From: "Serge E. Hallyn" <serue@us.ibm.com> To: Cedric Le Goater <legoater@free.fr> Cc: Alexey Dobriyan <adobriyan@gmail.com>, linux-api@vger.kernel.org, containers@lists.linux-foundation.org, mpm@selenic.com, linux-kernel@vger.kernel.org, Dave Hansen <dave@linux.vnet.ibm.com>, linux-mm@kvack.org, tglx@linutronix.de, viro@zeniv.linux.org.uk, hpa@zytor.com, Ingo Molnar <mingo@elte.hu>, torvalds@linux-foundation.org, Andrew Morton <akpm@linux-foundation.org>, xemul@openvz.org Subject: Re: How much of a mess does OpenVZ make? ;) Was: What can OpenVZ do? Date: Tue, 3 Mar 2009 12:28:21 -0600 [thread overview] Message-ID: <20090303182821.GA4088@us.ibm.com> (raw) In-Reply-To: <49AD581F.2090903@free.fr> Quoting Cedric Le Goater (legoater@free.fr): > > >> 1. cap_sys_admin check is unfortunate. In discussions about Oren's > >> patchset we've agreed that not having that check from the outset forces > >> us to consider security with each new patch and feature, which is a good > >> thing. > > > > Removing CAP_SYS_ADMIN on restore? > > we've kept the capabilities in our patchset but the user tools doing checkpoint > and restart are setcap'ed appropriately to be able to do different things like : > > clone() the namespaces > mount /dev/mqueue > interact with net_ns > etc. Right, that stuff done in userspace requires capabilities. > at restart, the task are restarted through execve() so they loose their > capabilities automatically. > > but I think we could drop the CAP_SYS_ADMIN tests for some namespaces, > uts and ipc are good candidates. I guess network should require some > privilege. Eric and i have talked about that a lot, and so far are continuing to punt on it. There are too many possibilities for subtle exploits so I'm not suggesting changing those now. But checkpoint and restart are entirely new. If at each small step we accept that an unprivileged user should be able to use it safely, that will lead to a better design, i.e. doing may_ptrace before checkpoint, and always doing access checks before re-creating a resource. If we *don't* do that, we'll have a big-stick setuid root checkpoint and restart program which isn't at all trustworthy (bc it hasn't received due scrutiny at each commit point), but must be trusted by anyone wanting to use it. And if we're too afraid to remove CAP_SYS_ADMIN checks from unsharing one innocuous namespace, will we ever convince ourselves to remove it from an established feature that can recreate every type of resource on the system? -serge
WARNING: multiple messages have this Message-ID (diff)
From: "Serge E. Hallyn" <serue@us.ibm.com> To: Cedric Le Goater <legoater@free.fr> Cc: Alexey Dobriyan <adobriyan@gmail.com>, linux-api@vger.kernel.org, containers@lists.linux-foundation.org, mpm@selenic.com, linux-kernel@vger.kernel.org, Dave Hansen <dave@linux.vnet.ibm.com>, linux-mm@kvack.org, tglx@linutronix.de, viro@zeniv.linux.org.uk, hpa@zytor.com, Ingo Molnar <mingo@elte.hu>, torvalds@linux-foundation.org, Andrew Morton <akpm@linux-foundation.org>, xemul@openvz.org Subject: Re: How much of a mess does OpenVZ make? ;) Was: What can OpenVZ do? Date: Tue, 3 Mar 2009 12:28:21 -0600 [thread overview] Message-ID: <20090303182821.GA4088@us.ibm.com> (raw) In-Reply-To: <49AD581F.2090903@free.fr> Quoting Cedric Le Goater (legoater@free.fr): > > >> 1. cap_sys_admin check is unfortunate. In discussions about Oren's > >> patchset we've agreed that not having that check from the outset forces > >> us to consider security with each new patch and feature, which is a good > >> thing. > > > > Removing CAP_SYS_ADMIN on restore? > > we've kept the capabilities in our patchset but the user tools doing checkpoint > and restart are setcap'ed appropriately to be able to do different things like : > > clone() the namespaces > mount /dev/mqueue > interact with net_ns > etc. Right, that stuff done in userspace requires capabilities. > at restart, the task are restarted through execve() so they loose their > capabilities automatically. > > but I think we could drop the CAP_SYS_ADMIN tests for some namespaces, > uts and ipc are good candidates. I guess network should require some > privilege. Eric and i have talked about that a lot, and so far are continuing to punt on it. There are too many possibilities for subtle exploits so I'm not suggesting changing those now. But checkpoint and restart are entirely new. If at each small step we accept that an unprivileged user should be able to use it safely, that will lead to a better design, i.e. doing may_ptrace before checkpoint, and always doing access checks before re-creating a resource. If we *don't* do that, we'll have a big-stick setuid root checkpoint and restart program which isn't at all trustworthy (bc it hasn't received due scrutiny at each commit point), but must be trusted by anyone wanting to use it. And if we're too afraid to remove CAP_SYS_ADMIN checks from unsharing one innocuous namespace, will we ever convince ourselves to remove it from an established feature that can recreate every type of resource on the system? -serge -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>
next prev parent reply other threads:[~2009-03-03 18:28 UTC|newest] Thread overview: 394+ messages / expand[flat|nested] mbox.gz Atom feed top 2009-01-27 17:07 [RFC v13][PATCH 00/14] Kernel based checkpoint/restart Oren Laadan 2009-01-27 17:07 ` Oren Laadan 2009-01-27 17:07 ` [RFC v13][PATCH 01/14] Create syscalls: sys_checkpoint, sys_restart Oren Laadan 2009-01-27 17:07 ` Oren Laadan [not found] ` <1233076092-8660-2-git-send-email-orenl-eQaUEPhvms7ENvBUuze7eA@public.gmane.org> 2009-01-27 17:20 ` Randy Dunlap 2009-01-27 17:20 ` Randy Dunlap 2009-01-27 17:20 ` Randy Dunlap 2009-01-27 17:08 ` [RFC v13][PATCH 02/14] Checkpoint/restart: initial documentation Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 03/14] Make file_pos_read/write() public Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 04/14] General infrastructure for checkpoint restart Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 05/14] x86 support for checkpoint/restart Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-02-24 7:47 ` Nathan Lynch 2009-02-24 7:47 ` Nathan Lynch [not found] ` <20090224014739.1b82fc35-4v5LP+xe+1byhTdZtsIeww@public.gmane.org> 2009-02-24 16:06 ` Dave Hansen 2009-03-18 7:21 ` Oren Laadan 2009-02-24 16:06 ` Dave Hansen 2009-02-24 16:06 ` Dave Hansen 