread() as it\u0027s only called by A.OUT\n core dumping code.\n\n (3) Moves aout_dump_thread() into asm/a.out-core.h and makes it inline. This\n is then included only where needed. This means that this bit of arch\n code will be stored in the appropriate A.OUT binfmt module rather than\n the core kernel.\n\n (4) Drops A.OUT support for Blackfin (according to Mike Frysinger it\u0027s not\n needed) and FRV.\n\nThis patch depends on the previous patch to move STACK_TOP[_MAX] out of\nasm/a.out.h and into asm/processor.h as they\u0027re required whether or not A.OUT\nformat is available.\n\n[jdike@addtoit.com: uml: re-remove accidentally restored code]\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nCc: \u003clinux-arch@vger.kernel.org\u003e\nSigned-off-by: Jeff Dike \u003cjdike@linux.intel.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "fea9d175545b38cb3e84569400419eb81bc90fa3", "tree": "0d43fe9ed2ea6104ee8b15a3eb8da081dd08fd35", "parents": [ "46f382d2b69d2221086b823f0dbc8f32c027cac2" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Fri Feb 08 04:19:19 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Feb 08 09:22:29 2008 -0800" }, "message": "ITIMER_REAL: convert to use struct pid\n\nsignal_struct-\u003etsk points to the -\u003egroup_leader and thus we have the nasty\ncode in de_thread() which has to change it and restart -\u003ereal_timer if the\nleader is changed.\n\nUse \"struct pid *leader_pid\" instead. This also allows us to kill now\nunneeded send_group_sig_info().\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nAcked-by: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nCc: Davide Libenzi \u003cdavidel@xmailserver.org\u003e\nCc: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nAcked-by: Roland McGrath \u003croland@redhat.com\u003e\nAcked-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ed5d2cac114202fe2978a9cbcab8f5032796d538", "tree": "aa9aaea1aa0945bd9159685d1b04897d105a90c9", "parents": [ "f558b7e408026eb3c6afcd0e8fc1f7fe31195a6a" ], "author": { "name": "Oleg Nesterov", "email": "oleg@tv-sign.ru", "time": "Mon Feb 04 22:27:24 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue Feb 05 09:44:07 2008 -0800" }, "message": "exec: rework the group exit and fix the race with kill\n\nAs Roland pointed out, we have the very old problem with exec. de_thread()\nsets SIGNAL_GROUP_EXIT, kills other threads, changes -\u003egroup_leader and then\nclears signal-\u003eflags. All signals (even fatal ones) sent in this window\n(which is not too small) will be lost.\n\nWith this patch exec doesn\u0027t abuse SIGNAL_GROUP_EXIT. signal_group_exit(),\nthe new helper, should be used to detect exit_group() or exec() in progress.\nIt can have more users, but this patch does only strictly necessary changes.\n\nSigned-off-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Davide Libenzi \u003cdavidel@xmailserver.org\u003e\nCc: Ingo Molnar \u003cmingo@elte.hu\u003e\nCc: Robin Holt \u003cholt@sgi.com\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "59714d65dfbc86d5cb93adc5bac57a921cc2fa84", "tree": "10eda85ccab88fb707d6c6b4f4fb7f2e9bd1f4e1", "parents": [ "0ccf831cbee94df9c5006dd46248c0f07847dd7c" ], "author": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Mon Feb 04 22:27:21 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue Feb 05 09:44:07 2008 -0800" }, "message": "get_task_comm(): return the result\n\nIt was dumb to make get_task_comm() return void. Change it to return a\npointer to the resulting output for caller convenience.\n\nCc: Ulrich Drepper \u003cdrepper@redhat.com\u003e\nCc: Ingo Molnar \u003cmingo@elte.hu\u003e\nCc: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c46f739dd39db3b07ab5deb4e3ec81e1c04a91af", "tree": "caa3688a25bdfab7671c465496e90ac2e5feea8f", "parents": [ "a531a141089714efe39eca89593524fdf05104f2" ], "author": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Wed Nov 28 13:59:18 2007 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Nov 28 10:58:01 2007 -0800" }, "message": "vfs: coredumping fix\n\nfix: http://bugzilla.kernel.org/show_bug.cgi?id\u003d3043\n\nonly allow coredumping to the same uid that the coredumping\ntask runs under.