From mboxrd@z Thu Jan 1 00:00:00 1970 From: Lukasz Pawelczyk Subject: Re: [RFC] lsm: namespace hooks Date: Thu, 27 Nov 2014 16:24:22 +0100 Message-ID: <1417101862.1805.23.camel@samsung.com> References: <1417096866-25563-1-git-send-email-l.pawelczyk@samsung.com> <1417096866-25563-2-git-send-email-l.pawelczyk@samsung.com> <1417098928.1805.15.camel@samsung.com> <54773757.8090905@nod.at> <1417099455.1805.17.camel@samsung.com> <54773CE7.5040303@nod.at> <1417101060.1805.21.camel@samsung.com> <547740A0.4040700@nod.at> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-reply-to: <547740A0.4040700-/L3Ra7n9ekc@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: Richard Weinberger Cc: Vladimir Davydov , Miklos Szeredi , Lukasz Pawelczyk , LKML , David Howells , Mark Rustad , Matthew Dempsky , Daeseok Youn , Ingo Molnar , Jeff Kirsher , David Rientjes , Alex Thorlton , Juri Lelli , Kees Cook , Nikolay Aleksandrov , Dario Faggioli , Al Viro , James Morris , "open list:ABI/API" , Linux Containers , Oleg Nesterov , Paul Moore , linux-security-module@vger. List-Id: containers.vger.kernel.org On czw, 2014-11-27 at 16:17 +0100, Richard Weinberger wrote: > Am 27.11.2014 um 16:11 schrieb Lukasz Pawelczyk: > > On czw, 2014-11-27 at 16:01 +0100, Richard Weinberger wrote: > >> Am 27.11.2014 um 15:44 schrieb Lukasz Pawelczyk: > >>> True, the last one is 0x80000000. I did not notice that. Thanks for > >>> pointing out. > >> > >> Isn't this CLONE_IO? > > > > Yes, I was merely noticing out loud that it's the last bit of 32bit. > > > > After close look though the 0x00001000 appears to be unused > > This was CLONE_PID. > I'm not sure if we can reuse this. man 2 clone states "It disappeared in Linux 2.5.16.". > Maybe one of the CC'd parties can tell more... Would really like someone to comment on this. I'd like to avoid creating a new syscall at this point. According to clone(2): CLONE_STOPPED has been removed in 2.6.38 and can be reused. CLONE_PID as you mentioned has been removed in 2.5.16 but since 2.3.21 it could only be used by boot process (PID 0). So this was really long time ago and effectively regular user space cannot use it since 2.3.21. -- Lukasz Pawelczyk Samsung R&D Institute Poland Samsung Electronics