All of lore.kernel.org
 help / color / mirror / Atom feed
From: Oleg Nesterov <oleg@redhat.com>
To: Andrei Vagin <avagin@gmail.com>
Cc: Pavel Tikhomirov <ptikhomirov@virtuozzo.com>,
	Christian Brauner <brauner@kernel.org>,
	Shuah Khan <shuah@kernel.org>, Kees Cook <kees@kernel.org>,
	Andrew Morton <akpm@linux-foundation.org>,
	David Hildenbrand <david@kernel.org>,
	Ingo Molnar <mingo@redhat.com>,
	Peter Zijlstra <peterz@infradead.org>,
	Juri Lelli <juri.lelli@redhat.com>,
	Vincent Guittot <vincent.guittot@linaro.org>,
	Jan Kara <jack@suse.cz>, Aleksa Sarai <cyphar@cyphar.com>,
	Andrei Vagin <avagin@google.com>, Kirill Tkhai <tkhai@ya.ru>,
	Alexander Mikhalitsyn <alexander@mihalicyn.com>,
	Adrian Reber <areber@redhat.com>,
	linux-kernel@vger.kernel.org, linux-mm@kvack.org,
	linux-kselftest@vger.kernel.org
Subject: Re: [PATCH v3 2/4] pid: check init is created first after idr alloc
Date: Thu, 26 Feb 2026 17:07:17 +0100	[thread overview]
Message-ID: <aaBvtX7px-htZcYW@redhat.com> (raw)
In-Reply-To: <aaBSaIqErOamW0n-@redhat.com>

On 02/26, Oleg Nesterov wrote:
>
> On 02/26, Oleg Nesterov wrote:
> >
> > Now that I look at this code again... Why do we bother to check
> > "pid_allocated & PIDNS_ADDING" at all? copy_process() does
> >
> > 	/* Don't start children in a dying pid namespace */
> > 	if (unlikely(!(ns_of_pid(pid)->pid_allocated & PIDNS_ADDING))) {
> > 		retval = -ENOMEM;
> > 		goto bad_fork_core_free;
> > 	}
> >
> > I am going to send the patch which removes this check from alloc_pid...
> > Need to recheck.
>
> No, we can't remove either of these 2 checks...
>
> This probably deserves another comment in alloc_pid().

something like

	We need this even if copy_process() does the same check. If two
	or more tasks from parent namespace try to inject a child into a
	dead namespace, one of free_pid() calls from the copy_process()
	error path may try to wakeup the possibly freed ns->child_reaper.

perhaps? does it look clear enough?

Oleg.


  reply	other threads:[~2026-02-26 16:07 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-02-24 16:47 [PATCH v3 0/4] pid_namespace: make init creation more flexible Pavel Tikhomirov
2026-02-24 16:47 ` [PATCH v3 1/4] pid_namespace: avoid optimization of accesses to ->child_reaper Pavel Tikhomirov
2026-02-25 12:24   ` Oleg Nesterov
2026-02-24 16:47 ` [PATCH v3 2/4] pid: check init is created first after idr alloc Pavel Tikhomirov
2026-02-25  0:23   ` Andrei Vagin
2026-02-25  9:06     ` Oleg Nesterov
2026-02-25 10:20       ` Pavel Tikhomirov
2026-02-25 13:06         ` Oleg Nesterov
2026-02-25 13:37           ` Pavel Tikhomirov
2026-02-26 12:46       ` Oleg Nesterov
2026-02-26 14:02         ` Oleg Nesterov
2026-02-26 16:07           ` Oleg Nesterov [this message]
2026-02-25  8:47   ` Oleg Nesterov
2026-02-25  8:57     ` Oleg Nesterov
2026-02-24 16:47 ` [PATCH v3 3/4] pid_namespace: allow opening pid_for_children before init was created Pavel Tikhomirov
2026-02-25 12:55   ` Oleg Nesterov
2026-02-24 16:47 ` [PATCH v3 4/4] selftests: Add tests for creating pidns init via setns Pavel Tikhomirov

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=aaBvtX7px-htZcYW@redhat.com \
    --to=oleg@redhat.com \
    --cc=akpm@linux-foundation.org \
    --cc=alexander@mihalicyn.com \
    --cc=areber@redhat.com \
    --cc=avagin@gmail.com \
    --cc=avagin@google.com \
    --cc=brauner@kernel.org \
    --cc=cyphar@cyphar.com \
    --cc=david@kernel.org \
    --cc=jack@suse.cz \
    --cc=juri.lelli@redhat.com \
    --cc=kees@kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-kselftest@vger.kernel.org \
    --cc=linux-mm@kvack.org \
    --cc=mingo@redhat.com \
    --cc=peterz@infradead.org \
    --cc=ptikhomirov@virtuozzo.com \
    --cc=shuah@kernel.org \
    --cc=tkhai@ya.ru \
    --cc=vincent.guittot@linaro.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.