Commits · 38c072c1e28fbb3e61e4bba699f12358ccf3b752 · Chen Yisong / lxc · GitLab

26 Feb, 2021 40 commits
- apparmor: clean up apparmor_process_label_get · 38c072c1
  Aleksa Sarai authored Feb 19, 2021
```
Rather than open-coding file reading and retry semantics and
implementing the path generation logic separately to
apparmor_process_label_fd_get, refactor the logic so that it looks
closer to the pidfd version.

This will make it easier to implement the two-step handling for
/proc/self/attr/apparmor/current and makes this code slightly less
confusing.
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
```
  38c072c1
- conf: don't log garbage · 2ec2c3d2
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2ec2c3d2
- start: fix non-daemonized and application containers · 5842f341
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  5842f341
- conf: use saner mode for console · e0538d90
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e0538d90
- bpf: simplify bpf (device) program freeing · 34c6d6d4
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  34c6d6d4
- bpf: make bpf_program_cgroup_attach() static · e35d7545
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e35d7545
- bpf: prevent double-close · 021833dd
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  021833dd
- cgroups: use close_equal() and free_equal() · 27630009
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  27630009
- memory_utils: add close_equal() and free_equal() · de6dc23c
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  de6dc23c
- lxccontainer: fix reboot logging · bf9d59e0
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  bf9d59e0
- bpf: rework live device cgroup update · 021770b8
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  021770b8
- compiler: fix fallthrough attribute · baadb3cd
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  baadb3cd
- bpf: fix return values in bpf_program_cgroup_attach() · 741c4835
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  741c4835
- bpf: let bpf_list_add_device() take the device list directly · ca5c34f4
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ca5c34f4
- bpf: add and use bpf_cgroup_devices_attach() helper · 277d80c5
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  277d80c5
- cgroups: remove compile-time bpf support detection · 6f5af027
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6f5af027
- bpf: vendor bpf headers · 64aa4275
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  64aa4275
- bpf: handling missing defines · 98a1d49f
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  98a1d49f
- bpf: rework bpf_program_cgroup_detach() · e1c8bab3
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e1c8bab3
- commands: rework bpf devices BPF_F_REPLACE codepath · 0b9ce041
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0b9ce041
- bpf: don't close invalid fd, simply swap · 6e436747
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6e436747
- bpf: use __u32 not uint32_t · 2fa19f29
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2fa19f29
- macro: add swap helper · 61a492b3
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  61a492b3
- commands: replace bpf program on update · a4ade846
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a4ade846
- commands: improve bpf device program management · b76873a5
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b76873a5
- cgroups: improve bpf device program management · 72a27f06
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  72a27f06
- bpf: add helpers for better bpf device program management · 35cca0f8
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  35cca0f8
- cgroups: improve bpf device program handling · 795313a6
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  795313a6
- cgroups: make device cgroups semantics clearer · 7708e2d2
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7708e2d2
- bpf: enable helpers to let caller replace existing bpf programs · 9b7d34a2
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9b7d34a2
- bpf: align struct initialization · 54c17d39
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  54c17d39
- bpf: use return macros · e490acc4
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e490acc4
- conf: introduce lxc_bpf_devices_rule_t type · 789bf479
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  789bf479
- bpf: use cgroup fd directly instead of paths · e0542702
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e0542702
- cgroups: kill monitor_full_path · e4f23a0f
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e4f23a0f
- cgroups: free correct path · c0fb6f36
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c0fb6f36
- utils: fix print_r() debugging helper · 4e771848
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4e771848
- cgroups: fix error values · 5bd52b01
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  5bd52b01
- cgroups: don't overwrite type · 3bb6756d
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3bb6756d
- cgroups: make it extremely obvious that we're transitioning from a flag to a type · b9a9768c
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b9a9768c