[Devel] [PATCH RHEL7 COMMIT] config.OpenVZ.debug: Enable audit subsystem in config"

2015-10-05 Thread Konstantin Khorenko
The commit is pushed to "branch-rh7-3.10.0-229.7.2.vz7.8.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-229.7.2.vz7.8.3 --> commit 904b8656e056bbbf7734264abf6da9d6385114c9 Author: Konstantin Khorenko Date: Mon Oct 5 19:26:10 2015 +0400 config.Ope

[Devel] [PATCH RHEL7 COMMIT] Revert "config.OpenVZ/audit: Disable audit subsystem in config"

2015-10-05 Thread Konstantin Khorenko
The commit is pushed to "branch-rh7-3.10.0-229.7.2.vz7.8.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-229.7.2.vz7.8.3 --> commit ec0be8578ac45a79292d33ff733a2dc20f35ad1c Author: Konstantin Khorenko Date: Mon Oct 5 19:11:43 2015 +0400 Revert "co

[Devel] [PATCH RHEL7 COMMIT] config.OpenVZ: enable NBD module

2015-10-05 Thread Konstantin Khorenko
The commit is pushed to "branch-rh7-3.10.0-229.7.2.vz7.8.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-229.7.2.vz7.8.3 --> commit a3bbedc65f79d3346191cc14e8e3ef0c733a9d1e Author: Konstantin Khorenko Date: Mon Oct 5 18:23:42 2015 +0400 config.Ope

Re: [Devel] [PATCH rh7 v2] fs: Allow to mount ext4 and binfmt_misc under non-root ns

2015-10-05 Thread Andrew Vagin
On Mon, Oct 05, 2015 at 02:47:49PM +0300, Kirill Tkhai wrote: > https://jira.sw.ru/browse/PSBM-40100 > > v2: Check that user_ns is initial for the ve. > NB: "vzctl enter" does not use initial cred, > so I tested that using /etc/rc.local script. > > Signed-off-by: Kirill Tkhai > --- > fs/binfmt_

[Devel] [PATCH rh7 v2] fs: Allow to mount ext4 and binfmt_misc under non-root ns

2015-10-05 Thread Kirill Tkhai
https://jira.sw.ru/browse/PSBM-40100 v2: Check that user_ns is initial for the ve. NB: "vzctl enter" does not use initial cred, so I tested that using /etc/rc.local script. Signed-off-by: Kirill Tkhai --- fs/binfmt_misc.c |4 +++- fs/ext4/super.c |6 +- 2 files changed, 8 insertion

[Devel] [PATCH rh7] vtty: Make indices to match pcs6 scheme

2015-10-05 Thread Cyrill Gorcunov
In pcs6 vttys are mapped into internal kernel representation in nonobvious way. The /dev/console represent [maj:5,min:1], in turn /dev/tty[0-...] are defined as [maj:4,min:0...], where minor is bijective to symbol postfix of the tty. Internally in the pcs6 kernel any open of /dev/ttyX has been mapp

Re: [Devel] [PATCH rh7] fs: Allow to mount ext4 and binfmt_misc under non-root user ns

2015-10-05 Thread Kirill Tkhai
On 02.10.2015 20:48, Andrey Wagin wrote: > 2015-10-02 20:26 GMT+03:00 Kirill Tkhai : >> https://jira.sw.ru/browse/PSBM-40100 > > We can allow to mount these file systems only if we are in the ve's userns. > A non-root user in a container can create a new userns, but he should > not be able to mo