From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 14BBDC77B73 for ; Thu, 20 Apr 2023 19:18:22 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 6AB61900003; Thu, 20 Apr 2023 15:18:21 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 65B2F900002; Thu, 20 Apr 2023 15:18:21 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 523B2900003; Thu, 20 Apr 2023 15:18:21 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0011.hostedemail.com [216.40.44.11]) by kanga.kvack.org (Postfix) with ESMTP id 4510C900002 for ; Thu, 20 Apr 2023 15:18:21 -0400 (EDT) Received: from smtpin29.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay06.hostedemail.com (Postfix) with ESMTP id 1F818AC300 for ; Thu, 20 Apr 2023 19:18:21 +0000 (UTC) X-FDA: 80702730402.29.2789809 Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) by imf04.hostedemail.com (Postfix) with ESMTP id 43CEF4001D for ; Thu, 20 Apr 2023 19:18:17 +0000 (UTC) Authentication-Results: imf04.hostedemail.com; dkim=pass header.d=infradead.org header.s=bombadil.20210309 header.b=T8FHT16r; spf=none (imf04.hostedemail.com: domain of mcgrof@infradead.org has no SPF policy when checking 198.137.202.133) smtp.mailfrom=mcgrof@infradead.org; dmarc=fail reason="No valid SPF, DKIM not aligned (relaxed)" header.from=kernel.org (policy=none) ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1682018297; a=rsa-sha256; cv=none; b=zfR5e9PetJmm0mPXyoIsuXRZLkjmMaXZICQGMBn7RhEukAME8lyFFmWEbEyX8pMCCkOBbR JIYG0zZZcvh2JilVkmLoLHUm2xq5vDs7AYe6E9gU6IaYmHUFU9IpEvCrnlDXpw0nQLAvlw 6DdicEMRJpaBAaMXynuduJrOcTdDko4= ARC-Authentication-Results: i=1; imf04.hostedemail.com; dkim=pass header.d=infradead.org header.s=bombadil.20210309 header.b=T8FHT16r; spf=none (imf04.hostedemail.com: domain of mcgrof@infradead.org has no SPF policy when checking 198.137.202.133) smtp.mailfrom=mcgrof@infradead.org; dmarc=fail reason="No valid SPF, DKIM not aligned (relaxed)" header.from=kernel.org (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1682018297; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=UXWoPplg6fSqmEcLz6yYPJoYhlqN+hzIgoCxz5ZOmqg=; b=W26TL28bpxFoz8wKV3bUg9AKMlc5Bw2RbZ9+MfkvHWq21+sE6SrolX4dPdyrHH2F41BMje g3pAufF+C1bKW+O1woDYE8dEqxzjLhoRWilcPvM8t9Rc6aVCLltuWz+Hq5yh1XysOBARag I3IFFlPNmFpRHC9wZ9lThlVwFHzpLG8= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=bombadil.20210309; h=Sender:In-Reply-To:Content-Type: MIME-Version:References:Message-ID:Subject:Cc:To:From:Date:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=UXWoPplg6fSqmEcLz6yYPJoYhlqN+hzIgoCxz5ZOmqg=; b=T8FHT16rGh+NUyf/N4U3ERW0Ws SL+ClK2K1rEg3zs1+CaAo0QGdmjyGx2W1nsF7drejdegvpR8rFGILTde+NKVJSsDnVXKt+I/FUzVD WxaDoQ1a3zyDseOw5n1R5anZ2YdZobdc0cx3SvfG835AJ2AfjyU8SBFT+/ttIZuycOwOU/evADoDi B7IFwuRQxXdr2rGGXpVxcaabrj5n7TF2MiqjXWrz6pXI2BpPrLn5ZZMZHzC6Kd+V/QxiLHGGjDkui MvCeiI6grOr3CoWkU6+AdWEezxSNx6lGLoFTt/UNRRPl2/9XX81m12e4saDnaNo+KN2CtAk24C4yZ SyV1zHXQ==; Received: from mcgrof by bombadil.infradead.org with local (Exim 4.96 #2 (Red Hat Linux)) id 1ppZnF-008qZm-0u; Thu, 20 Apr 2023 19:18:09 +0000 Date: Thu, 20 Apr 2023 12:18:09 -0700 From: Luis Chamberlain To: Christian Brauner Cc: Hugh Dickins , akpm@linux-foundation.org, willy@infradead.org, linux-mm@kvack.org, p.raghav@samsung.com, da.gomez@samsung.com, a.manzanares@samsung.com, dave@stgolabs.net, yosryahmed@google.com, keescook@chromium.org, patches@lists.linux.dev, linux-kernel@vger.kernel.org Subject: Re: [PATCH] shmem: restrict noswap option to initial user namespace Message-ID: References: <20230420-faxen-advokat-40abb4c1a152@brauner> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20230420-faxen-advokat-40abb4c1a152@brauner> X-Rspam-User: X-Rspamd-Queue-Id: 43CEF4001D X-Rspamd-Server: rspam01 X-Stat-Signature: 6qb4sbz95hezrisr3t74kbxcqwjd4iqx X-HE-Tag: 1682018297-402257 X-HE-Meta: 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 4PiTF1uz XquL7SVUpmEe/O6Mj6BY37O10AB47vw2QodZdUKhKLglj+OlOXWxrkN3c/96oIvSH2QJ+knwo6Q2zHkbdGQypLmVh8w/CXNBM++ifcCBSIQuAurMYTb9jLILqwjeQ3R+IWBW51Olwm1jhN+N2YixZN+qEkZzW89x7AZm7IAiuSLngZ1RbpG71oEQB7Wpw06JUfpMH8vThSBrkuwh7JmjGqF2Ca2JXI6pBwbmEtALtrq+I/lTOBXu+4DczLYtr+QDaYAHpNDufWu+N5z2Wr8A4bRV2QawLNI5TlozKzQ/7UsLayD75h14OFen4T2gELKPdeIGeSrldPeVgw8pUEi6x2pcCZ+HuHQyxbB1LueeUhVdlnSZiqT15hrU9uvlwnRQuIBJnTLTHLHlFz5je8+iKE/e4hCPLQY6fBoTP59Ha8uD7CoQuwsAep7bqfA== X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Thu, Apr 20, 2023 at 10:57:43AM +0200, Christian Brauner wrote: > Prevent tmpfs instances mounted in an unprivileged namespaces from > evading accounting of locked memory by using the "noswap" mount option. > > Cc: Luis Chamberlain > Reported-by: Hugh Dickins > Link: https://lore.kernel.org/lkml/79eae9fe-7818-a65c-89c6-138b55d609a@google.com > Signed-off-by: Christian Brauner Reviewed-by: Luis Chamberlain Luis