From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 2D23EC433F5 for ; Wed, 15 Dec 2021 01:26:47 +0000 (UTC) Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-631-AnyrBDnIMSmoJzAMwnAPXw-1; Tue, 14 Dec 2021 20:26:44 -0500 X-MC-Unique: AnyrBDnIMSmoJzAMwnAPXw-1 Received: from smtp.corp.redhat.com (int-mx07.intmail.prod.int.phx2.redhat.com [10.5.11.22]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 4858418A0F27; Wed, 15 Dec 2021 01:26:41 +0000 (UTC) Received: from colo-mx.corp.redhat.com (colo-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.21]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 88A5210589CD; Wed, 15 Dec 2021 01:26:40 +0000 (UTC) Received: from lists01.pubmisc.prod.ext.phx2.redhat.com (lists01.pubmisc.prod.ext.phx2.redhat.com [10.5.19.33]) by colo-mx.corp.redhat.com (Postfix) with ESMTP id 6A8634BB7C; Wed, 15 Dec 2021 01:26:38 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx10.intmail.prod.int.rdu2.redhat.com [10.11.54.10]) by lists01.pubmisc.prod.ext.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id 1BF1Qad3009288 for ; Tue, 14 Dec 2021 20:26:36 -0500 Received: by smtp.corp.redhat.com (Postfix) id 8B69A401E50; Wed, 15 Dec 2021 01:26:36 +0000 (UTC) Received: from mimecast-mx02.redhat.com (mimecast01.extmail.prod.ext.rdu2.redhat.com [10.11.55.17]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 87D09401E4C for ; Wed, 15 Dec 2021 01:26:36 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-delivery-1.mimecast.com [207.211.31.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 6F77E85A5A8 for ; Wed, 15 Dec 2021 01:26:36 +0000 (UTC) Received: from szxga03-in.huawei.com (szxga03-in.huawei.com [45.249.212.189]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-433-qUW3_m_yOJ2EDWyI3gAPbw-1; Tue, 14 Dec 2021 20:26:34 -0500 X-MC-Unique: qUW3_m_yOJ2EDWyI3gAPbw-1 Received: from dggeme762-chm.china.huawei.com (unknown [172.30.72.56]) by szxga03-in.huawei.com (SkyGuard) with ESMTP id 4JDHb673pQz8vkc; Wed, 15 Dec 2021 09:24:18 +0800 (CST) Received: from [10.67.110.176] (10.67.110.176) by dggeme762-chm.china.huawei.com (10.3.19.108) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2308.20; Wed, 15 Dec 2021 09:26:31 +0800 Subject: Re: [PATCH] audit: ensure userspace is penalized the same as the kernel when under pressure To: Paul Moore , References: <163949858723.23091.5301356986109432893.stgit@olly> From: cuigaosheng Message-ID: <1fef8b27-2c4d-8bd4-46e9-762c5b8ecb4e@huawei.com> Date: Wed, 15 Dec 2021 09:26:31 +0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.6.1 MIME-Version: 1.0 In-Reply-To: <163949858723.23091.5301356986109432893.stgit@olly> X-Originating-IP: [10.67.110.176] X-ClientProxiedBy: dggems703-chm.china.huawei.com (10.3.19.180) To dggeme762-chm.china.huawei.com (10.3.19.108) X-CFilter-Loop: Reflected X-Mimecast-Impersonation-Protect: Policy=CLT - Impersonation Protection Definition; Similar Internal Domain=false; Similar Monitored External Domain=false; Custom External Domain=false; Mimecast External Domain=false; Newly Observed Domain=false; Internal User Name=false; Custom Display Name List=false; Reply-to Address Mismatch=false; Targeted Threat Dictionary=false; Mimecast Threat Dictionary=false; Custom Threat Dictionary=false X-Scanned-By: MIMEDefang 2.85 on 10.11.54.10 X-MIME-Autoconverted: from quoted-printable to 8bit by lists01.pubmisc.prod.ext.phx2.redhat.com id 1BF1Qad3009288 X-loop: linux-audit@redhat.com X-BeenThere: linux-audit@redhat.com X-Mailman-Version: 2.1.12 Precedence: junk List-Id: Linux Audit Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com X-Scanned-By: MIMEDefang 2.84 on 10.5.11.22 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=linux-audit-bounces@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" 5ZyoIDIwMjEvMTIvMTUgMDoxNiwgUGF1bCBNb29yZSDlhpnpgZM6Cj4gRHVlIHRvIHRoZSBhdWRp dCBjb250cm9sIG11dGV4IG5lY2Vzc2FyeSBmb3Igc2VyaWFsaXppbmcgYXVkaXQKPiB1c2Vyc3Bh Y2UgbWVzc2FnZXMgd2UgaGF2ZW4ndCBiZWVuIGFibGUgdG8gYmxvY2svcGVuYWxpemUgdXNlcnNw YWNlCj4gcHJvY2Vzc2VzIHRoYXQgYXR0ZW1wdCB0byBzZW5kIGF1ZGl0IHJlY29yZHMgd2hpbGUg dGhlIHN5c3RlbSBpcwo+IHVuZGVyIGF1ZGl0IHByZXNzdXJlLiAgVGhlIHJlc3VsdCBpcyB0aGF0 IHByaXZpbGVnZWQgdXNlcnNwYWNlCj4gYXBwbGljYXRpb25zIGhhdmUgYSBwcmlvcml0eSBib29z dCB3aXRoIHJlc3BlY3QgdG8gYXVkaXQgYXMgdGhleSBhcmUKPiBub3QgYm91bmQgYnkgdGhlIHNh bWUgYXVkaXQgcXVldWUgdGhyb3R0bGluZyBhcyB0aGUgb3RoZXIgdGFza3Mgb24KPiB0aGUgc3lz dGVtLgo+Cj4gVGhpcyBwYXRjaCBhdHRlbXB0cyB0byByZXN0b3JlIHNvbWUgYmFsYW5jZSB0byB0 aGUgc3lzdGVtIHdoZW4gdW5kZXIKPiBhdWRpdCBwcmVzc3VyZSBieSBibG9ja2luZyB0aGVzZSBw cml2aWxlZ2VkIHVzZXJzcGFjZSB0YXNrcyBhZnRlcgo+IHRoZXkgaGF2ZSBmaW5pc2hlZCB0aGVp ciBhdWRpdCBwcm9jZXNzaW5nLCBhbmQgZHJvcHBlZCB0aGUgYXVkaXQKPiBjb250cm9sIG11dGV4 LCBidXQgYmVmb3JlIHRoZXkgcmV0dXJuIHRvIHVzZXJzcGFjZS4KPgo+IFJlcG9ydGVkLWJ5OiBH YW9zaGVuZyBDdWkgPGN1aWdhb3NoZW5nMUBodWF3ZWkuY29tPgo+IFNpZ25lZC1vZmYtYnk6IFBh