Commits · 4475fabb0edf30b1a4d269373d63d6401a67bbd1 · Chen Yisong / lxc · GitLab

01 Feb, 2021 4 commits
- attach: move uid and gid handling to get_attach_context() · 4475fabb
  Christian Brauner authored Feb 01, 2021
```
the less we do in do_attach(), the better.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4475fabb
- attach: initialize init_pid field to -ESRCH · bac33ebd
  Christian Brauner authored Feb 01, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  bac33ebd
- attach: unifiy /proc/<init-pid>/status parsing · 9680e7b0
  Christian Brauner authored Feb 01, 2021
```
and move it out of do_attach(). The less we do in the container's context the
better.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9680e7b0
- file_utils: add fdopenat() · a60d8c4e
  Christian Brauner authored Feb 01, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a60d8c4e
31 Jan, 2021 5 commits
- Merge pull request #3641 from brauner/2021-01-30/fixes · 326bb02c
  Stéphane Graber authored Jan 31, 2021
```
attach: pidfd-based hardening and file-descriptor-only LSM interactions
```
  326bb02c
- lsm/apparmor: cleanup apparmor_process_label_set() · fbf281d3
  Christian Brauner authored Jan 31, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  fbf281d3
- attach: hardening through use of pidfds · d8764025
  Christian Brauner authored Jan 31, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d8764025
- attach: file descriptors based LSM handling · afc691a0
  Christian Brauner authored Jan 31, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  afc691a0
- cgroups: align methods · ca76baed
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ca76baed
30 Jan, 2021 20 commits
- Merge pull request #3639 from brauner/2021-01-28/fixes · ee4aad1e
  Stéphane Graber authored Jan 30, 2021
```
cgroups: fixes and improvements
```
  ee4aad1e
- cgroups: use PTR_TO_U64() · 7d2f7ae1
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7d2f7ae1
- attach: don't needless check for NULL · 640952e5
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  640952e5
- log: add lxc_log_trace() helper · de96cd60
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  de96cd60
- cgroups: use bpf log when logging at trace level · 4a888de1
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4a888de1
- seccomp: use lxc_log_get_level() · 25a8b256
  Christian Brauner authored Jan 30, 2021
```
This will now enable LXD users to dump the seccomp filter in the log when
logging at TRACE level.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  25a8b256
- log: rework lxc_log_get_level() · 09c8768a
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  09c8768a
- cgroups: use cleanup macro for consistency · 0450b7ce
  Christian Brauner authored Jan 30, 2021
```
and to prevent future mishaps.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0450b7ce
- cgroups: vet parameters more strictly · d5d4b98e
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d5d4b98e
- seccomp: use lxc_log_get_fd() · 0464dec3
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0464dec3
- log: add lxc_log_get_fd() · c422f3af
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c422f3af
- log: remove pointless inline · ef1a597f
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ef1a597f
- cgroups: tweak cgroup initialization · 6e214b74
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6e214b74
- cgroups: use zalloc · c5d0238a
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c5d0238a
- cgroups: ensure all memory is zeroed · 954d61c5
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  954d61c5
- cgroups: don't initiliaze NULL log · ca679784
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ca679784
- cgroups: coding style fixes · f3ef7e67
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f3ef7e67
- croups: improve __do_bpf_program_free · 7af21d29
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7af21d29
- cgroups: bpf fixes · dcbb9e99
  Christian Brauner authored Jan 30, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  dcbb9e99
- Merge pull request #3638 from brauner/2021-01-28/fixes · 0e24c560
  Stéphane Graber authored Jan 29, 2021
```
attach: improve attach codepaths
```
  0e24c560
29 Jan, 2021 11 commits
- attach: init file descriptors to -EBADF · 581b849a
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  581b849a
- attach: move to file descriptor only namespace interactions · 25c659d5
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  25c659d5
- attach: move to file descriptor-only interactions · c538837d
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c538837d
- attach: rework attaching to namespace fds · 39b3b69b
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  39b3b69b
- attach: remove unneeded assignment · 3a24f14e
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3a24f14e
- attach: use STDIN_FILENO instead of hard-coding 0 · 5d2b46fb
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  5d2b46fb
- attach: move new_cwd into tighter scope · 26abd7ea
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  26abd7ea
- attach: use dummy macros to make it easier to follow sync logic · f8e88e94
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f8e88e94
- attach: introduce sync_wait_fd() and sync_wake_fd() · 6e36c297
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6e36c297
- sync: make all sync helpers return bool · 6e48e7c5
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6e48e7c5
- attach: introduce sync_wait_pid() and sync_wake_pid() · 2b695e5f
  Christian Brauner authored Jan 29, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2b695e5f