\n\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nAcked-by: Alan Cox \u003calan@redhat.com\u003e\nAcked-by: Christoph Hellwig \u003chch@lst.de\u003e\nAcked-by: Al Viro \u003cviro@ftp.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "00ec99da43a7c2aed46c6595aa271b84bb1b1462", "tree": "88eec24facdcba422db6a13206d4586daef9e1ad", "parents": [ "6e800af233e0bdf108efb7bd23c11ea6fa34cdeb" ], "author": { "name": "Roland McGrath", "email": "roland@redhat.com", "time": "Sun Nov 11 19:13:43 2007 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Mon Nov 12 10:32:29 2007 -0800" }, "message": "core dump: remain dumpable\n\nThe coredump code always calls set_dumpable(0) when it starts (even\nif RLIMIT_CORE prevents any core from being dumped). The effect of\nthis (via task_dumpable) is to make /proc/pid/* files owned by root\ninstead of the user, so the user can no longer examine his own\nprocess--in a case where there was never any privileged data to\nprotect. This affects e.g. auxv, environ, fd; in Fedora (execshield)\nkernels, also maps. In practice, you can only notice this when a\ndebugger has requested PTRACE_EVENT_EXIT tracing.\n\nset_dumpable was only used in do_coredump for synchronization and not\nintended for any security purpose. (It doesn\u0027t secure anything that wasn\u0027t\nalready unsecured when a process dies by SIGTERM instead of SIGQUIT.)\n\nThis changes do_coredump to check the core_waiters count as the means of\nsynchronization, which is sufficient. Now we leave the \"dumpable\" bits alone.\n\nSigned-off-by: Roland McGrath \u003croland@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "bac0abd6174e427404dd197cdbefece31e97329b", "tree": "68ed6bd8619552c921c9fb99e83cb04fcb235a39", "parents": [ "19b9b9b54e5f115907efd56be2c3799775a46561" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Thu Oct 18 23:40:18 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Oct 19 11:53:40 2007 -0700" }, "message": "Isolate some explicit usage of task-\u003etgid\n\nWith pid namespaces this field is now dangerous to use explicitly, so hide\nit behind the helpers.\n\nAlso the pid and pgrp fields o task_struct and signal_struct are to be\ndeprecated. Unfortunately this patch cannot be sent right now as this\nleads to tons of warnings, so start isolating them, and deprecate later.\n\nActually the p-\u003etgid \u003d\u003d pid has to be changed to has_group_leader_pid(),\nbut Oleg pointed out that in case of posix cpu timers this is the same, and\nthread_group_leader() is more preferable.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nAcked-by: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Sukadev Bhattiprolu \u003csukadev@us.ibm.com\u003e\nCc: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "b488893a390edfe027bae7a46e9af8083e740668", "tree": "c469a7f99ad01005a73011c029eb5e5d15454559", "parents": [ "3eb07c8c8adb6f0572baba844ba2d9e501654316" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Thu Oct 18 23:40:14 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Oct 19 11:53:40 2007 -0700" }, "message": "pid namespaces: changes to show virtual ids to user\n\nThis is the largest patch in the set. Make all (I hope) the places where\nthe pid is shown to or get from user operate on the virtual pids.\n\nThe idea is:\n - all in-kernel data structures must store either struct pid itself\n or the pid\u0027s global nr, obtained with pid_nr() call;\n - when seeking the task from kernel code with the stored id one\n should use find_task_by_pid() call that works with global pids;\n - when showing pid\u0027s numerical value to the user the virtual one\n should be used, but however when one shows task\u0027s pid outside this\n task\u0027s namespace the global one is to be used;\n - when getting the pid from userspace one need to consider this as\n the virtual one and use appropriate task/pid-searching functions.