From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (mail.openvz.org [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id 3D1CD8017D for ; Wed, 4 Nov 2026 19:22:54 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A4JLfIN026435; Wed, 4 Nov 2026 22:21:42 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A4JLfIN026435 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="jkuHWxxq" Received: from mail-wm1-f69.google.com (mail-wm1-f69.google.com [209.85.128.69]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A4JLeu6026431 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Wed, 4 Nov 2026 22:21:40 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A4JLeu6026431 Received: by mail-wm1-f69.google.com with SMTP id 5b1f17b1804b1-4a214a5f8a1so13808225e9.0 for ; Wed, 04 Nov 2026 11:21:40 -0800 (PST) X-Gm-Message-State: APuU4Z+qEEvY+jwMFlDddelBhXs1qeUw2MtFXbtXrC4HGHeRkWLka050 RKv6Ts9J2v+JeinlnfT5Ku9nn7Mjl4JfihMjX9rEf0EYKyYcA6YzGQmuAgWUSae4V+JudjNateo 1TJzH2XdvgpPlkkcCCbM+2Wd+w26o8ZJSiQPtUXMD1sZ5ZD8602SilQ== X-Gm-Gg: AYBFou32XweEbKORPRfXtIJjxwgbC9YXwDPCQO+9BBIlr2BQ12vdzTx2so5Sq2eq70M sSu6KYIdFggeZgDZR8jMMJM55f4vBbgPS3Eyd+dyVtXmjhCQJpnI9G2lze+eqSZ6g9E7bpCauk/ gwxpddbd7xY3Smrt/jst5imJsmjL3irjlfKWhAIw4+xa9+rNX5IW7f3I0onSF2Yxs0cpYUk+MPO BU4Th1qnGETyLZzQlabNksv53WVmJphgYd6g3Ge/EOvj72nVZSEAFuH0DvOKB85qCd+MBNcSvXt phGchKn8/JZsfkMXgOyq38FaGHlMdDTCYphlQ2dL2GQper+TBhnhabq5xphMTRZh60rF5tD3w8g H8phIHO1gdJOBiVDbtg== X-Received: by 2002:a05:600c:19d2:b0:4a4:4d57:8487 with SMTP id 5b1f17b1804b1-4ac1737c51dmr372363375e9.5.1793820099971; Wed, 04 Nov 2026 11:21:39 -0800 (PST) X-Received: by 2002:a05:600c:19d2:b0:4a4:4d57:8487 with SMTP id 5b1f17b1804b1-4ac1737c51dmr372363125e9.5.1793820099484; Wed, 04 Nov 2026 11:21:39 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1793820099; cv=none; d=google.com; s=arc-20260327; b=eitVV1B7Pk2l6u5eTQtLBEUkxMEol1Kihbl+ZYzDWsk9ESuF3Mt1pXF615Hedyo/cx gzYYsOrpA2QUrp3LxcOPx0LfiQcvlVSjg8R9rBfGMm1IVzI0AwZhclRfP7IzBsv+aBFN Vprz25jsKNe/XFKiFANUJgkhmjzi6Lrw8XkmyHibSGTw4TO2C332e7MmymOuKIk9hJtT M/BrYpEvrVajQsmhhQc9WwPsN+detjWxVzVEdB9sehIxiIY2q5igbfmNDBj/n/g44byC fdFg94j2FGzy2CkNq6qtPShNGui5FdpsDPqJ3frnz8+JlYxzVfRCmVp/ChqMnvKPc246 nPng== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:mime-version:date:message-id:subject :references:in-reply-to:cc:to:from:dkim-signature; bh=zoz++8LVYUQDvML8tQUJ625Hl9WoaTLn703lDcy7S4Y=; fh=Mz3REUwaBxhtZr2Vh3hH5ROwPLCuQerLJyHyBe6nxnM=; b=dH8TfqMFvREbvwMyKw+k5esECGE+1QOkwo1R6/8VwSbRp/wrwLXS+UOsCcjE5EFCt3 XimMSSt1LMAwyClT0VQnccmNE0ApnorlNqYOgQWOViqgwIk8R9b/PXfWKnwwGOMn1LUe c2BmC16Rad51bWOP/gqDo09q+3cJsF8UCtxLvCzCYWm7qxDqi52aU6F5D4Lzz1oO7XxB RH64sxJMN446cmVZZNaYSSJXO+hz2xoj8hyjCZLbvNKB6FQ/uREO23ujUd1pfVemNYk2 9OX/oKdkD559xo0aUGvcX5QpUB8/tUn5kyLITLKPhOi2LAsosvcXsZsW7iTPYBlrHLQe vlVw==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=jkuHWxxq; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id ffacd0b85a97d-48fed2729bfsi6146019f8f.91.2026.11.04.11.21.39 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 04 Nov 2026 11:21:39 -0800 (PST) Received-SPF: pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=jkuHWxxq; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=Content-Type:MIME-Version:Date:Message-Id:Subject :From; bh=zoz++8LVYUQDvML8tQUJ625Hl9WoaTLn703lDcy7S4Y=; b=jkuHWxxqqJq21iJp+nO TJ7xcawGb9mcve23HxYA/wteD1/deupSXcE33hdW8K2gm3Iumn5UcHfQHdVbuaqqMwxassg7U7Ng2 aaYxb8Rc8cTr0eCYkOB/d53KcUe4urDrSiEfOBKmJ4cDNtgzAAA5SwSTw0b49MU/pPmnzLrF5+rP/ U1HKd5QNLZra6uMX3iRL0cA8H32kWaDusTHuFy6/KjJu3zALfddQdtL2E8xwjzdOwxacfTVFhk/8d