2009-02-24 16:06 ` Dave Hansen 2009-03-18 7:21 ` Oren Laadan 2009-03-18 7:21 ` Oren Laadan [not found] ` <1233076092-8660-6-git-send-email-orenl-eQaUEPhvms7ENvBUuze7eA@public.gmane.org> 2009-02-24 7:47 ` Nathan Lynch 2009-01-27 17:08 ` [RFC v13][PATCH 06/14] Dump memory address space Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 07/14] Restore " Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 08/14] Infrastructure for shared objects Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 09/14] Dump open file descriptors Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 10/14] Restore open file descriprtors Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 11/14] External checkpoint of a task other than ourself Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 12/14] Track in-kernel when we expect checkpoint/restart to work Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` Oren Laadan [not found] ` <1233076092-8660-1-git-send-email-orenl-eQaUEPhvms7ENvBUuze7eA@public.gmane.org> 2009-01-27 17:07 ` [RFC v13][PATCH 01/14] Create syscalls: sys_checkpoint, sys_restart Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 02/14] Checkpoint/restart: initial documentation Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 03/14] Make file_pos_read/write() public Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 04/14] General infrastructure for checkpoint restart Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 05/14] x86 support for checkpoint/restart Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 06/14] Dump memory address space Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 07/14] Restore " Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 08/14] Infrastructure for shared objects Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 09/14] Dump open file descriptors Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 10/14] Restore open file descriprtors Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 11/14] External checkpoint of a task other than ourself Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 12/14] Track in-kernel when we expect checkpoint/restart to work Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 13/14] Checkpoint multiple processes Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 14/14] Restart " Oren Laadan 2009-02-10 17:05 ` [RFC v13][PATCH 00/14] Kernel based checkpoint/restart Dave Hansen 2009-01-27 17:08 ` [RFC v13][PATCH 13/14] Checkpoint multiple processes Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` [RFC v13][PATCH 14/14] Restart " Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-01-27 17:08 ` Oren Laadan 2009-02-10 17:05 ` [RFC v13][PATCH 00/14] Kernel based checkpoint/restart Dave Hansen 2009-02-10 17:05 ` Dave Hansen 2009-02-11 22:14 ` Andrew Morton 2009-02-11 22:14 ` Andrew Morton 2009-02-11 22:14 ` Andrew Morton 2009-02-12 9:17 ` Ingo Molnar 2009-02-12 9:17 ` Ingo Molnar 2009-02-12 18:11 ` Dave Hansen 2009-02-12 18:11 ` Dave Hansen 2009-02-12 18:11 ` Dave Hansen 2009-02-12 20:48 ` Serge E. Hallyn 2009-02-12 20:48 ` Serge E. Hallyn 2009-02-12 20:48 ` Serge E. Hallyn 2009-02-12 20:48 ` Serge E. Hallyn 2009-02-13 10:20 ` Ingo Molnar 2009-02-13 10:20 ` Ingo Molnar 2009-02-13 10:20 ` Ingo Molnar [not found] ` <20090212091721.GB1888-X9Un+BFzKDI@public.gmane.org> 2009-02-12 18:11 ` Dave Hansen [not found] ` <20090211141434.dfa1d079.akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org> 2009-02-12 9:17 ` Ingo Molnar 2009-02-12 18:11 ` Dave Hansen 2009-02-12 18:11 ` Dave Hansen 2009-02-12 18:11 ` Dave Hansen 2009-02-12 19:30 ` Matt Mackall 2009-02-12 19:30 ` Matt Mackall 2009-02-12 19:30 ` Matt Mackall 2009-02-12 19:42 ` Andrew Morton 2009-02-12 19:42 ` Andrew Morton 2009-02-12 21:51 ` What can OpenVZ do? Dave Hansen 2009-02-12 21:51 ` Dave Hansen 2009-02-12 22:10 ` Andrew Morton 2009-02-12 22:10 ` Andrew Morton 2009-02-12 22:10 ` Andrew Morton 2009-02-12 23:04 ` How much of a mess does OpenVZ make? ;) Was: " Dave Hansen 2009-02-12 23:04 ` Dave Hansen 2009-02-26 15:57 ` Alexey Dobriyan 2009-02-26 15:57 ` Alexey Dobriyan 2009-02-26 15:57 ` Alexey Dobriyan [not found] ` <20090226155755.GA1456-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-03-10 21:53 ` Alexey Dobriyan 2009-03-10 21:53 ` Alexey Dobriyan 2009-03-10 21:53 ` Alexey Dobriyan 2009-03-10 23:28 ` Serge E. Hallyn 2009-03-10 23:28 ` Serge E. Hallyn 2009-03-11 8:26 ` Cedric Le Goater 2009-03-11 8:26 ` Cedric Le Goater 2009-03-12 14:53 ` Serge E. Hallyn 2009-03-12 14:53 ` Serge E. Hallyn 2009-03-12 21:01 ` Greg Kurz 2009-03-12 21:01 ` Greg Kurz 2009-03-12 21:21 ` Serge E. Hallyn 2009-03-12 21:21 ` Serge E. Hallyn 2009-03-12 21:21 ` Serge E. Hallyn [not found] ` <20090312212124.GA25019-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org> 2009-03-13 4:29 ` Ying Han 2009-03-13 4:29 ` Ying Han 2009-03-13 4:29 ` Ying Han 2009-03-13 5:34 ` Sukadev Bhattiprolu 2009-03-13 5:34 ` Sukadev Bhattiprolu [not found] ` <20090313053458.GA28833-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org> 2009-03-13 6:19 ` Ying Han 2009-03-13 17:27 ` Linus Torvalds 2009-03-13 6:19 ` Ying Han 2009-03-13 6:19 ` Ying Han 2009-03-13 6:19 ` Ying Han 2009-03-13 17:27 ` Linus Torvalds 2009-03-13 17:27 ` Linus Torvalds 2009-03-13 19:02 ` Serge E. Hallyn 2009-03-13 19:02 ` Serge E. Hallyn [not found] ` <alpine.LFD.2.00.0903131018390.3940-bi+AKbBUZKY6gyzm1THtWbp2dZbC/Bob@public.gmane.org> 2009-03-13 19:02 ` Serge E. Hallyn 2009-03-13 19:35 ` Alexey Dobriyan 2009-03-13 20:48 ` Mike Waychison 2009-03-13 19:35 ` Alexey Dobriyan 2009-03-13 19:35 ` Alexey Dobriyan 2009-03-13 19:35 ` Alexey Dobriyan [not found] ` <20090313193500.GA2285-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-03-13 21:01 ` Linus Torvalds 2009-03-13 21:01 ` Linus Torvalds 2009-03-13 21:01 ` Linus Torvalds [not found] ` <alpine.LFD.2.00.0903131401070.3940-bi+AKbBUZKY6gyzm1THtWbp2dZbC/Bob@public.gmane.org> 2009-03-13 21:51 ` Dave Hansen 2009-03-14 0:20 ` Alexey Dobriyan 2009-03-13 21:51 ` Dave Hansen 2009-03-13 21:51 ` Dave Hansen 2009-03-13 22:15 ` Oren Laadan 2009-03-13 22:15 ` Oren Laadan [not found] ` <49BADAE5.8070900-eQaUEPhvms7ENvBUuze7eA@public.gmane.org> 2009-03-14 0:27 ` Eric W. Biederman 2009-03-14 0:27 ` Eric W. Biederman 2009-03-14 0:27 ` Eric W. Biederman [not found] ` <m1hc1xrlt5.fsf-+imSwln9KH6u2/kzUuoCbdi2O/JbrIOy@public.gmane.org> 2009-03-14 8:12 ` Ingo Molnar 