\n\n[akpm@linux-foundation.org: build fix]\n[akpm@linux-foundation.org: nuther build fix]\n[akpm@linux-foundation.org: yet nuther build fix]\n[akpm@linux-foundation.org: remove unneeded casts]\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@openvz.org\u003e\nCc: Sukadev Bhattiprolu \u003csukadev@us.ibm.com\u003e\nCc: Oleg Nesterov \u003coleg@tv-sign.ru\u003e\nCc: Paul Menage \u003cmenage@google.com\u003e\nCc: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3743ca05ff464b8a9e345c08a6c9ce30485f9805", "tree": "4f07ead1bf2c9c4f6cddad7fb15432078a9d2a9b", "parents": [ "88f21d818255bc61c002478d21caf52f8a9b8def" ], "author": { "name": "Sukadev Bhattiprolu", "email": "sukadev@us.ibm.com", "time": "Thu Oct 18 23:39:51 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Oct 19 11:53:37 2007 -0700" }, "message": "pid namespaces: use task_pid() to find leader\u0027s pid\n\nUse task_pid() to get leader\u0027s \u0027struct pid\u0027 and avoid the find_pid().\n\nSigned-off-by: Sukadev Bhattiprolu \u003csukadev@us.ibm.com\u003e\nAcked-by: Pavel Emelianov \u003cxemul@openvz.org\u003e\nCc: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nCc: Cedric Le Goater \u003cclg@fr.ibm.com\u003e\nCc: Dave Hansen \u003chaveblue@us.ibm.com\u003e\nCc: Serge Hallyn \u003cserue@us.ibm.com\u003e\nCc: Herbert Poetzel \u003cherbert@13thfloor.at\u003e\nCc: Kirill Korotaev \u003cdev@sw.ru\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "88f21d818255bc61c002478d21caf52f8a9b8def", "tree": "de16e38862622b3d295f7850cdb006922307fb8d", "parents": [ "2894d650cd9715d00ca196c711265819ef6ebd2d" ], "author": { "name": "Sukadev Bhattiprolu", "email": "sukadev@us.ibm.com", "time": "Thu Oct 18 23:39:50 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Oct 19 11:53:37 2007 -0700" }, "message": "pid namespaces: rename child_reaper() function\n\nRename the child_reaper() function to task_child_reaper() to be similar to\nother task_* functions and to distinguish the function from \u0027struct\npid_namspace.child_reaper\u0027.\n\nSigned-off-by: Sukadev Bhattiprolu \u003csukadev@us.ibm.com\u003e\nCc: Pavel Emelianov \u003cxemul@openvz.org\u003e\nCc: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nCc: Cedric Le Goater \u003cclg@fr.ibm.com\u003e\nCc: Dave Hansen \u003chaveblue@us.ibm.com\u003e\nCc: Serge Hallyn \u003cserue@us.ibm.com\u003e\nCc: Herbert Poetzel \u003cherbert@13thfloor.at\u003e\nCc: Kirill Korotaev \u003cdev@sw.ru\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "2894d650cd9715d00ca196c711265819ef6ebd2d", "tree": "dbfe07c3276c2b6aa7d9a4be633da7fa1e12d97b", "parents": [ "baf8f0f82dd79e374bf6fa9e996393df2bae3c21" ], "author": { "name": "Sukadev Bhattiprolu", "email": "sukadev@us.ibm.com", "time": "Thu Oct 18 23:39:49 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Oct 19 11:53:37 2007 -0700" }, "message": "pid namespaces: define and use task_active_pid_ns() wrapper\n\nWith multiple pid namespaces, a process is known by some pid_t in every\nancestor pid namespace. Every time the process forks, the child process also\ngets a pid_t in every ancestor pid namespace.\n\nWhile a process is visible in \u003e\u003d1 pid namespaces, it can see pid_t\u0027s in only\none pid namespace. We call this pid namespace it\u0027s \"active pid namespace\",\nand it is always the youngest pid namespace in which the process is known.\n\nThis patch defines and uses a wrapper to find the active pid namespace of a\nprocess. The implementation of the wrapper will be changed in when support\nfor multiple pid namespaces are added.\n\nChangelog:\n\t2.6.22-rc4-mm2-pidns1:\n\t- [Pavel Emelianov, Alexey Dobriyan] Back out the change to use\n\t task_active_pid_ns() in child_reaper() since task-\u003ensproxy\n\t can be NULL during task exit (so child_reaper() continues to\n\t use init_pid_ns).\n\n\t to implement child_reaper() since init_pid_ns.child_reaper to\n\t implement child_reaper() since tsk-\u003ensproxy can be NULL during exit.\n\n\t2.6.21-rc6-mm1:\n\t- Rename task_pid_ns() to task_active_pid_ns() to reflect that a\n\t process can have multiple pid namespaces.\n\nSigned-off-by: Sukadev Bhattiprolu \u003csukadev@us.ibm.com\u003e\nAcked-by: Pavel Emelianov \u003cxemul@openvz.org\u003e\nCc: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nCc: Cedric Le Goater \u003cclg@fr.ibm.com\u003e\nCc: Dave Hansen \u003chaveblue@us.ibm.com\u003e\nCc: Serge Hallyn \u003cserue@us.ibm.com\u003e\nCc: Herbert Poetzel \u003cherbert@13thfloor.at\u003e\nCc: Kirill Korotaev \u003cdev@sw.ru\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" } ], "next": "3ed75eb8f1cd89565966599c4f77d2edb086d5b0" }