From: David Laight <David.Laight@ACULAB.COM>
To: "netdev@vger.kernel.org" <netdev@vger.kernel.org>,
"stable@vger.kernel.org" <stable@vger.kernel.org>
Cc: Eric Dumazet <edumazet@google.com>,
"'adobriyan@gmail.com'" <adobriyan@gmail.com>,
"viro@zeniv.linux.org.uk" <viro@zeniv.linux.org.uk>,
"akpm@linux-foundation.org" <akpm@linux-foundation.org>
Subject: RE: setns() affecting other threads in 5.10.132 and 6.0
Date: Mon, 5 Sep 2022 09:54:34 +0000 [thread overview]
Message-ID: <fcf51181f86e417285a101059d559382@AcuMS.aculab.com> (raw)
In-Reply-To: <d9f7a7d26eb5489e93742e57e55ebc02@AcuMS.aculab.com>
7055197705709c59b8ab77e6a5c7d46d61edd96e
Author: Alexey Dobriyan <adobriyan@gmail.com>
Cc: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
c6c75deda813
1fde6f21d90f
> -----Original Message-----
> From: David Laight <David.Laight@ACULAB.COM>
> Sent: 04 September 2022 15:05
>
> Sometime after 5.10.105 (5.10.132 and 6.0) there is a change that
> makes setns(open("/proc/1/ns/net")) in the main process change
> the behaviour of other process threads.
>
> I don't know how much is broken, but the following fails.
>
> Create a network namespace (eg "test").
> Create a 'bond' interface (eg "test0") in the namespace.
>
> Then /proc/net/bonding/test0 only exists inside the namespace.
>
> However if you run a program in the "test" namespace that does:
> - create a thread.
> - change the main thread to in "init" namespace.
> - try to open /proc/net/bonding/test0 in the thread.
> then the open fails.
>
> I don't know how much else is affected and haven't tried
> to bisect (I can't create bonds on my normal test kernel).
I've now bisected it.
Prior to change 7055197705709c59b8ab77e6a5c7d46d61edd96e
proc: fix dentry/inode overinstantiating under /proc/${pid}/net
the setns() had no effect of either thread.
Afterwards both threads see the entries in the init namespace.
However I think that in 5.10.105 the setns() did affect
the thread it was run in.
That might be the behaviour before c6c75deda813.
proc: fix lookup in /proc/net subdirectories after setns(2)
There is also the earlier 1fde6f21d90f
proc: fix /proc/net/* after setns(2)
From the commit messages it does look as though setns() should
change what is seen, but just for the current thread.
So it is currently broken - and has been since 5.18.0-rc4
and whichever stable branches the change was backported to.
David
>
> The test program below shows the problem.
> Compile and run as:
> # ip netns exec test strace -f test_prog /proc/net/bonding/test0
>
> The second open by the child should succeed, but fails.
>
> I can't see any changes to the bonding code, so I suspect
> it is something much more fundamental.
> It might only affect /proc/net, but it might also affect
> which namespace sockets get created in.
> IIRC ls -l /proc/n/task/*/ns gives the correct namespaces.
>
> David
>
>
> #define _GNU_SOURCE
>
> #include <fcntl.h>
> #include <unistd.h>
> #include <poll.h>
> #include <pthread.h>
> #include <sched.h>
>
> #define delay(secs) poll(0,0, (secs) * 1000)
>
> static void *thread_fn(void *file)
> {
> delay(2);
> open(file, O_RDONLY);
>
> delay(5);
> open(file, O_RDONLY);
>
> return NULL;
> }
>
> int main(int argc, char **argv)
> {
> pthread_t id;
>
> pthread_create(&id, NULL, thread_fn, argv[1]);
>
> delay(1);
> open(argv[1], O_RDONLY);
>
> delay(2);
> setns(open("/proc/1/ns/net", O_RDONLY), 0);
>
> delay(1);
> open(argv[1], O_RDONLY);
>
> delay(4);
>
> return 0;
> }
>
> -
> Registered Address Lakeside, Bramley Road, Mount Farm, Milton Keynes, MK1 1PT, UK
> Registration No: 1397386 (Wales)
-
Registered Address Lakeside, Bramley Road, Mount Farm, Milton Keynes, MK1 1PT, UK
Registration No: 1397386 (Wales)
next prev parent reply other threads:[~2022-09-05 9:54 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-09-04 14:05 setns() affecting other threads in 5.10.132 and 6.0 David Laight
2022-09-05 7:11 ` Greg KH
2022-09-05 9:54 ` David Laight [this message]
2022-09-05 17:32 ` Alexey Dobriyan
2022-09-06 8:25 ` David Laight
2022-09-06 10:48 ` David Laight
2022-09-29 9:33 ` setns() affecting other threads in 5.10.132 and 6.0 #forregzbot Thorsten Leemhuis
2022-09-05 10:32 ` setns() affecting other threads in 5.10.132 and 6.0 Thorsten Leemhuis
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=fcf51181f86e417285a101059d559382@AcuMS.aculab.com \
--to=david.laight@aculab.com \
--cc=adobriyan@gmail.com \
--cc=akpm@linux-foundation.org \
--cc=edumazet@google.com \
--cc=netdev@vger.kernel.org \
--cc=stable@vger.kernel.org \
--cc=viro@zeniv.linux.org.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).