dWwgTW9vcmUgPHBhdWxAcGF1bC1tb29yZS5jb20+Cj4gLS0tCj4gICBrZXJuZWwvYXVkaXQuYyB8 ICAgMTggKysrKysrKysrKysrKysrKystCj4gICAxIGZpbGUgY2hhbmdlZCwgMTcgaW5zZXJ0aW9u cygrKSwgMSBkZWxldGlvbigtKQo+Cj4gZGlmZiAtLWdpdCBhL2tlcm5lbC9hdWRpdC5jIGIva2Vy bmVsL2F1ZGl0LmMKPiBpbmRleCA0Y2ViYWRiNWYzMGQuLmVhYjcyODI2NjhhYiAxMDA2NDQKPiAt LS0gYS9rZXJuZWwvYXVkaXQuYwo+ICsrKyBiL2tlcm5lbC9hdWRpdC5jCj4gQEAgLTE1NDAsNiAr MTU0MCwyMCBAQCBzdGF0aWMgdm9pZCBhdWRpdF9yZWNlaXZlKHN0cnVjdCBza19idWZmICAqc2ti KQo+ICAgCQlubGggPSBubG1zZ19uZXh0KG5saCwgJmxlbik7Cj4gICAJfQo+ICAgCWF1ZGl0X2N0 bF91bmxvY2soKTsKPiArCj4gKwkvKiBjYW4ndCBibG9jayB3aXRoIHRoZSBjdHJsIGxvY2ssIHNv IHBlbmFsaXplIHRoZSBzZW5kZXIgbm93ICovCj4gKwlpZiAoYXVkaXRfYmFja2xvZ19saW1pdCAm Jgo+ICsJICAgIChza2JfcXVldWVfbGVuKCZhdWRpdF9xdWV1ZSkgPiBhdWRpdF9iYWNrbG9nX2xp bWl0KSkgewo+ICsJCURFQ0xBUkVfV0FJVFFVRVVFKHdhaXQsIGN1cnJlbnQpOwo+ICsKPiArCQkv KiB3YWtlIGthdWRpdGQgdG8gdHJ5IGFuZCBmbHVzaCB0aGUgcXVldWUgKi8KPiArCQl3YWtlX3Vw X2ludGVycnVwdGlibGUoJmthdWRpdGRfd2FpdCk7Cj4gKwo+ICsJCWFkZF93YWl0X3F1ZXVlX2V4 Y2x1c2l2ZSgmYXVkaXRfYmFja2xvZ193YWl0LCAmd2FpdCk7Cj4gKwkJc2V0X2N1cnJlbnRfc3Rh dGUoVEFTS19VTklOVEVSUlVQVElCTEUpOwo+ICsJCXNjaGVkdWxlX3RpbWVvdXQoYXVkaXRfYmFj a2xvZ193YWl0X3RpbWUpOwo+ICsJCXJlbW92ZV93YWl0X3F1ZXVlKCZhdWRpdF9iYWNrbG9nX3dh aXQsICZ3YWl0KTsKPiArCX0KPiAgIH0KPiAgIAo+ICAgLyogTG9nIGluZm9ybWF0aW9uIGFib3V0 IHdobyBpcyBjb25uZWN0aW5nIHRvIHRoZSBhdWRpdCBtdWx0aWNhc3Qgc29ja2V0ICovCj4gQEAg LTE4MjQsNyArMTgzOCw5IEBAIHN0cnVjdCBhdWRpdF9idWZmZXIgKmF1ZGl0X2xvZ19zdGFydChz dHJ1Y3QgYXVkaXRfY29udGV4dCAqY3R4LCBnZnBfdCBnZnBfbWFzaywKPiAgIAkgKiAgICB0YXNr X3RnaWRfdm5yKCkgc2luY2UgYXVkaXRkX3BpZCBpcyBzZXQgaW4gYXVkaXRfcmVjZWl2ZV9tc2co KQo+ICAgCSAqICAgIHVzaW5nIGEgUElEIGFuY2hvcmVkIGluIHRoZSBjYWxsZXIncyBuYW1lc3Bh Y2UKPiAgIAkgKiAyLiBnZW5lcmF0b3IgaG9sZGluZyB0aGUgYXVkaXRfY21kX211dGV4IC0gd2Ug ZG9uJ3Qgd2FudCB0byBibG9jawo+IC0JICogICAgd2hpbGUgaG9sZGluZyB0aGUgbXV0ZXggKi8K PiArCSAqICAgIHdoaWxlIGhvbGRpbmcgdGhlIG11dGV4LCBhbHRob3VnaCB3ZSBkbyBwZW5hbGl6 ZSB0aGUgc2VuZGVyCj4gKwkgKiAgICBsYXRlciBpbiBhdWRpdF9yZWNlaXZlKCkgd2hlbiBpdCBp cyBzYWZlIHRvIGJsb2NrCj4gKwkgKi8KPiAgIAlpZiAoIShhdWRpdGRfdGVzdF90YXNrKGN1cnJl bnQpIHx8IGF1ZGl0X2N0bF9vd25lcl9jdXJyZW50KCkpKSB7Cj4gICAJCWxvbmcgc3RpbWUgPSBh dWRpdF9iYWNrbG9nX3dhaXRfdGltZTsKPiAgIAoKVGVzdGVkLWJ5OiBHYW9zaGVuZyBDdWk8Y3Vp Z2Fvc2hlbmcxQGh1YXdlaS5jb20+CgoKLS0KTGludXgtYXVkaXQgbWFpbGluZyBsaXN0CkxpbnV4 LWF1ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly9saXN0bWFuLnJlZGhhdC5jb20vbWFpbG1hbi9saXN0 aW5mby9saW51eC1hdWRpdA==