The commit is pushed to "branch-rh9-5.14.vz9.1.x-ovz" and will appear at
https://src.openvz.org/scm/ovz/vzkernel.git
after ark-5.14
------>
commit 9e6cb2ce57fa717cc2eab7f33e4d52ac9a211b27
Author: Konstantin Khorenko <khore...@virtuozzo.com>
Date: Tue Sep 28 19:31:05 2021 +0300
sysctl: make hotplug, printk and mmap_min_addr accessible inside a CT
(cherry picked from commit 22b9103caf1bb101768963fb9f66c5fe0def5ee3)
Signed-off-by: Konstantin Khorenko <khore...@virtuozzo.com>
(cherry picked from vz8 commit ecce1f4ba959a818b29403c38eeb39eae184aff9)
Signed-off-by: Pavel Tikhomirov <ptikhomi...@virtuozzo.com>
---
kernel/sysctl.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/kernel/sysctl.c b/kernel/sysctl.c
index 1b203142e645..50425f90433d 100644
--- a/kernel/sysctl.c
+++ b/kernel/sysctl.c
@@ -2164,7 +2164,7 @@ static struct ctl_table kern_table[] = {
.procname = "hotplug",
.data = &uevent_helper,
.maxlen = UEVENT_HELPER_PATH_LEN,
- .mode = 0644,
+ .mode = 0644 | S_ISVTX,
.proc_handler = proc_dostring,
},
#endif
@@ -2294,7 +2294,7 @@ static struct ctl_table kern_table[] = {
.procname = "printk",
.data = &console_loglevel,
.maxlen = 4*sizeof(int),
- .mode = 0644,
+ .mode = 0644 | S_ISVTX,
.proc_handler = proc_dointvec,
},
{
@@ -3119,7 +3119,7 @@ static struct ctl_table vm_table[] = {
.procname = "mmap_min_addr",
.data = &dac_mmap_min_addr,
.maxlen = sizeof(unsigned long),
- .mode = 0644,
+ .mode = 0644 | S_ISVTX,
.proc_handler = mmap_min_addr_handler,
},
#endif
_______________________________________________
Devel mailing list
Devel@openvz.org
https://lists.openvz.org/mailman/listinfo/devel
