lkml.org 
[lkml]   [2016]   [Aug]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Subject[PATCH v2 0/2] Make core_pattern support namespace
    Date
    This patchset includes following function points:
    1: Let pipe_type core_pattern write dump into container's rootfs
    done by: [PATCH v2 1/2] Limit dump_pipe program's permission to
    init for container
    2: Make separate core_pattern setting for each container
    done by: [PATCH v2 2/2] Make core_pattern support namespace
    3: Compatibility with current system
    also included in: [PATCH v2 2/2] Make core_pattern support namespace
    If container hadn't change core_pattern setting, it will keep
    same setting with host.

    Test:
    1: Pass a test script for each function of this patchset
    # ./test_host
    Set file core_pattern: OK
    ./test_host: line 41: 4237 Segmentation fault (core dumped) "$SCRIPT_BASE_DIR"/make_dump
    Checking dumpfile: OK
    Set file core_pattern: OK
    ./test_host: line 41: 4240 Segmentation fault (core dumped) "$SCRIPT_BASE_DIR"/make_dump
    Checking dump_pipe triggered: OK
    Checking rootfs: OK
    Checking dumpfile: OK
    Checking namespace: OK
    Checking process list: OK
    Checking capabilities: OK
    #
    # /test
    Segmentation fault (core dumped)
    -rw-r--r-- 1 root root 123 Aug 2 09:01 /tmp/dumptest_cap_init
    -rw-r--r-- 1 root root 123 Aug 2 09:01 /tmp/dumptest_cap_self
    -rw-r--r-- 1 root root 5 Aug 2 09:01 /tmp/dumptest_cg_cgpid
    -rw-r--r-- 1 root root 327680 Aug 2 09:01 /tmp/dumptest_guestdump_11_524288000_16_0_0_1470128516
    -rw-r--r-- 1 root root 123 Aug 2 09:01 /tmp/dumptest_ns_init
    -rw-r--r-- 1 root root 123 Aug 2 09:01 /tmp/dumptest_ns_self
    -rw-r--r-- 1 root root 288 Aug 2 09:01 /tmp/dumptest_psresult
    -rw-r--r-- 1 root root 1728 Aug 2 09:01 /tmp/dumptest_rootfs
    Checking dump_pipe triggered: OK
    Checking rootfs: OK
    Checking dumpfile: OK
    Checking namespace: OK
    Checking process list: OK
    Checking cg pids: OK
    Checking capabilities: OK
    2: Pass other test(which is not easy to do in script) by hand.

    Changelog v1(RFC)->v2:
    1: Add [PATCH 2/2] which was todo in [RFC v1].
    2: Pass a test script for each function.
    3: Rebase on top of v4.7.

    Suggested-by: Eric W. Biederman <ebiederm@xmission.com>
    Suggested-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
    Signed-off-by: Zhao Lei <zhaolei@cn.fujitsu.com>

    Zhao Lei (2):
    Limit dump_pipe program's permission to init for container
    Make core_pattern support namespace

    fs/coredump.c | 110 +++++++++++++++++++++++++++++++++++++++---
    include/linux/binfmts.h | 1 +
    include/linux/pid_namespace.h | 3 ++
    kernel/pid.c | 2 +
    kernel/pid_namespace.c | 2 +
    kernel/sysctl.c | 50 +++++++++++++++++--
    6 files changed, 156 insertions(+), 12 deletions(-)

    --
    1.8.5.1



    \
     
     \ /
      Last update: 2016-08-02 12:01    [W:3.389 / U:0.008 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site