[Devel] [patch rh7] KEYS: Fix race between read and revoke

2016-02-03 Thread Vasily Averin
commit b4a1b4f5047e4f54e194681125c74c0aa64d637d Author: David Howells Date: Fri Dec 18 01:34:26 2015 + KEYS: Fix race between read and revoke This fixes CVE-2015-7550. There's a race between keyctl_read() and keyctl_revoke(). If the revoke happens between keyctl_read() ch

[Devel] [patch rh7] KEYS: Fix race between read and revoke

2016-02-03 Thread Vasily Averin
commit b4a1b4f5047e4f54e194681125c74c0aa64d637d Author: David Howells Date: Fri Dec 18 01:34:26 2015 + KEYS: Fix race between read and revoke This fixes CVE-2015-7550. There's a race between keyctl_read() and keyctl_revoke(). If the revoke happens between keyctl_read() ch

Re: [Devel] [PATCH rh7 v2 2/3] ve/fs/sync: per containter sync and syncfs

2016-02-03 Thread Vladimir Davydov
On Tue, Feb 02, 2016 at 06:51:55PM +0300, Andrey Ryabinin wrote: ... > @@ -1427,17 +1440,8 @@ static void wait_sb_inodes(struct super_block *sb) > iput(old_inode); > } > > -/** > - * writeback_inodes_sb_nr - writeback dirty inodes from given super_block > - * @sb: the superblock > - * @nr

[Devel] [PATCH rh7 1/2] KVM: x86: removing unused variable

2016-02-03 Thread Vasily Averin
commit 2da29bccc5045ea10c70cb3a69be68fd0b66 Author: Saurabh Sengar Date: Fri Oct 30 12:56:11 2015 +0530 KVM: x86: removing unused variable removing unused variables, found by coccinelle Signed-off-by: Saurabh Sengar Signed-off-by: Paolo Bonzini Signed-off-by: Vasily Ave

[Devel] [PATCH rh7 2/2] KVM: x86: Reload pit counters for all channels when restoring state

2016-02-03 Thread Vasily Averin
commit 0185604c2d82c560dab2f2933a18f797e74ab5a8 Author: Andrew Honig Date: Wed Nov 18 14:50:23 2015 -0800 KVM: x86: Reload pit counters for all channels when restoring state Currently if userspace restores the pit counters with a count of 0 on channels 1 or 2 and the guest attempts

Re: [Devel] [PATCH rh7 v2 2/3] ve/fs/sync: per containter sync and syncfs

2016-02-03 Thread Andrey Ryabinin
On 02/03/2016 03:12 PM, Vladimir Davydov wrote: >> ub = get_exec_ub(); >> @@ -246,15 +252,18 @@ SYSCALL_DEFINE0(sync) >> fsb = __ve_fsync_behavior(ve); >> if (fsb == FSYNC_NEVER) >> goto skip; >> + >> +if (fsb == FSYNC_FILTERED) >>

Re: [Devel] [PATCH rh7 v2 2/3] ve/fs/sync: per containter sync and syncfs

2016-02-03 Thread Andrey Ryabinin
On 02/03/2016 04:49 PM, Andrey Ryabinin wrote: >> >> If sync_ub != NULL, you sync inodes and bdevs twice, here and in >> sync_filesystems_ve. Better move all the iterate_supers/bdevs from here >> to sync_filesystems under !ub branch? >> > > I'm thinking about something like this: > > @@ -255,1

Re: [Devel] [PATCH rh7 v2 2/3] ve/fs/sync: per containter sync and syncfs

2016-02-03 Thread Vladimir Davydov
On Wed, Feb 03, 2016 at 04:49:43PM +0300, Andrey Ryabinin wrote: > > > On 02/03/2016 03:12 PM, Vladimir Davydov wrote: > > >>ub = get_exec_ub(); > >> @@ -246,15 +252,18 @@ SYSCALL_DEFINE0(sync) > >>fsb = __ve_fsync_behavior(ve); > >>if (fsb == FSYNC_NEVER) > >>

[Devel] [PATCH RHEL7 COMMIT] ve/coredump: virtualize kernel.core_pattern sysctl

2016-02-03 Thread Konstantin Khorenko
The commit is pushed to "branch-rh7-3.10.0-327.3.1-vz7.10.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-327.3.1.vz7.10.9 --> commit ebb9ccc798cce53881de630e5c0c9ab67e2c3175 Author: Pavel Tikhomirov Date: Wed Feb 3 19:05:24 2016 +0400 ve/coredump

[Devel] [PATCH RHEL7 COMMIT] ve/sysctl: add macro sysctl_virtual to unify sysctl's virtualization

2016-02-03 Thread Konstantin Khorenko
The commit is pushed to "branch-rh7-3.10.0-327.3.1-vz7.10.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-327.3.1.vz7.10.9 --> commit fc7d5ab7dd9c69644cccf6d12b77f9391cf6 Author: Pavel Tikhomirov Date: Wed Feb 3 19:05:21 2016 +0400 ve/sysctl:

