From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (mail.openvz.org [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id EA63A811BB for ; Fri, 6 Nov 2026 14:03:12 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A6E1veu018741; Fri, 6 Nov 2026 17:01:58 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A6E1veu018741 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="P20CS0B6" Received: from mail-wr1-f69.google.com (mail-wr1-f69.google.com [209.85.221.69]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A6E1iol018705 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Fri, 6 Nov 2026 17:01:44 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A6E1iol018705 Received: by mail-wr1-f69.google.com with SMTP id ffacd0b85a97d-4930269afdcso830298f8f.2 for ; Fri, 06 Nov 2026 06:01:44 -0800 (PST) X-Forwarded-Encrypted: i=2; AL+hErGe5WWWPLybmcSIKiEKlg08BWb9RnFRx0m5cLauZ14FtTVvNqWTHNKisV/J58YXGQEf5OXAiw==@openvz.org X-Gm-Message-State: APuU4Z+giy/gW1h1KRLQP5Yjl6MHOyvpkQczFmwH95Yxns9CXHBzZR/S qxcprMQgh2sKLf6fnMLhc1uVOZ4H43g/TguQTd9kU7+ewHvtzG5PC7TdBNfstAbh3dcMtgUn8aU MMmSuZNSloKi/L75ieJOlkcq/WtFsV5VMMWjQxLWWPxX/S38tRqbHWw== X-Gm-Gg: AYBFou1JmiXrjlkJrk1PAv33zSH0Kfaf4IchMvfY7N3iaxSC3ea5EfuuQyePTioQCzv pKYwVccbgP2Wkye0eGG9gSbxJfKpOWdmYmiyeerBfyrRyhHpzUKv1MeqM4+/HD2+3uGDV2opSWl wSnCrnJWkQTB6+xYlGwWRrhUmBA0SYxDdyvteO0ipLdL9wHa8cC/c8Ce+wfRucUA/Sj4aeEE/mE glNfuNF5m3imPlCUeogcPg3tl86GdS2+pUK9FUAC8+0IpzNLnClBAU0DLyxxyWXJXDE3KVGMLQr Zc+JT80/4sMXCt4fyZaIXxw7N0aFwlCAudicW98J+8SUnyg+F8PGD+9Qfhrkju87Qot6mFGHSMN 1a7Hfhfn9SvQ5Y9Lbpg== X-Received: by 2002:a05:6000:2681:b0:48b:e50:7159 with SMTP id ffacd0b85a97d-492753729f5mr5612575f8f.30.1793973704028; Fri, 06 Nov 2026 06:01:44 -0800 (PST) X-Received: by 2002:a05:6000:2681:b0:48b:e50:7159 with SMTP id ffacd0b85a97d-492753729f5mr5612518f8f.30.1793973703477; Fri, 06 Nov 2026 06:01:43 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1793973703; cv=none; d=google.com; s=arc-20260327; b=Te2BoquGFVnQLEeuN6fpBOGYlIiMlOcoyW5sPsjr+nu9yh30iEVy9pyLV9FeaKSzbQ 6Yp0S20Mbn3LX/H103NV/2sGMmeQ5jYNnbErfLc8vqQrM0Zsai7acd8Ud2UeE8pxXX1p GAWEyEKT8lgHW/nmUOq3FMMVfJ5+5BOQmNNurPw7dqNmwd7M7AaSIIen81Mbho0ido9w 6OXWgjVCyAB1YJk5wMiE8+I8xEBU6nHapcjMJJul+fMEHqrwOVXv3jAAejkvt+s6EK/g 1rW7pUIuXJXmyhFfLQZfAO6LxNZ43mlMfGlfye93t9ZrvCUrqFuRtDWctD5Hpa3/j9jU sMhw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :mime-version:subject:date:from:dkim-signature; bh=sGulrYlYJ0Y3DFfMCZAPTiFaUI3lWwhHlW9AmPBbDlg=; fh=bRkZfFa6377EgOVW8zBDri2gGIQqe/ZeiH+ijEM/ROI=; b=Llys30JebBkeF32xuvaK2BQJ4CZqAgMameuKvN0zGGA2rkJvVL+dDIgZw6pPj7fZRa lJGPwusIqjtqnfir5TzguHWUhCrR0LaTN/P7xRuzl2NmEYRMPa2Ked1Xpzku2EeXNIb+ iRxPVGlflHKFuKfFo1wV9EK1+V+zYjZ0Gn9Y4G0y2Oy2YSF47g2VzAh9c3TBrfE8xEGl nufunwEpIhb9iwnW+jjUXQjc18gmaRkzrUSHpByZ9klpyoptHSmxyOo9t/6NN2WQnbBM oAQTYnf3ElR82IGrAzjWxRAItoo1ZMjzN6R1H67u/ExlenvKxIFzCVV3zZMExjMRlIVj GbGA==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=P20CS0B6; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id ffacd0b85a97d-492d79e3c6fsi3696447f8f.306.2026.11.06.06.01.43 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Nov 2026 06:01:43 -0800 (PST) Received-SPF: pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=P20CS0B6; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=Message-Id:Content-Type:MIME-Version:Subject:Date :From; bh=sGulrYlYJ0Y3DFfMCZAPTiFaUI3lWwhHlW9AmPBbDlg=; b=P20CS0B62bdpqjXpYhK XNeGmC/kyPt4N5GkQSbnBKr5OMdbw6/JIoJEJY1fi2ad9gEnUwrF7DG3ZX5MNxxA+SehwEEY2S1Xt +OTXiFBCxoLi1WimQzm+GEGN5j6x3VIN/O+Lcv41DnX1iKeH0L7D/3py2noWnAQuV1qyKwMbcybaI hepODPgXI4BUSYsdDwLRMoawh6PBMTwcUd9NamQhuarSHL3Oonen+ipRtX1wuxSvd4g45JIe9TIFc 816Bke4N8ex7QD3A3tZSO8mrcQltYeCAM2mq4EpKSsTJPZfYGSjprOsgIqO+8IaIWaey+9TI92pBc ZuHjryClA3G9NFA==; Received: from ch-demo-asa.virtuozzo.com ([130.117.225.8] helo=f0.sw.ru) by relay.virtuozzo.com with esmtp (Exim 4.96) (envelope-from ) id 1xPKRj-00BceL-0D; Fri, 06 Nov 2026 15:01:39 +0100 From: Konstantin Khorenko Date: Fri, 06 Nov 2026 15:01:32 +0100 MIME-Version: 1.0 Message-Id: <20261106-b4-prep-khorenko-vstor-153679-mbind-ve-v2-1-6327b23a2d93@virtuozzo.com> References: <20261106-b4-prep-khorenko-vstor-153679-mbind-ve-v2-0-6327b23a2d93@virtuozzo.com> In-Reply-To: <20261106-b4-prep-khorenko-vstor-153679-mbind-ve-v2-0-6327b23a2d93@virtuozzo.com> To: Pavel Tikhomirov , Vasileios Almpanis X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=1404; i=khorenko@virtuozzo.com; h=from:subject:message-id; bh=DPfvhQKd786tXqz7b+qd/LEerjdH4AobzbGmcFOzQno=; b=owEBbQKS/ZANAwAKAVGWCkf5YVwqAcsmYgBq7d3FDoKgMD1jAe2eJKqq6Hm5V2paB4LtljL6v wDjiUSo0WiJAjMEAAEKAB0WIQRWD23IPcXT0GO9CCxRlgpH+WFcKgUCau3dxQAKCRBRlgpH+WFc KtstEACHwejgJ0Eu0RfqEcWfYP9K+cHPgCszJdnupcRWC8FXVvUYcLHYX/uowXvkCG7J3enHygO JA89gwAkbMaJCw6WCRi4DQtKuKaHYzj4VWlPM9oMRYKESkM7QLYbPnWTA/EYqqOShBCjMeaCd5C iR3WB8WSDFt9AiV8dvmeJ0giahhrHXzk9oxeJihPB2Hzz36Alm/6NihqrAhaHCxyiHC6L2TpRFv 7loZAKvyKANNaz/3AH94kZPmZ2daIOM6pL1J1c5OiY8/KCpRP2L0Gwi23lJAwQmaF++9MxtQsBq yiwp/ap15eHD3l+XGURNmzkGP+O0mEKQCMA2UeZsVr1VxT0sSjWzJDLDfkYkIxJ/d7m0uJHYTEm SeTCEbM0o9s0k/Iue7a25LNWaD/ptXJpvCUupKhHGkjEeFQvekR+lfj+SdCnZNAxjvh1JS4veS0 VRcBD2/PCbsC6MfP0dYl03JNGI2ug3INRifA0+go05M1ZN5hdyZkPtZxWiv8/e4wUAZMKuoiXso jxy2elO7xAyv9YhtA4LJOXNeQuAyEiKmgYzD5KhiOryPde5M3TIIPlxyh1GdORYGY9Ovroy0Ylv TnDIvTnxhc+vWtblOsG7elZ5FjJpA4l3ik7QK16pm2lwqBEU4rp77yL/FF2dfmuvJS2T1thzCak UXu0XNWGMAqv/Fg== X-Developer-Key: i=khorenko@virtuozzo.com; a=openpgp; fpr=560F6DC83DC5D3D063BD082C51960A47F9615C2A X-OZ-Fwd: true Cc: devel@openvz.org Subject: [Devel] [PATCH hci-8.1 v2 1/4] mempolicy: prohibit mbind and set_mempolicy_home_node in VE X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org A CT is meant to see a kernel without NUMA support: in a non-super VE the NUMA API syscalls return -ENOSYS, as they do in a kernel built without CONFIG_NUMA. Return -ENOSYS from mbind(2) and set_mempolicy_home_node(2) at the start of the handler, before any argument check, as the other NUMA API syscalls do. Fixes: a803a5b2ea97 ("mempolicy: prohibit all NUMA API syscalls in VE") https://virtuozzo.atlassian.net/browse/VSTOR-153679 Feature: mm: prohibit NUMA API inside CT Signed-off-by: Konstantin Khorenko --- mm/mempolicy.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/mm/mempolicy.c b/mm/mempolicy.c index 3255d3e987180..9b2a32ef92949 100644 --- a/mm/mempolicy.c +++ b/mm/mempolicy.c @@ -1584,6 +1584,9 @@ SYSCALL_DEFINE4(set_mempolicy_home_node, unsigned long, start, unsigned long, le int err = -ENOENT; VMA_ITERATOR(vmi, mm, start); + if (!ve_is_super(get_exec_env())) + return -ENOSYS; + start = untagged_addr(start); if (start & ~PAGE_MASK) return -EINVAL; @@ -1645,6 +1648,9 @@ SYSCALL_DEFINE6(mbind, unsigned long, start, unsigned long, len, unsigned long, mode, const unsigned long __user *, nmask, unsigned long, maxnode, unsigned int, flags) { + if (!ve_is_super(get_exec_env())) + return -ENOSYS; + return kernel_mbind(start, len, mode, nmask, maxnode, flags); } -- 2.43.0 _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel