linux-kernel - [PATCH 0/6] cgroup: add isolation_root flag, poor man's namespaces for cgroups

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 30 Sep 2011 13:36:19 +0200
From:	Witold Krecicki <wpk@...m.net>
To:	Paul Menage <paul@...lmenage.org>, Li Zefan <lizf@...fujitsu.com>,
	containers@...ts.linux-foundation.org
Cc:	linux-kernel@...r.kernel.org, Witold Krecicki <wpk@...m.net>
Subject: [PATCH 0/6] cgroup: add isolation_root flag, poor man's namespaces for cgroups

This patchset adds namespace-like feature to the existing cgroup system.
When used with a container system (eg. lxc) it allows containers to have
its own cgroup hierarchy, enabling use of 'systemd' (using cgroups) inside 
a container. 

The behaviour is not changed at all when isolation_root flag is not set, 
no additional overhead is added.

I'm really not sure if the 'mount' part (patch 5) is done correctly, please 
review carefully.

Witold Krecicki (6):
  cgroup: add cgroup.isolation_root flag entry to the cgroup filesystem
  cgroup: make 'cgroup_is_descendant' function take cgroup as a
    'descendant of' argument
  cgroup: add 'root' parameter to cgroup_path function
  cgroup: disallow task from leaving cgroup isolated root
  cgroup: make cgroup filesystem mounts performed by task inside
    isolation root see its isolation root as top cgroup
  cgroup: documentation of isolation_root cgroup flag

 Documentation/cgroups/cgroups.txt |   20 +++++++-
 block/blk-cgroup.c                |    2 +-
 include/linux/cgroup.h            |   12 +++-
 kernel/cgroup.c                   |  102 +++++++++++++++++++++++++++++++-----
 kernel/cpuset.c                   |    2 +-
 kernel/sched_debug.c              |    2 +-
 mm/memcontrol.c                   |    6 +-
 7 files changed, 120 insertions(+), 26 deletions(-)

-- 
1.7.4.1

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/