lkml.org 
[lkml]   [2016]   [Aug]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subject[PATCH v2 0/2] Make core_pattern support namespace
Date
This patchset includes following function points:
1: Let pipe_type core_pattern write dump into container's rootfs
done by: [PATCH v2 1/2] Limit dump_pipe program's permission to
init for container
2: Make separate core_pattern setting for each container
done by: [PATCH v2 2/2] Make core_pattern support namespace
3: Compatibility with current system
also included in: [PATCH v2 2/2] Make core_pattern support namespace
If container hadn't change core_pattern setting, it will keep
same setting with host.

Test:
1: Pass a test script for each function of this patchset
# ./test_host
Set file core_pattern: OK
./test_host: line 41: 4237 Segmentation fault (core dumped) "$SCRIPT_BASE_DIR"/make_dump
Checking dumpfile: OK
Set file core_pattern: OK
./test_host: line 41: 4240 Segmentation fault (core dumped) "$SCRIPT_BASE_DIR"/make_dump
Checking dump_pipe triggered: OK
Checking rootfs: OK
Checking dumpfile: OK
Checking namespace: OK
Checking process list: OK
Checking capabilities: OK
#
# /test
Segmentation fault (core dumped)
-rw-r--r-- 1 root root 123 Aug 2 09:01 /tmp/dumptest_cap_init
-rw-r--r-- 1 root root 123 Aug 2 09:01 /tmp/dumptest_cap_self
-rw-r--r-- 1 root root 5 Aug 2 09:01 /tmp/dumptest_cg_cgpid
-rw-r--r-- 1 root root 327680 Aug 2 09:01 /tmp/dumptest_guestdump_11_524288000_16_0_0_1470128516
-rw-r--r-- 1 root root 123 Aug 2 09:01 /tmp/dumptest_ns_init
-rw-r--r-- 1 root root 123 Aug 2 09:01 /tmp/dumptest_ns_self
-rw-r--r-- 1 root root 288 Aug 2 09:01 /tmp/dumptest_psresult
-rw-r--r-- 1 root root 1728 Aug 2 09:01 /tmp/dumptest_rootfs
Checking dump_pipe triggered: OK
Checking rootfs: OK
Checking dumpfile: OK
Checking namespace: OK
Checking process list: OK
Checking cg pids: OK
Checking capabilities: OK
2: Pass other test(which is not easy to do in script) by hand.

Changelog v1(RFC)->v2:
1: Add [PATCH 2/2] which was todo in [RFC v1].
2: Pass a test script for each function.
3: Rebase on top of v4.7.

Suggested-by: Eric W. Biederman <ebiederm@xmission.com>
Suggested-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
Signed-off-by: Zhao Lei <zhaolei@cn.fujitsu.com>

Zhao Lei (2):
Limit dump_pipe program's permission to init for container
Make core_pattern support namespace

fs/coredump.c | 110 +++++++++++++++++++++++++++++++++++++++---
include/linux/binfmts.h | 1 +
include/linux/pid_namespace.h | 3 ++
kernel/pid.c | 2 +
kernel/pid_namespace.c | 2 +
kernel/sysctl.c | 50 +++++++++++++++++--
6 files changed, 156 insertions(+), 12 deletions(-)

--
1.8.5.1



\
 
 \ /
  Last update: 2016-08-02 12:01    [W:0.479 / U:0.500 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site