Reimplement RLIMIT_MEMLOCK on top of ucounts
authorAlexey Gladkov <legion@kernel.org>
Thu, 22 Apr 2021 12:27:14 +0000 (14:27 +0200)
committerEric W. Biederman <ebiederm@xmission.com>
Fri, 30 Apr 2021 19:14:02 +0000 (14:14 -0500)
commitd7c9e99aee48e6bc0b427f3e3c658a6aba15001e
tree61da3b62f597bf4d3658ce6d3198f7e4ae4ddf37
parentd64696905554e919321e31afc210606653b8f6a4
Reimplement RLIMIT_MEMLOCK on top of ucounts

The rlimit counter is tied to uid in the user_namespace. This allows
rlimit values to be specified in userns even if they are already
globally exceeded by the user. However, the value of the previous
user_namespaces cannot be exceeded.

Changelog

v11:
* Fix issue found by lkp robot.

v8:
* Fix issues found by lkp-tests project.

v7:
* Keep only ucounts for RLIMIT_MEMLOCK checks instead of struct cred.

v6:
* Fix bug in hugetlb_file_setup() detected by trinity.

Reported-by: kernel test robot <oliver.sang@intel.com>
Reported-by: kernel test robot <lkp@intel.com>
Signed-off-by: Alexey Gladkov <legion@kernel.org>
Link: https://lkml.kernel.org/r/970d50c70c71bfd4496e0e8d2a0a32feebebb350.1619094428.git.legion@kernel.org
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
15 files changed:
fs/hugetlbfs/inode.c
include/linux/hugetlb.h
include/linux/mm.h
include/linux/sched/user.h
include/linux/shmem_fs.h
include/linux/user_namespace.h
ipc/shm.c
kernel/fork.c
kernel/ucount.c
kernel/user.c
kernel/user_namespace.c
mm/memfd.c
mm/mlock.c
mm/mmap.c
mm/shmem.c