Commits · 301a5f8e786c61fb3dcc107a9ae18ae507857895 · Chen Yisong / lxc

19 Feb, 2021 1 commit

apparmor: clean up apparmor_process_label_get · 301a5f8e

authored Feb 19, 2021

Rather than open-coding file reading and retry semantics and
implementing the path generation logic separately to
apparmor_process_label_fd_get, refactor the logic so that it looks
closer to the pidfd version.

This will make it easier to implement the two-step handling for
/proc/self/attr/apparmor/current and makes this code slightly less
confusing.
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

301a5f8e

18 Feb, 2021 35 commits
- Merge pull request #3681 from brauner/2021-02-18/cgroups · 35a68d6d
  Stéphane Graber authored Feb 18, 2021
```
cgroups: fixes & bpf rework
```
  35a68d6d
- Merge pull request #3682 from brauner/2021-02-18/fixes · 599a0c6c
  Stéphane Graber authored Feb 18, 2021
```
console: fixes
```
  599a0c6c
- conf: don't log garbage · f640c818
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f640c818
- start: fix non-daemonized and application containers · f3dff080
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f3dff080
- conf: use saner mode for console · 1dd71c90
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  1dd71c90
- bpf: simplify bpf (device) program freeing · ad755295
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ad755295
- bpf: make bpf_program_cgroup_attach() static · 25903ba9
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  25903ba9
- bpf: prevent double-close · da03dc28
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  da03dc28
- cgroups: use close_equal() and free_equal() · 8c49586f
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  8c49586f
- memory_utils: add close_equal() and free_equal() · 284868b2
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  284868b2
- lxccontainer: fix reboot logging · 3d01776c
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3d01776c
- bpf: rework live device cgroup update · 0a150695
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0a150695
- compiler: fix fallthrough attribute · fd1cf1b1
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  fd1cf1b1
- bpf: fix return values in bpf_program_cgroup_attach() · d202c500
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d202c500
- bpf: let bpf_list_add_device() take the device list directly · 354d21c4
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  354d21c4
- bpf: add and use bpf_cgroup_devices_attach() helper · 7da502de
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7da502de
- cgroups: remove compile-time bpf support detection · 928937b1
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  928937b1
- bpf: vendor bpf headers · 7fc77b1a
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7fc77b1a
- bpf: handling missing defines · 34683e39
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  34683e39
- bpf: rework bpf_program_cgroup_detach() · 7aec2bd3
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7aec2bd3
- commands: rework bpf devices BPF_F_REPLACE codepath · 9a2a38b3
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9a2a38b3
- bpf: don't close invalid fd, simply swap · c38e5c4f
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c38e5c4f
- bpf: use __u32 not uint32_t · 281f42af
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  281f42af
- macro: add swap helper · a38a34f8
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a38a34f8
- commands: replace bpf program on update · 79bc22bd
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  79bc22bd
- commands: improve bpf device program management · 934bb475
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  934bb475
- cgroups: improve bpf device program management · 413e074b
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  413e074b
- bpf: add helpers for better bpf device program management · df1a5345
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  df1a5345
- cgroups: improve bpf device program handling · e41afad5
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e41afad5
- cgroups: make device cgroups semantics clearer · 69885a76
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  69885a76
- bpf: enable helpers to let caller replace existing bpf programs · 0d450efc
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0d450efc
- bpf: align struct initialization · 8828c61a
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  8828c61a
- bpf: use return macros · bee6ee17
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  bee6ee17
- conf: introduce lxc_bpf_devices_rule_t type · 4b9dc703
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4b9dc703
- bpf: use cgroup fd directly instead of paths · 7c37e937
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7c37e937
17 Feb, 2021 4 commits
- cgroups: kill monitor_full_path · 7064ee3a
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7064ee3a
- cgroups: free correct path · 11e5c678
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  11e5c678
- utils: fix print_r() debugging helper · 05fe99f3
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  05fe99f3
- cgroups: fix error values · bce04069
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  bce04069