2009-03-14 8:12 ` Ingo Molnar 2009-03-14 8:12 ` Ingo Molnar 2009-03-16 22:33 ` Kevin Fox 2009-03-16 22:33 ` Kevin Fox 2009-03-19 21:19 ` Eric W. Biederman 2009-03-19 21:19 ` Eric W. Biederman [not found] ` <20090314081207.GA16436-X9Un+BFzKDI@public.gmane.org> 2009-03-16 22:33 ` Kevin Fox 2009-03-19 21:19 ` Eric W. Biederman 2009-03-13 22:15 ` Oren Laadan 2009-03-14 0:20 ` Alexey Dobriyan 2009-03-14 0:20 ` Alexey Dobriyan 2009-03-14 0:20 ` Alexey Dobriyan 2009-03-14 8:25 ` Ingo Molnar 2009-03-14 8:25 ` Ingo Molnar [not found] ` <20090314082532.GB16436-X9Un+BFzKDI@public.gmane.org> 2009-03-14 17:11 ` Joseph Ruscio 2009-03-16 6:01 ` Oren Laadan 2009-03-16 6:01 ` Oren Laadan 2009-03-16 6:01 ` Oren Laadan [not found] ` <20090314002059.GA4167-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-03-14 8:25 ` Ingo Molnar 2009-03-13 20:48 ` Mike Waychison 2009-03-13 20:48 ` Mike Waychison [not found] ` <49BAC6AF.9090607-hpIqsD4AKlfQT0dZR+AlfA@public.gmane.org> 2009-03-13 22:35 ` Oren Laadan 2009-03-13 22:35 ` Oren Laadan 2009-03-13 22:35 ` Oren Laadan [not found] ` <49BADFCE.8020207-eQaUEPhvms7ENvBUuze7eA@public.gmane.org> 2009-03-18 18:54 ` Mike Waychison 2009-03-18 18:54 ` Mike Waychison 2009-03-18 18:54 ` Mike Waychison 2009-03-18 19:04 ` Oren Laadan 2009-03-18 19:04 ` Oren Laadan [not found] ` <49C1435B.1090809-hpIqsD4AKlfQT0dZR+AlfA@public.gmane.org> 2009-03-18 19:04 ` Oren Laadan 2009-03-13 15:27 ` Cedric Le Goater 2009-03-13 15:27 ` Cedric Le Goater [not found] ` <49BA7B60.60607-GANU6spQydw@public.gmane.org> 2009-03-13 17:11 ` Greg Kurz 2009-03-13 17:11 ` Greg Kurz 2009-03-13 17:11 ` Greg Kurz 2009-03-13 17:37 ` Serge E. Hallyn 2009-03-13 17:37 ` Serge E. Hallyn [not found] ` <604427e00903122129y37ad791aq5fe7ef2552415da9-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> 2009-03-13 5:34 ` Sukadev Bhattiprolu 2009-03-13 15:27 ` Cedric Le Goater 2009-03-13 17:37 ` Serge E. Hallyn 2009-03-12 21:21 ` Serge E. Hallyn 2009-03-13 15:47 ` Cedric Le Goater 2009-03-13 15:47 ` Cedric Le Goater [not found] ` <49BA8013.3030103-GANU6spQydw@public.gmane.org> 2009-03-13 16:35 ` Serge E. Hallyn 2009-03-13 16:35 ` Serge E. Hallyn 2009-03-13 16:35 ` Serge E. Hallyn [not found] ` <20090313163531.GA10685-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org> 2009-03-13 16:53 ` Cedric Le Goater 2009-03-13 16:53 ` Cedric Le Goater 2009-03-13 16:53 ` Cedric Le Goater [not found] ` <20090312145311.GC12390-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org> 2009-03-12 21:01 ` Greg Kurz 2009-03-13 15:47 ` Cedric Le Goater [not found] ` <49B775B4.1040800-GANU6spQydw@public.gmane.org> 2009-03-12 14:53 ` Serge E. Hallyn [not found] ` <20090310215305.GA2078-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-03-10 23:28 ` Serge E. Hallyn 2009-03-11 8:26 ` Cedric Le Goater 2009-02-26 15:57 ` Alexey Dobriyan 2009-02-26 16:27 ` Alexey Dobriyan 2009-02-26 16:27 ` Alexey Dobriyan [not found] ` <20090226162755.GB1456-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-02-26 17:33 ` Ingo Molnar 2009-02-26 17:33 ` Ingo Molnar 2009-02-26 17:33 ` Ingo Molnar 2009-02-26 18:30 ` Greg Kurz 2009-02-26 18:30 ` Greg Kurz 2009-02-26 18:30 ` Greg Kurz 2009-02-26 22:17 ` Alexey Dobriyan 2009-02-26 22:17 ` Alexey Dobriyan 2009-02-26 22:17 ` Alexey Dobriyan 2009-02-27 9:19 ` Greg Kurz 2009-02-27 9:19 ` Greg Kurz 2009-02-27 9:19 ` Greg Kurz 2009-02-27 10:53 ` Alexey Dobriyan 2009-02-27 10:53 ` Alexey Dobriyan 2009-02-27 10:53 ` Alexey Dobriyan [not found] ` <20090227105306.GB2939-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-02-27 14:33 ` Cedric Le Goater 2009-02-27 14:33 ` Cedric Le Goater 2009-02-27 14:33 ` Cedric Le Goater 2009-02-27 10:53 ` Alexey Dobriyan [not found] ` <20090226221709.GA2924-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-02-27 9:19 ` Greg Kurz 2009-02-27 9:36 ` Cedric Le Goater 2009-02-27 9:36 ` Cedric Le Goater 2009-02-27 9:36 ` Cedric Le Goater 2009-02-26 22:17 ` Alexey Dobriyan 2009-02-26 22:31 ` Alexey Dobriyan 2009-02-26 22:31 ` Alexey Dobriyan 2009-02-26 22:31 ` Alexey Dobriyan 2009-02-27 9:03 ` Ingo Molnar 2009-02-27 9:03 ` Ingo Molnar 2009-02-27 9:19 ` Andrew Morton 2009-02-27 9:19 ` Andrew Morton [not found] ` <20090227011901.8598d7f0.akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org> 2009-02-27 10:57 ` Alexey Dobriyan 2009-02-27 10:57 ` Alexey Dobriyan 2009-02-27 10:57 ` Alexey Dobriyan [not found] ` <20090227090323.GC16211-X9Un+BFzKDI@public.gmane.org> 2009-02-27 9:19 ` Andrew Morton 2009-02-27 9:22 ` Andrew Morton 2009-02-27 9:22 ` Andrew Morton 2009-02-27 9:22 ` Andrew Morton 2009-02-27 10:59 ` Alexey Dobriyan 2009-02-27 10:59 ` Alexey Dobriyan [not found] ` <20090227012209.65401324.akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org> 2009-02-27 10:59 ` Alexey Dobriyan 2009-02-27 16:14 ` Dave Hansen 2009-02-27 16:14 ` Dave Hansen 2009-02-27 21:57 ` Alexey Dobriyan 2009-02-27 21:57 ` Alexey Dobriyan 2009-02-27 21:57 ` Alexey Dobriyan [not found] ` <20090227215749.GA3453-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-02-27 21:54 ` Dave Hansen 2009-02-27 21:54 ` Dave Hansen 2009-02-27 21:54 ` Dave Hansen 2009-02-27 21:54 ` Dave Hansen [not found] ` <20090226223112.GA2939-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-02-27 9:03 ` Ingo Molnar 2009-02-27 16:14 ` Dave Hansen 2009-03-01 1:33 ` Alexey Dobriyan 2009-03-01 1:33 ` Alexey Dobriyan 2009-03-01 1:33 ` Alexey Dobriyan 2009-03-01 1:33 ` Alexey Dobriyan 2009-03-01 20:02 ` Serge E. Hallyn 2009-03-01 20:02 ` Serge E. Hallyn 2009-03-01 20:02 ` Serge E. Hallyn [not found] ` <20090301200231.GA25276-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org> 2009-03-01 20:56 ` Alexey Dobriyan 2009-03-01 20:56 ` Alexey Dobriyan 2009-03-01 20:56 ` Alexey Dobriyan 2009-03-01 20:56 ` Alexey Dobriyan 2009-03-01 22:21 ` Serge E. Hallyn 2009-03-01 22:21 ` Serge E. Hallyn 2009-03-03 16:17 ` Cedric Le Goater 2009-03-03 16:17 ` Cedric Le Goater 2009-03-03 18:28 ` Serge E. Hallyn [this message] 2009-03-03 18:28 ` Serge E. Hallyn [not found] ` <49AD581F.2090903-GANU6spQydw@public.gmane.org> 2009-03-03 18:28 ` Serge E. Hallyn [not found] ` <20090301205659.GA7276-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-03-01 22:21 ` Serge E. Hallyn 2009-03-03 16:17 ` Cedric Le Goater [not found] ` <20090301013304.GA2428-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-03-01 20:02 ` Serge E. Hallyn [not found] ` <20090226173302.GB29439-X9Un+BFzKDI@public.gmane.org> 2009-02-26 18:30 ` Greg Kurz 2009-02-26 22:31 ` Alexey Dobriyan 2009-02-26 16:27 ` Alexey Dobriyan [not found] ` <20090212141014.2cd3d54d.akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org> 2009-02-12 23:04 ` Dave Hansen 2009-02-13 10:53 ` Ingo Molnar 2009-02-13 10:53 ` Ingo Molnar 2009-02-13 10:53 ` Ingo Molnar 2009-02-16 20:51 ` Dave Hansen 2009-02-16 20:51 ` Dave Hansen 2009-02-16 20:51 ` Dave Hansen 2009-02-17 22:23 ` Ingo Molnar 2009-02-17 22:23 ` Ingo Molnar 2009-02-17 22:23 ` Ingo Molnar [not found] ` <20090217222319.GA10546-X9Un+BFzKDI@public.gmane.org> 2009-02-17 22:30 ` Dave Hansen 2009-02-17 22:30 ` Dave Hansen 2009-02-17 22:30 ` Dave Hansen 2009-02-17 22:30 ` Dave Hansen 2009-02-18 0:32 ` Ingo Molnar 2009-02-18 0:32 ` Ingo Molnar 2009-02-18 0:32 ` Ingo Molnar 2009-02-18 0:40 ` Dave Hansen 2009-02-18 0:40 ` Dave Hansen 2009-02-18 5:11 ` Alexey Dobriyan 2009-02-18 5:11 ` Alexey Dobriyan 2009-02-18 5:11 ` Alexey Dobriyan 2009-02-18 18:16 ` Ingo Molnar 2009-02-18 18:16 ` Ingo Molnar [not found] ` <20090218181644.GD19995-X9Un+BFzKDI@public.gmane.org> 2009-02-18 21:27 ` Dave Hansen 2009-02-18 21:27 ` Dave Hansen 2009-02-18 21:27 ` Dave Hansen 2009-02-18 21:27 ` Dave Hansen 2009-02-18 23:15 ` Ingo Molnar 2009-02-18 23:15 ` Ingo Molnar 2009-02-18 23:15 ` Ingo Molnar 2009-02-19 19:06 ` Banning checkpoint (was: Re: What can OpenVZ do?) Alexey Dobriyan 2009-02-19 19:06 ` Alexey Dobriyan 2009-02-19 19:11 ` Dave Hansen 2009-02-19 19:11 ` Dave Hansen 2009-02-24 4:47 ` Alexey Dobriyan 2009-02-24 4:47 ` Alexey Dobriyan 2009-02-24 4:47 ` Alexey Dobriyan 2009-02-24 5:11 ` Dave Hansen 2009-02-24 5:11 ` Dave Hansen 2009-02-24 5:11 ` Dave Hansen 2009-02-24 15:43 ` Serge E. Hallyn 2009-02-24 15:43 ` Serge E. Hallyn 2009-02-24 15:43 ` Serge E. Hallyn 2009-02-24 20:09 ` Alexey Dobriyan 2009-02-24 20:09 ` Alexey Dobriyan 2009-02-24 20:09 ` Alexey Dobriyan [not found] ` <20090224044752.GB3202-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-02-24 5:11 ` Dave Hansen 2009-02-24 4:47 ` Alexey Dobriyan [not found] ` <20090219190637.GA4846-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-02-19 19:11 ` Dave Hansen [not found] ` <20090218231545.GA17524-X9Un+BFzKDI@public.gmane.org> 2009-02-19 19:06 ` Alexey Dobriyan [not found] ` <20090218051123.GA9367-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-02-18 18:16 ` What can OpenVZ do? Ingo Molnar [not found] ` <20090218003217.GB25856-X9Un+BFzKDI@public.gmane.org> 2009-02-18 0:40 ` Dave Hansen [not found] ` <20090213105302.GC4608-X9Un+BFzKDI@public.gmane.org> 2009-02-16 20:51 ` Dave Hansen 2009-02-12 22:17 ` Alexey Dobriyan 2009-02-12 22:17 ` Alexey Dobriyan 2009-02-12 22:17 ` Alexey Dobriyan 2009-02-13 10:27 ` Ingo Molnar 2009-02-13 10:27 ` Ingo Molnar 2009-02-13 10:27 ` Ingo Molnar 2009-02-13 11:32 ` Alexey Dobriyan 2009-02-13 11:32 ` Alexey Dobriyan 2009-02-13 11:45 ` Ingo Molnar 2009-02-13 11:45 ` Ingo Molnar 2009-02-13 22:28 ` Alexey Dobriyan 2009-02-13 22:28 ` Alexey Dobriyan [not found] ` <20090213222818.GA17630-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-03-14 0:04 ` Eric W. Biederman 2009-03-14 0:04 ` Eric W. Biederman 2009-03-14 0:04 ` Eric W. Biederman 2009-03-14 0:26 ` Serge E. Hallyn 2009-03-14 0:26 ` Serge E. Hallyn [not found] ` <m1wsatrmu0.fsf-+imSwln9KH6u2/kzUuoCbdi2O/JbrIOy@public.gmane.org> 2009-03-14 0:26 ` Serge E. Hallyn [not found] ` <20090213114503.GG15679-X9Un+BFzKDI@public.gmane.org> 2009-02-13 22:28 ` Alexey Dobriyan [not found] ` <20090213113248.GA15275-2ev+ksY9ol182hYKe6nXyg@public.gmane.org> 2009-02-13 11:45 ` Ingo Molnar [not found] ` <20090213102732.GB4608-X9Un+BFzKDI@public.gmane.org> 2009-02-13 11:32 ` Alexey Dobriyan [not found] ` <20090212114207.e1c2de82.akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org> 2009-02-12 21:51 ` Dave Hansen 2009-02-12 19:42 ` [RFC v13][PATCH 00/14] Kernel based checkpoint/restart Andrew Morton 2009-02-12 22:57 ` Dave Hansen 2009-02-12 22:57 ` Dave Hansen 2009-02-12 23:05 ` Matt Mackall 2009-02-12 23:05 ` Matt Mackall 2009-02-12 23:05 ` Matt Mackall 2009-02-12 23:13 ` Dave Hansen 2009-02-12 23:13 ` Dave Hansen 2009-02-12 23:13 ` Dave Hansen 2009-02-12 23:13 ` Dave Hansen 2009-02-12 22:57 ` Dave Hansen 2009-02-13 23:28 ` Andrew Morton 2009-02-13 23:28 ` Andrew Morton 2009-02-13 23:28 ` Andrew Morton 2009-02-13 23:28 ` Andrew Morton 2009-02-14 23:08 ` Ingo Molnar 2009-02-14 23:08 ` Ingo Molnar 2009-02-14 23:31 ` Andrew Morton 2009-02-14 23:31 ` Andrew Morton [not found] ` <20090214153124.73132bf9.akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org> 2009-02-14 23:50 ` Ingo Molnar 2009-02-14 23:50 ` Ingo Molnar 2009-02-14 23:50 ` Ingo Molnar [not found] ` <20090214230802.GE20477-X9Un+BFzKDI@public.gmane.org> 2009-02-14 23:31 ` Andrew Morton 2009-02-16 17:37 ` Dave Hansen 2009-02-16 17:37 ` Dave Hansen 2009-02-16 17:37 ` Dave Hansen 2009-03-13 2:45 ` Oren Laadan 2009-03-13 2:45 ` Oren Laadan 2009-03-13 3:57 ` Oren Laadan 2009-03-13 3:57 ` Oren Laadan [not found] ` <49B9C8E0.5080500-eQaUEPhvms7ENvBUuze7eA@public.gmane.org> 2009-03-13 3:57 ` Oren Laadan [not found] ` <20090213152836.0fbbfa7d.akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org> 2009-02-14 23:08 ` Ingo Molnar 2009-02-16 17:37 ` Dave Hansen 2009-03-13 2:45 ` Oren Laadan 2009-02-11 22:14 ` Andrew Morton [not found] ` <bb33bcf20903160526v56f16a82m9192770e228016b1@mail.gmail.com> [not found] ` <1237365510.5381.34.camel@subratamodak.linux.ibm.com> [not found] ` <20090318133943.GA22636@us.ibm.com> [not found] ` <1237385013.5381.58.camel@subratamodak.linux.ibm.com> 2009-06-23 14:48 ` [LTP] " Subrata Modak 2009-06-23 15:02 ` Serge E. Hallyn 2009-06-25 9:10 ` Subrata Modak 2009-09-13 13:16 ` Subrata Modak 2009-09-13 20:06 ` Serge E. Hallyn
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20090303182821.GA4088@us.ibm.com \ --to=serue@us.ibm.com \ --cc=adobriyan@gmail.com \ --cc=akpm@linux-foundation.org \ --cc=containers@lists.linux-foundation.org \ --cc=dave@linux.vnet.ibm.com \ --cc=hpa@zytor.com \ --cc=legoater@free.fr \ --cc=linux-api@vger.kernel.org \ --cc=linux-kernel@vger.kernel.org \ --cc=linux-mm@kvack.org \ --cc=mingo@elte.hu \ --cc=mpm@selenic.com \ --cc=tglx@linutronix.de \ --cc=torvalds@linux-foundation.org \ --cc=viro@zeniv.linux.org.uk \ --cc=xemul@openvz.org \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.