Andrei Vagin 2b5f9dad32 fs/exec: switch timens when a task gets a new mm ... Changing a time namespace requires remapping a vvar page, so we don't want to allow doing that if any other tasks can use the same mm. Currently, we install a time namespace when a task is created with a new vm. exec() is another case when a task gets a new mm and so it can switch a time namespace safely, but it isn't handled now. One more issue of the current interface is that clone() with CLONE_VM isn't allowed if the current task has unshared a time namespace (timens_for_children doesn't match the current timens). Both these issues make some inconvenience for users. For example, Alexey and Florian reported that posix_spawn() uses vfork+exec and this pattern doesn't work with time namespaces due to the both described issues. LXC needed to workaround the exec() issue by calling setns. In the commit 133e2d3e81 ("fs/exec: allow to unshare a time namespace on vfork+exec"), we tried to fix these issues with minimal impact on UAPI. But it adds extra complexity and some undesirable side effects. Eric suggested fixing the issues properly because here are all the reasons to suppose that there are no users that depend on the old behavior. Cc: Alexey Izbyshev <izbyshev@ispras.ru> Cc: Christian Brauner <brauner@kernel.org> Cc: Dmitry Safonov <0x7f454c46@gmail.com> Cc: "Eric W. Biederman" <ebiederm@xmission.com> Cc: Florian Weimer <fweimer@redhat.com> Cc: Kees Cook <keescook@chromium.org> Suggested-by: "Eric W. Biederman" <ebiederm@xmission.com> Origin-author: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Andrei Vagin <avagin@gmail.com> Signed-off-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/20220921003120.209637-1-avagin@google.com		2022-10-25 15:15:52 -07:00
..
9p
adfs
affs	affs: move from strlcpy with unused retval to strscpy	2022-08-19 13:03:10 +02:00
afs	struct file-related stuff	2022-10-06 17:13:18 -07:00
autofs
befs
bfs
btrfs	tmpfile API change	2022-10-10 19:45:17 -07:00
cachefiles	cachefiles: use vfs_tmpfile_open() helper	2022-09-24 07:00:00 +02:00
ceph	Random number generator fixes for Linux 6.1-rc1.	2022-10-16 15:27:07 -07:00
cifs	smb3: improve SMB3 change notification support	2022-10-15 10:05:53 -05:00
coda
configfs
cramfs
crypto	STATX_DIOALIGN for 6.1	2022-10-03 20:33:41 -07:00
debugfs	debugfs: use DEFINE_SHOW_ATTRIBUTE to define debugfs_regset32_fops	2022-09-24 15:00:48 +02:00
devpts
dlm	Networking changes for 6.1.	2022-10-04 13:38:03 -07:00
ecryptfs	whack-a-mole: constifying struct path *	2022-10-06 17:31:02 -07:00
efivarfs
efs
erofs	for-6.1/block-2022-10-03	2022-10-07 09:19:14 -07:00
exfat	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
exportfs	Change calling conventions for filldir_t	2022-08-17 17:25:04 -04:00
ext2	treewide: use prandom_u32_max() when possible, part 2	2022-10-11 17:42:58 -06:00
ext4	Random number generator fixes for Linux 6.1-rc1.	2022-10-16 15:27:07 -07:00
f2fs	Random number generator fixes for Linux 6.1-rc1.	2022-10-16 15:27:07 -07:00
fat	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
freevxfs
fscache	fscache: add tracepoint when failing cookie	2022-08-09 14:13:59 +01:00
fuse	tmpfile API change	2022-10-10 19:45:17 -07:00
gfs2	gfs2 debugfs improvements	2022-10-10 20:13:22 -07:00
hfs	hfs: replace kmap() with kmap_local_page() in btree.c	2022-09-11 21:55:09 -07:00
