Re: [PATCH 12/19] kernel: convert css_set.refcount from atomic_t to refcount_t

2017-03-08 Thread Tejun Heo
Hello, On Tue, Mar 07, 2017 at 07:12:51PM +, Reshetova, Elena wrote: > Do you want me to resend or could you modify the patch while applying? Can you please send the updated patch? Thanks! -- tejun -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/

Re: [PATCH 11/19] kernel: convert cgroup_namespace.count from atomic_t to refcount_t

2017-03-06 Thread Tejun Heo
On Mon, Feb 20, 2017 at 12:19:00PM +0200, Elena Reshetova wrote: > refcount_t type and corresponding API should be > used instead of atomic_t when the variable is used as > a reference counter. This allows to avoid accidental > refcounter overflows that might lead to use-after-free > situations. >

Re: [PATCH 12/19] kernel: convert css_set.refcount from atomic_t to refcount_t

2017-03-06 Thread Tejun Heo
Hello, On Mon, Feb 20, 2017 at 12:19:01PM +0200, Elena Reshetova wrote: > @@ -134,10 +135,13 @@ static inline void put_css_set(struct css_set *cset) >* can see it. Similar to atomic_dec_and_lock(), but for an >* rwlock >*/ > - if (atomic_add_unless(&cset->refcount, -1,

Re: [PATCH] capabilities: audit capability use

2016-07-12 Thread Tejun Heo
On Mon, Jul 11, 2016 at 07:47:44PM +, Topi Miettinen wrote: > It's really critical to be able to associate a task in the logs to > cgroups which were valid that time. Or can we infer somehow what cgroups When is "that time"? Without logging all operations, this is meaningless. > a task was t

Re: [PATCH] capabilities: audit capability use

2016-07-11 Thread Tejun Heo
Hello, On Mon, Jul 11, 2016 at 02:14:31PM +0300, Topi Miettinen wrote: > [ 28.443674] audit: type=1327 audit(1468234333.144:520): > proctitle=6D6B6E6F64002F6465762F7A5F343639006300310032 > [ 28.465888] audit: type=1330 audit(1468234333.144:520): > cap_used=0800 > [ 28.482080] a