[Devel] [PATCH RHEL7 COMMIT] ms/keys: Fix race between read and revoke

2016-02-03 Thread Konstantin Khorenko
The commit is pushed to "branch-rh7-3.10.0-327.3.1-vz7.10.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-327.3.1.vz7.10.9 --> commit ae7683f77d40269530da4424bb66df9822f3ed19 Author: Vasily Averin Date: Wed Feb 3 19:18:29 2016 +0400 ms/keys: Fix r

[Devel] [PATCH RHEL7 COMMIT] ms/KVM: x86: Reload pit counters for all channels when restoring state

2016-02-03 Thread Konstantin Khorenko
The commit is pushed to "branch-rh7-3.10.0-327.3.1-vz7.10.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-327.3.1.vz7.10.9 --> commit f54141ccee217ed9609ba655d63459037d3193e2 Author: Andrew Honig Date: Wed Feb 3 19:24:11 2016 +0400 ms/KVM: x86: Re

Re: [Devel] [PATCH RH7 2/2] backport: x86/mm/numa: Fix kernel stack corruption in numa_init()->numa_clear_kernel_node_hotplug()

2016-02-03 Thread Konstantin Khorenko
Also presents in RH7.2 kernel-3.10.0-327.3.1.el7 kernel. -- Best regards, Konstantin Khorenko, Virtuozzo Linux Kernel Team On 01/30/2016 03:01 PM, Dmitry Safonov wrote: From: Dave Young commit 52c7ec2a1ef5ca9def7982ddcbdf8cc2798b9636 x86/mm/numa: Fix kernel stack corruption in numa_init()->n

Re: [Devel] [PATCH RH7 1/2] backport: arch/x86/mm/numa.c: fix boot failure when all nodes are hotpluggable

2016-02-03 Thread Konstantin Khorenko
Already presents in RH7.2 kernel-3.10.0-327.3.1.el7 kernel. -- Best regards, Konstantin Khorenko, Virtuozzo Linux Kernel Team On 01/30/2016 03:01 PM, Dmitry Safonov wrote: From: Xishi Qiu commit bd5cfb8977fbb49d9350f7c81cf1516142e35a6a arch/x86/mm/numa.c: fix boot failure when all nodes are h

[Devel] JFYI: vz7.10.x kernels are stable

2016-02-03 Thread Konstantin Khorenko
This is just a short notice: vz7.10.x kernels (rebased onto RHEL7.2 kernel) are stable enough and will be included into Virtuozzo builds. So please since now use *branch-rh7-3.10.0-327.3.1-vz7.10.x-ovz* branch as a reference point for your patches. Thank you.* * -- Best regards, Konstantin

[Devel] [PATCH rh7 v3 2/3] ve/fs/sync: per containter sync and syncfs

2016-02-03 Thread Andrey Ryabinin
The implementation is straightforward, since we already have per container writeback. Sync just get user beancounter and launches writeback work for it. https://jira.sw.ru/browse/PSBM-39583 Signed-off-by: Andrey Ryabinin --- fs/fs-writeback.c | 51 +++-

[Devel] [PATCH rh7 v3 1/3] ve/fs/writeback: filter per-container inodes earlier

2016-02-03 Thread Andrey Ryabinin
Filter inodes before should happen befor the check for I_SYNC flag. During per-container writeback we don't wan't to requeue inodes from other containers. https://jira.sw.ru/browse/PSBM-39583 Signed-off-by: Andrey Ryabinin --- fs/fs-writeback.c | 13 +++-- 1 file changed, 7 insertions(+

[Devel] [PATCH rh7 v3 3/3] ve/fs/sync: don't skip dirty metatdata on filtered sync

2016-02-03 Thread Andrey Ryabinin
Port of diff-ubc-dont-skip-dirty-metadata-on-filtered-sync patch from PCS6. Don't skip dirty metadata during per container sync[fs]. https://jira.sw.ru/browse/PSBM-39583 Signed-off-by: Andrey Ryabinin --- fs/fs-writeback.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/

[Devel] [NEW KERNEL] 3.10.0-327.3.1.vz7.10.10 (rhel7)

2016-02-03 Thread builder
Changelog: OpenVZ kernel rh7-3.10.0-327.3.1.vz7.10.10 * kernel.core_pattern sysctl virtualized * keys: Fix race between read and revoke (CVE-2015-7550) * KVM: x86: Reload pit counters for all channels when restoring state (CVE-2015-7513) Generated changelog: * Thu Feb 04 2016 Konstantin Kh

[Devel] [PATCH RHEL7 COMMIT] ms/KVM: x86: removing unused variable

2016-02-03 Thread Konstantin Khorenko
The commit is pushed to "branch-rh7-3.10.0-327.3.1-vz7.10.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-327.3.1.vz7.10.9 --> commit 851a2f9ca372842c6467d93ff502b247c1cfe222 Author: Saurabh Sengar Date: Wed Feb 3 19:24:10 2016 +0400 ms/KVM: x86: