linux-kernel - [PATCH v7 0/4] cgroups: add pids subsystem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1427855490-5280-1-git-send-email-cyphar@cyphar.com>
Date:	Wed,  1 Apr 2015 13:31:26 +1100
From:	Aleksa Sarai <cyphar@...har.com>
To:	tj@...nel.org, lizefan@...wei.com, mingo@...hat.com,
	peterz@...radead.org
Cc:	richard@....at, fweisbec@...il.com, linux-kernel@...r.kernel.org,
	cgroups@...r.kernel.org, Aleksa Sarai <cyphar@...har.com>
Subject: [PATCH v7 0/4] cgroups: add pids subsystem

This is a futher revised version of the pids v6 patchset[1]. The main
changes include:

* Actually separate the subsystem callback bitmasks for use with
  for_each_subsys_which(needs_*_callback, ...). Also switch from the
  usage of explicit ss_mask checking with for_each_subsys() with
  for_each_subsys_which().

* Pass an opaque cgroup_fork_state structure between the
  cgroup_{can,cancel,post}_fork hooks which stores the current
  task_struct's css_set. The refcount bumping and dropping is handled
  within cgroup_cfs_{get,put}() respectively. This is done so that
  the internal implementation of cgroup_fork_state is not exposed to
  copy_process(), while also allowing the caller to decide when they
  want to snapshot the current css_set.

* Fix a bug where migrating a task between cgroup hierachies would not
  decrement pids.counter in the source hierarchy. This would cause
  limits to be enforced prematurely due to residual charges on the pid
  counter. This is done by adding a detach() callback that alerts a
  subsystem to a task detaching from it.

[1]: https://lkml.org/lkml/2015/3/14/2

Aleksa Sarai (4):
  cgroups: use bitmask to filter for_each_subsys
  cgroups: replace explicit ss_mask checking with for_each_subsys_which
  cgroups: allow a cgroup subsystem to reject a fork
  cgroups: implement the PIDs subsystem

 include/linux/cgroup.h        |  42 +++++-
 include/linux/cgroup_subsys.h |   4 +
 init/Kconfig                  |  16 +++
 kernel/Makefile               |   1 +
 kernel/cgroup.c               | 244 ++++++++++++++++++++++++++-------
 kernel/cgroup_pids.c          | 310 ++++++++++++++++++++++++++++++++++++++++++
 kernel/fork.c                 |  38 +++++-
 7 files changed, 596 insertions(+), 59 deletions(-)
 create mode 100644 kernel/cgroup_pids.c

-- 
2.3.4

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/