hfsplus	hfsplus: convert kmap() to kmap_local_page() in btree.c	2022-09-11 21:55:05 -07:00
hostfs	hostfs: move from strlcpy with unused retval to strscpy	2022-09-19 22:46:25 +02:00
hpfs
hugetlbfs	tmpfile API change	2022-10-10 19:45:17 -07:00
iomap	iomap: add a tracepoint for mappings returned by map_blocks	2022-10-02 11:42:19 -07:00
isofs	- hfs and hfsplus kmap API modernization from Fabio Francesco	2022-10-12 11:00:22 -07:00
jbd2	- Yu Zhao's Multi-Gen LRU patches are here. They've been under test in	2022-10-10 17:53:04 -07:00
jffs2	mtd: always initialize 'stats' in struct mtd_oob_ops	2022-09-21 10:38:07 +02:00
jfs	Folio changes for 6.0	2022-08-03 10:35:43 -07:00
kernfs	kernfs: fix use-after-free in __kernfs_remove	2022-09-24 13:52:27 +02:00
ksmbd	24 ksmbd server fixes	2022-10-07 08:19:26 -07:00
lockd	SUNRPC: Parametrize how much of argsize should be zeroed	2022-09-26 14:02:42 -04:00
minix	vfs: open inside ->tmpfile()	2022-09-24 07:00:00 +02:00
netfs
nfs	NFS Client Updates for Linux 6.1	2022-10-13 09:58:42 -07:00
nfs_common
nfsd	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
nilfs2	Five hotfixes - three for nilfs2, two for MM. For are cc:stable, one is	2022-10-12 11:16:58 -07:00
nls
notify	Merge tag 'fsnotify-for_v6.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs	2022-10-07 08:28:50 -07:00
ntfs	- hfs and hfsplus kmap API modernization from Fabio Francesco	2022-10-12 11:00:22 -07:00
ntfs3	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
ocfs2	- hfs and hfsplus kmap API modernization from Fabio Francesco	2022-10-12 11:00:22 -07:00
omfs
openpromfs
orangefs	Orangefs: change iterate to iterate_shared	2022-10-13 09:56:14 -07:00
overlayfs	tmpfile API change	2022-10-10 19:45:17 -07:00
proc	- hfs and hfsplus kmap API modernization from Fabio Francesco	2022-10-12 11:00:22 -07:00
pstore	Revert "pstore: migrate to crypto acomp interface"	2022-09-30 08:16:06 -07:00
qnx4
qnx6	fs/qnx6: delete unnecessary checks before brelse()	2022-09-11 21:55:07 -07:00
quota	quota: Add more checking after reading from quota file	2022-09-29 15:37:30 +02:00
ramfs	tmpfile API change	2022-10-10 19:45:17 -07:00
reiserfs	- hfs and hfsplus kmap API modernization from Fabio Francesco	2022-10-12 11:00:22 -07:00
romfs
smbfs_common	smb3: define missing create contexts	2022-10-05 01:55:27 -05:00
squashfs	squashfs: don't call kmalloc in decompressors	2022-08-28 14:02:45 -07:00
sysfs
sysv
tracefs	tracefs: Only clobber mode/uid/gid on remount if asked	2022-09-08 17:10:54 -04:00
ubifs	Random number generator fixes for Linux 6.1-rc1.	2022-10-16 15:27:07 -07:00
udf	tmpfile API change	2022-10-10 19:45:17 -07:00
ufs	ufs: replace ll_rw_block()	2022-09-11 20:26:07 -07:00
unicode
vboxsf
verity	for-6.1-tag	2022-10-06 17:36:48 -07:00
xfs	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
zonefs	New code for 6.0:	2022-08-11 13:11:49 -07:00
aio.c	aio: use atomic_try_cmpxchg in __get_reqs_available	2022-09-11 21:55:08 -07:00
anon_inodes.c	dynamic_dname(): drop unused dentry argument	2022-08-20 11:34:04 -04:00
attr.c	vfs: Check the truncate maximum size in inode_newsize_ok()	2022-08-08 10:39:29 -07:00
bad_inode.c	vfs: open inside ->tmpfile()	2022-09-24 07:00:00 +02:00
binfmt_elf.c	fs/binfmt_elf: Fix memory leak in load_elf_binary()	2022-10-25 15:11:21 -07:00
