[Devel] [PATCH vz9] Revert "userns: associate user_struct with the user_namespace"

2023-03-06 Thread Nikolay Borisov
In current vz9 kernel ucounts are already "virtualized" since they are tracked per-userns/per-uid. Let's remove the virtuozzo code which adds yet another level and breaks code which is using setuid. This fixes a kernel warning which was generated when running user08 test from ltp. The reason for th

Re: [Devel] [PATCH vz9] Revert "userns: associate user_struct with the user_namespace"

2023-03-06 Thread Pavel Tikhomirov
After this revert user_struct->pipe_bufs (and obviousely other fields =) ) becomes shared between root user of container and root user on host, which is likely not what we want, as one ct can make all node starve for pipe buffers now, see PIPE_MIN_DEF_BUFFERS case in alloc_pipe_info(). I don't

Re: [Devel] [PATCH vz9] Revert "userns: associate user_struct with the user_namespace"

2023-03-06 Thread nb
On 7.03.23 г. 5:23 ч., Pavel Tikhomirov wrote: After this revert user_struct->pipe_bufs (and obviousely other fields =) ) becomes shared between root user of container and root user on host, which is likely not what we want, as one ct can make all node starve for pipe buffers now, see PIPE_MI