linux-toradex.git/security/device_cgroup.c, branch v2.6.28

devcgroup: remove spin_lock()

2008-10-20T15:52:38+00:00

Since we introduced rcu for read side, spin_lock is used only for update.
But we always hold cgroup_lock() when update, so spin_lock() is not need.

Additional cleanup:
1) include linux/rcupdate.h explicitly
2) remove unused variable cur_devcgroup in devcgroup_update_access()

Signed-off-by: Lai Jiangshan 
Acked-by: "Serge E. Hallyn" 
Cc: Paul Menage 
Cc: James Morris 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

devcgroup: remove unused variable

2008-10-20T15:52:38+00:00

Signed-off-by: Li Zefan 
Acked-by: Serge Hallyn 
Cc: Paul Menage 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

devcgroup: use kmemdup()

2008-10-20T15:52:38+00:00

This saves 40 bytes on my x86_32 box.

Signed-off-by: Li Zefan 
Acked-by: Serge Hallyn 
Cc: Paul Menage 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

devcgroup: fix race against rmdir()

2008-09-03T02:21:38+00:00

During the use of a dev_cgroup, we should guarantee the corresponding
cgroup won't be deleted (i.e.  via rmdir).  This can be done through
css_get(&dev_cgroup->css), but here we can just get and use the dev_cgroup
under rcu_read_lock.

And also remove checking NULL dev_cgroup, it won't be NULL since a task
always belongs to a cgroup.

Signed-off-by: Li Zefan 
Acked-by: Serge Hallyn 
Cc: Paul Menage 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

devcgroup: code cleanup

2008-07-25T17:53:37+00:00

- clean up set_majmin()
- use simple_strtoul() to parse major/minor

[akpm@linux-foundation.org: fix simple_strtoul() usage]
[kosaki.motohiro@jp.fujitsu.com: fix warnings]
Signed-off-by: Li Zefan 
Acked-by: Serge Hallyn 
Cc: Serge Hallyn 
Cc: Paul Menage 
Cc: Pavel Emelyanov 
Signed-off-by: KOSAKI Motohiro 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

devcgroup: relax white-list protection down to RCU

2008-07-25T17:53:37+00:00

Currently this list is protected with a simple spinlock, even for reading
from one.  This is OK, but can be better.

Actually I want it to be better very much, since after replacing the
OpenVZ device permissions engine with the cgroup-based one I noticed, that
we set 12 default device permissions for each newly created container (for
/dev/null, full, terminals, ect devices), and people sometimes have up to
20 perms more, so traversing the ~30-40 elements list under a spinlock
doesn't seem very good.

Here's the RCU protection for white-list - dev_whitelist_item-s are added
and removed under the devcg->lock, but are looked up in permissions
checking under the rcu_read_lock.

Signed-off-by: Pavel Emelyanov 
Acked-by: Serge Hallyn 
Cc: Balbir Singh 
Cc: Paul Menage 
Cc: "Paul E. McKenney" 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

cgroup files: convert devcgroup_access_write() into a cgroup write_string() handler

2008-07-25T17:53:36+00:00

This patch converts devcgroup_access_write() from a raw file handler
into a handler for the cgroup write_string() method. This allows some
boilerplate copying/locking/checking to be removed and simplifies the
cleanup path, since these functions are performed by the cgroups
framework before calling the handler.

Signed-off-by: Paul Menage 
Cc: Paul Jackson 
Cc: Pavel Emelyanov 
Cc: Balbir Singh 
Acked-by: Serge Hallyn 
Cc: KAMEZAWA Hiroyuki 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

devcgroup: fix permission check when adding entry to child cgroup

2008-07-13T19:51:18+00:00

 # cat devices.list
 c 1:3 r
 # echo 'c 1:3 w' > sub/devices.allow
 # cat sub/devices.list
 c 1:3 w

As illustrated, the parent group has no write permission to /dev/null, so
it's child should not be allowed to add this write permission.

Signed-off-by: Li Zefan 
Acked-by: Serge Hallyn 
Cc: Serge Hallyn 
Cc: Paul Menage 
Cc: Pavel Emelyanov 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

devcgroup: always show positive major/minor num

2008-07-13T19:51:18+00:00

 # echo "b $((0x7fffffff)):$((0x80000000)) rwm" > devices.allow
 # cat devices.list
 b 214748364:-21474836 rwm

though a major/minor number of 0x800000000 is meaningless, we
should not cast it to a negative value.

Signed-off-by: Li Zefan 
Acked-by: Serge Hallyn 
Cc: Serge Hallyn 
Cc: Paul Menage 
Cc: Pavel Emelyanov 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

devcgroup: fix odd behaviour when writing 'a' to devices.allow

2008-07-04T17:40:10+00:00

 # cat /devcg/devices.list
 a *:* rwm
 # echo a > devices.allow
 # cat /devcg/devices.list
 a *:* rwm
 a 0:0 rwm

This is odd and maybe confusing.  With this patch, writing 'a' to
devices.allow will add 'a *:* rwm' to the whitelist.

Also a few fixes and updates to the document.

Signed-off-by: Li Zefan 
Cc: Pavel Emelyanov 
Cc: Serge E. Hallyn 
Cc: Paul Menage 
Cc: Balbir Singh 
Cc: James Morris 
Cc: Chris Wright 
Cc: Stephen Smalley 
Cc: KAMEZAWA Hiroyuki 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds