- 12 Oct, 2018 6 commits
-
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
2xsec authored
Signed-off-by:2xsec <dh48.jeong@samsung.com>
-
2xsec authored
Signed-off-by: -
2xsec authored
Signed-off-by: -
2xsec authored
Signed-off-by:
- 08 Oct, 2018 8 commits
-
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Make use of the new socket option, NETLINK_DUMP_STRICT_CHK, that userspace can use via setsockopt to request strict checking of headers and attributes on dump requests. To get dump features such as kernel side filtering based on data in the header or attributes appended to the dump request, userspace must call setsockopt() for NETLINK_DUMP_STRICT_CHK and a non-zero value. This is necessary to make use of the IFA_TARGET_NETNSID property. Signed-off-by: -
Christian Brauner authored
This allows to set netlink socket properties. Signed-off-by: -
Christian Brauner authored
This adds support for the new socket option, NETLINK_DUMP_STRICT_CHK, that userspace can use via setsockopt to request strict checking of headers and attributes on dump requests. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
2xsec authored
Signed-off-by: -
2xsec authored
Signed-off-by:
-
- 07 Oct, 2018 26 commits
-
-
Christian Brauner authored
Since we introduced clean exit from the mainloop when SIGTERM is sent we changed the signal mask of the parent process but we never reset the signal mask for the actual attached process. Closes #399. Fixes: 1349e92e ("console: exit mainloop on SIGTERM") Signed-off-by:
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
We can just fail on open() and not waste an additional syscall. Signed-off-by: -
2xsec authored
Signed-off-by: -
2xsec authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
If the value of cgroup.clone_children in our immediate ancestor cgroup is 0 then the cpuset of any cgroups we create in subtrees will be empty and hence we'll copy an empty cpuset at which point we cannot enter the cpuset cgroup. Avoid this problem by initializing cgroup.clone_children to 1 an copying the initialized cpuset of our immediate ancestor. Note, that the cpuset of our immediate ancestor must be initialized and ours as well otherwise we couldn't be located in this cgroup. Signed-off-by:
-