yhH4Jtn9s2SUnHWJXbFI8DBiJXPzQwTtaJ/jHoWz4nY55En5PvQYNzbWsAvX5xR7vxjpvm6M8+49U THVvgLZiAIHXQ0w==; Received: from ch-demo-asa.virtuozzo.com ([130.117.225.8] helo=f0.sw.ru) by relay.virtuozzo.com with esmtp (Exim 4.96) (envelope-from ) id 1xOgUI-00HNRf-0J; Wed, 04 Nov 2026 20:21:38 +0100 From: Konstantin Khorenko To: Pavel Tikhomirov , Andrey Drobyshev , Vasileios Almpanis , Konstantin Khorenko In-Reply-To: <20261014-b4-prep-khorenko-vstor-149847-3-doexec-oracle-fixes-v1-0-e34cbe0d1440@virtuozzo.com> References: <20261014-b4-prep-khorenko-vstor-149847-3-doexec-oracle-fixes-v1-0-e34cbe0d1440@virtuozzo.com> Message-Id: <179382009675.2760255.5950188615715657150.b4-ty@b4> Date: Wed, 04 Nov 2026 20:21:36 +0100 MIME-Version: 1.0 X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=1576; i=khorenko@virtuozzo.com; h=from:subject:message-id; bh=dLHRJL89dkR40Sclt6mDt5oZPsxyGz+qeTt87nvng8Q=; b=owEBbQKS/ZANAwAKAVGWCkf5YVwqAcsmYgBq64XCkhMFJzy2Ihzphb552xCo3c1yFyPoJp8aW wDJR3uX536JAjMEAAEKAB0WIQRWD23IPcXT0GO9CCxRlgpH+WFcKgUCauuFwgAKCRBRlgpH+WFc KrHjD/9ptGC+KF7RFt5iq9yInTCOqoL98K2WG8PfYwCnt9qVpAemxeoeaG54E8ljwZ4cWDAhq8N 0Ja2l8BeqSH2HAp1q4oqSmBQRyl87iIOLk6aTsBWBV8ABF+tvUqBElhCwJaWCAeOF60XKrcPKdZ gN20qSrE22rOlAyOAyuNho9r55haG28dij4J83izN1+7zw9hLJPfWPBiy3vhTPCZRKIuzd7shtT hfKIjl01zUIu3dW/B+CxkAP8Un8s5WePef+7tg8nhnIQnvVyPFpbTUy2rETPPezHGLTyPyF/kZz 5WDAta2E0iq2cI73OE+WDqNPcvwdAE+kgIg4fxeUcD0dTVo7ZQiyEvnR2rQrFnClOk5zeE7ShJP hRUD1TPoSE5XL6XOEKvzBy51APnOePEmsbl8bEFIbXHhM+89IbbRlHSp+v7F2NcSlYHToH0H3uK P+m/UVfNeSPIk1dBKmYq7/p0jMPmbxqTub/U1C1l4LI5WUo5zHCyv8UxaU8HC7FzNmdi5WsFtQp MriPpxsRPF8u0X2AzpcZr1ZXesA4yLnlTXdDNK7inlxShGs5wug37Yjg1N6WgLTGo0eYCUZVnzG waTRvmap83VFJt+ZA5BcITjnnRn1/0T2Y1tXTZtJmr5Qm36uOaa2r24SKBsA2b6MuLM8lrNVEzU 3ljfRCfwEeGazVw== X-Developer-Key: i=khorenko@virtuozzo.com; a=openpgp; fpr=560F6DC83DC5D3D063BD082C51960A47F9615C2A X-OZ-Fwd: true Cc: devel@openvz.org Subject: Re: [Devel] [PATCH hci-8.1 0/7] mm, exec: fix the MADV_DOEXEC code we carry from Oracle X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org On Wed, 14 Oct 2026 19:12:19 +0200, Konstantin Khorenko wrote: > mm, exec: fix the MADV_DOEXEC code we carry from Oracle > > Fixes in the existing Oracle MADV_DOEXEC code, found while working on > VSTOR-149847, and a refusal of preserved memory across setuid exec. > Applies on top of "mm: keep DMA-pinned MADV_DOEXEC memory working across > exec". > > [...] Applied to branch-rh10-6.12.0-211.52.1.22.x.vz10-ovz, will be released in rh10-6.12.0-211.52.1.22.18.vz10, thanks! [1/7] oracle/mm: take a file reference when preserving a file-backed VMA https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/f4e104c2c212 [2/7] oracle/mm: refuse MADV_DOEXEC on special mappings https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/63f64110d674 [3/7] oracle/mm: keep a MADV_DOEXEC range from becoming executable https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/9c46b9df2c32 [4/7] oracle/exec, elf: look for the opt-in note in every PT_NOTE segment https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/eb564719f827 [5/7] exec: refuse to preserve memory across a privilege-changing exec https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/3bcf0711f01b [6/7] selftests/mm: check that a setuid exec refuses preserved memory https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/8fbaf630e8a5 [7/7] selftests/mm: check MADV_DOEXEC on /dev/zero and exec permission https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/604ec9e520c8 -- Konstantin Khorenko, Virtuozzo Linux Kernel Team _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel