From: Zhao Lei <zhaolei@cn.fujitsu.com>
To: <linux-kernel@vger.kernel.org>
Cc: containers@lists.linux-foundation.org,
"'Eric W. Biederman'" <ebiederm@xmission.com>,
"'Mateusz Guzik'" <mguzik@redhat.com>,
"'Kamezawa Hiroyuki'" <kamezawa.hiroyu@jp.fujitsu.com>,
"'Stéphane Graber'" <stgraber@ubuntu.com>,
"'Andrei Vagin'" <avagin@gmail.com>
Subject: RE: [PATCH v3 0/3] Make core_pattern support namespace
Date: Tue, 6 Sep 2016 11:45:30 +0800 [thread overview]
Message-ID: <004d01d207f1$1f33d8d0$5d9b8a70$@cn.fujitsu.com> (raw)
In-Reply-To: <cover.1472471585.git.zhaolei@cn.fujitsu.com>
Ping
> -----Original Message-----
> From: Zhao Lei [mailto:zhaolei@cn.fujitsu.com]
> Sent: Monday, August 29, 2016 8:07 PM
> To: linux-kernel@vger.kernel.org
> Cc: containers@lists.linux-foundation.org; Eric W. Biederman
> <ebiederm@xmission.com>; Mateusz Guzik <mguzik@redhat.com>;
> Kamezawa Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com>; Stéphane Graber
> <stgraber@ubuntu.com>; Andrei Vagin <avagin@gmail.com>; Zhao Lei
> <zhaolei@cn.fujitsu.com>
> Subject: [PATCH v3 0/3] Make core_pattern support namespace
>
> This patchset includes following function points:
> 1: Let usermodehelper function possible to set pid namespace
> done by: [PATCH v3 1/3] Make call_usermodehelper_exec possible
> to set pid namespace.
> 2: Let pipe_type core_pattern write dump into container's rootfs
> done by: [PATCH v3 2/3] Limit dump_pipe program's permission to
> init for container.
> 2: Make separate core_pattern setting for each container
> done by: [PATCH v3 3/3] Make core_pattern support namespace
> 3: Compatibility with current system
> also included in: [PATCH v3 3/3] Make core_pattern support namespace
> If container hadn't change core_pattern setting, it will keep
> same setting with host.
>
> Test:
> 1: Pass a test script for each function of this patchset
> ## TEST IN HOST ##
> [root@kerneldev dumptest]# ./test_host
> Set file core_pattern: OK
> ./test_host: line 41: 2366 Segmentation fault (core dumped)
> "$SCRIPT_BASE_DIR"/make_dump
> Checking dumpfile: OK
> Set file core_pattern: OK
> ./test_host: line 41: 2369 Segmentation fault (core dumped)
> "$SCRIPT_BASE_DIR"/make_dump
> Checking dump_pipe triggered: OK
> Checking rootfs: OK
> Checking dumpfile: OK
> Checking namespace: OK
> Checking process list: OK
> Checking capabilities: OK
>
> ## TEST IN GUEST ##
> # ./test
> Segmentation fault (core dumped)
> Checking dump_pipe triggered: OK
> Checking rootfs: OK
> Checking dumpfile: OK
> Checking namespace: OK
> Checking process list: OK
> Checking cg pids: OK
> Checking capabilities: OK
> [ 64.940734] make_dump[2432]: segfault at 0 ip 000000000040049d sp
> 00007ffc4af025f0 error 6 in make_dump[400000+a6000]
> #
> 2: Pass other test(which is not easy to do in script) by hand.
>
> Changelog v2->v3:
> 1: Fix problem of setting pid namespace, pointed out by:
> Andrei Vagin <avagin@gmail.com>
>
> Changelog v1(RFC)->v2:
> 1: Add [PATCH 2/2] which was todo in [RFC v1].
> 2: Pass a test script for each function.
> 3: Rebase on top of v4.7.
>
> Suggested-by: Eric W. Biederman <ebiederm@xmission.com>
> Suggested-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
> Signed-off-by: Zhao Lei <zhaolei@cn.fujitsu.com>
>
> Zhao Lei (3):
> Make call_usermodehelper_exec possible to set pid namespace
> Limit dump_pipe program's permission to init for container
> Make core_pattern support namespace
>
> fs/coredump.c | 126
> ++++++++++++++++++++++++++++++++++++---
> include/linux/binfmts.h | 1 +
> include/linux/kmod.h | 2 +
> include/linux/pid_namespace.h | 3 +
> init/do_mounts_initrd.c | 3 +-
> kernel/kmod.c | 133
> +++++++++++++++++++++++++++++++++++++-----
> kernel/pid.c | 2 +
> kernel/pid_namespace.c | 2 +
> kernel/sysctl.c | 50 ++++++++++++++--
> lib/kobject_uevent.c | 3 +-
> security/keys/request_key.c | 4 +-
> 11 files changed, 296 insertions(+), 33 deletions(-)
>
> --
> 1.8.5.1
prev parent reply other threads:[~2016-09-06 3:45 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-08-29 12:06 [PATCH v3 0/3] Make core_pattern support namespace Zhao Lei
2016-08-29 12:06 ` [PATCH v3 1/3] Make call_usermodehelper_exec possible to set pid namespace Zhao Lei
2016-08-29 16:58 ` kbuild test robot
2016-09-06 9:11 ` Andrei Vagin
2016-09-06 9:35 ` Zhao Lei
2016-08-29 12:06 ` [PATCH v3 2/3] Limit dump_pipe program's permission to init for container Zhao Lei
2016-08-29 12:06 ` [PATCH v3 3/3] Make core_pattern support namespace Zhao Lei
2016-09-06 3:45 ` Zhao Lei [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='004d01d207f1$1f33d8d0$5d9b8a70$@cn.fujitsu.com' \
--to=zhaolei@cn.fujitsu.com \
--cc=avagin@gmail.com \
--cc=containers@lists.linux-foundation.org \
--cc=ebiederm@xmission.com \
--cc=kamezawa.hiroyu@jp.fujitsu.com \
--cc=linux-kernel@vger.kernel.org \
--cc=mguzik@redhat.com \
--cc=stgraber@ubuntu.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).