Commits · 07897df2c849b2742776cbc752c2eb4cb3a3c54a · Chen Yisong / lxc · GitLab

26 Feb, 2021 40 commits
- attach: stash host uid and host gid in attach_context · 07897df2
  Christian Brauner authored Feb 01, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  07897df2
- attach: document attach_context · 0c2b56fd
  Christian Brauner authored Feb 01, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0c2b56fd
- attach: simplify opening of /proc/self · 58d62c86
  Christian Brauner authored Feb 01, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  58d62c86
- attach: move uid and gid handling to get_attach_context() · c793e9f3
  Christian Brauner authored Feb 01, 2021
```
the less we do in do_attach(), the better.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c793e9f3
- attach: initialize init_pid field to -ESRCH · 48fd08f9
  Christian Brauner authored Feb 01, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  48fd08f9
- attach: unifiy /proc/<init-pid>/status parsing · 18ed7fdc
  Christian Brauner authored Feb 01, 2021
```
and move it out of do_attach(). The less we do in the container's context the
better.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  18ed7fdc
- file_utils: add fdopenat() · f3df6cf0
  Christian Brauner authored Feb 01, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f3df6cf0
- lsm/apparmor: cleanup apparmor_process_label_set() · 7d9e64d8
  Christian Brauner authored Jan 31, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7d9e64d8
- attach: hardening through use of pidfds · 3c6bc307
  Christian Brauner authored Jan 31, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3c6bc307
- attach: file descriptors based LSM handling · a3d5e577
  Christian Brauner authored Jan 31, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a3d5e577
- attach: don't needless check for NULL · 33afc644
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  33afc644
- cgroups: use cleanup macro for consistency · bdc9e48d
  Christian Brauner authored Jan 30, 2021
```
and to prevent future mishaps.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  bdc9e48d
- cgroups: vet parameters more strictly · 0d657d6f
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0d657d6f
- attach: init file descriptors to -EBADF · 6d1b54e7
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6d1b54e7
- attach: move to file descriptor only namespace interactions · ea1b57df
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ea1b57df
- attach: move to file descriptor-only interactions · b23d7e3e
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b23d7e3e
- attach: rework attaching to namespace fds · 25b0a827
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  25b0a827
- attach: remove unneeded assignment · ee026aa0
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ee026aa0
- attach: use STDIN_FILENO instead of hard-coding 0 · 64f221a1
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  64f221a1
- attach: move new_cwd into tighter scope · a8d63270
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a8d63270
- attach: use dummy macros to make it easier to follow sync logic · 305a9b81
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  305a9b81
- attach: introduce sync_wait_fd() and sync_wake_fd() · 83742e7c
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  83742e7c
- sync: make all sync helpers return bool · b41057d3
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b41057d3
- attach: introduce sync_wait_pid() and sync_wake_pid() · 025d7f87
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  025d7f87
- attach: use sync_wait()/sync_wake() where applicable · 909241f9
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  909241f9
- sync: rename startup synchronization macros · c384499c
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c384499c
- sync: export sync_wait() and sync_wake() · b63bc645
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b63bc645
- attach: coding style fixes · 3bc80eeb
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3bc80eeb
- attach: rename attach_clone_payload to attach_payload · 8fc97674
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  8fc97674
- attach: move attach_clone_payload into tighter scope · 12dfb104
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  12dfb104
- attach: s/close/close_prot_errno_disarm/g · b2f90f83
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b2f90f83
- attach: move getcwd() into tighter scope · c86ef3c6
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c86ef3c6
- attach: remove obsolete namespace check · c4f23cad
  Christian Brauner authored Jan 29, 2021
```
We're not going to support kernel without namespaces anyway.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c4f23cad
- attach: fix personality handling · a98b21a0
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a98b21a0
- lsm: s/lsm_init/lsm_init_static/g · 19615bfc
  Christian Brauner authored Jan 28, 2021
```
Make it clear that there is nothing to free here.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  19615bfc
- attach: s/lxc_attach_drop_privs/drop_capabilities/g · 65880ef3
  Christian Brauner authored Jan 28, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  65880ef3
- attach: s/lxc_proc_close_ns_fd/close_nsfds/g · a1200f8d
  Christian Brauner authored Jan 28, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a1200f8d
- attach: add get_attach_context_nsfds() · f10aba1e
  Christian Brauner authored Jan 28, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f10aba1e
- attach: move config init into get_attach_context() · 0edd0756
  Christian Brauner authored Jan 28, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0edd0756
- attach: move get_personality() into get_attach_context() · 2bb514a4
  Christian Brauner authored Jan 28, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2bb514a4