binfmt_elf_fdpic.c
binfmt_elf_test.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
buffer.c	- hfs and hfsplus kmap API modernization from Fabio Francesco	2022-10-12 11:00:22 -07:00
char_dev.c
compat_binfmt_elf.c
coredump.c	- Yu Zhao's Multi-Gen LRU patches are here. They've been under test in	2022-10-10 17:53:04 -07:00
d_path.c	d_path.c: typo fix...	2022-08-20 11:34:33 -04:00
dax.c	Merge branch 'for-6.0/dax' into libnvdimm-fixes	2022-09-24 18:14:12 -07:00
dcache.c	tmpfile API change	2022-10-10 19:45:17 -07:00
direct-io.c	block: remove PSI accounting from the bio layer	2022-09-20 08:24:38 -06:00
drop_caches.c
eventfd.c	eventfd: guard wake_up in eventfd fs calls as well	2022-09-21 10:30:42 -06:00
eventpoll.c	epoll: use try_cmpxchg in list_add_tail_lockless	2022-09-11 21:55:07 -07:00
exec.c	fs/exec: switch timens when a task gets a new mm	2022-10-25 15:15:52 -07:00
fcntl.c
fhandle.c	do_sys_name_to_handle(): constify path	2022-09-01 17:36:39 -04:00
file.c
file_table.c	locks: fix TOCTOU race when granting write lease	2022-08-16 10:59:54 -04:00
filesystems.c
fs-writeback.c	fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE	2022-09-29 23:02:00 -04:00
fs_context.c
fs_parser.c
fs_pin.c
fs_struct.c
fs_types.c
fsopen.c
init.c
inode.c	saner inode_init_always()	2022-10-06 16:49:00 -07:00
internal.h	whack-a-mole: constifying struct path *	2022-10-06 17:31:02 -07:00
ioctl.c
Kconfig	hugetlb: make hugetlb depends on SYSFS or SYSCTL	2022-09-11 20:26:10 -07:00
Kconfig.binfmt	Xtensa updates for v6.1	2022-10-10 14:21:11 -07:00
kernel_read_file.c
libfs.c	fs: uninline inode_maybe_inc_iversion()	2022-10-03 14:21:43 -07:00
locks.c	locks: Fix dropped call to ->fl_release_private()	2022-08-17 15:08:58 -04:00
Makefile	a.out: Remove the a.out implementation	2022-09-27 07:11:02 -07:00
mbcache.c	mbcache: Avoid nesting of cache->c_list_lock under bit locks	2022-09-30 23:46:52 -04:00
mount.h
mpage.c	Folio changes for 6.0	2022-08-03 10:35:43 -07:00
namei.c	tmpfile API change	2022-10-10 19:45:17 -07:00
namespace.c	fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts	2022-08-17 11:27:11 +02:00
no-block.c
nsfs.c	dynamic_dname(): drop unused dentry argument	2022-08-20 11:34:04 -04:00
open.c	struct file-related stuff	2022-10-06 17:13:18 -07:00
pipe.c	dynamic_dname(): drop unused dentry argument	2022-08-20 11:34:04 -04:00
pnode.c
pnode.h
posix_acl.c	- Yu Zhao's Multi-Gen LRU patches are here. They've been under test in	2022-10-10 17:53:04 -07:00
proc_namespace.c
read_write.c	[coredump] don't use __kernel_write() on kmap_local_page()	2022-09-28 14:28:40 -04:00
readdir.c	Change calling conventions for filldir_t	2022-08-17 17:25:04 -04:00
remap_range.c	- The usual batches of cleanups from Baoquan He, Muchun Song, Miaohe	2022-08-05 16:32:45 -07:00
select.c
seq_file.c
signalfd.c
splice.c	iter_to_pipe(): switch to advancing variant of iov_iter_get_pages()	2022-08-08 22:37:23 -04:00
stack.c
stat.c	vfs: support STATX_DIOALIGN on block devices	2022-09-11 19:47:12 -05:00
statfs.c
super.c	fscrypt: stop using keyrings subsystem for fscrypt_master_key	2022-09-21 20:33:06 -07:00
sync.c
sysctls.c
timerfd.c
userfaultfd.c	- Yu Zhao's Multi-Gen LRU patches are here. They've been under test in	2022-10-10 17:53:04 -07:00
utimes.c
xattr.c	xattr: always us is_posix_acl_xattr() helper	2022-09-21 12:01:29 +02:00