From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (mail.openvz.org [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id DBC028045D for ; Mon, 26 Oct 2026 14:53:51 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 69QEqdL9011917; Mon, 26 Oct 2026 17:52:40 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 69QEqdL9011917 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="iaUTZFF+" Received: from mail-wr1-f69.google.com (mail-wr1-f69.google.com [209.85.221.69]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 69QEqSML011881 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Mon, 26 Oct 2026 17:52:29 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 69QEqSML011881 Received: by mail-wr1-f69.google.com with SMTP id ffacd0b85a97d-48b00febba3so2264860f8f.1 for ; Mon, 26 Oct 2026 07:52:29 -0700 (PDT) X-Forwarded-Encrypted: i=2; AKwUvBxGgYsgZVmdMQnZ6o73yGRwyogfb5SyhWsdHnzVRrfkjZEyFONE7TsYHeipua8an31KHM/0+Q==@openvz.org X-Gm-Message-State: AFq9FYIA7DIJ6U2/IY7GweVy+l+as46lu9uBvv710/Mi2uJWRdSsd6vx iUnnk4kbJs+tluuPVr5qI7INkq7QR+9QHsDLOSYOz7I0rOx8azivIF3ITF6SOYk0yZEw6eoeNfL H+wtm4FdV1cYLUH0kptAvje2vCjb63hjx/eHu++lMm1FYTPQ4y+Z1VQ== X-Gm-Gg: AYBFou2ACv4YPocuMlxsRKNO+Kg8imGlZ4RbZcEu0vKHlY7kkV7sxq1I9MUj6KCJCxm noopRyQjWdzOJ+EUm8zlhVnbSubMCgSgKgDuITWTEhvn6ZRhfBd7D5xvMkbLFqMS1dsdePuc+mK fl/o3gBiX/KKCJNYW30Vy/XwtA/+6wbQrBGkFZjL5mMix9oFXo39xWXEAwJEfAvlKJcGR+5/Ra8 OYEr6KNdBGIojQ/KLlmJwMsIz2Y5lYhaMsAq7qNkpkpYIqLU26U4+SocnbZq62lEeEeO2lcgRUI YpHp/Nou9WAXo+MAJe+mRelHmfFncDWJZeoQTkzAbwpqf1dVjcbSqcYnHIX6EZQwUNBxeObeLmd nYi/NPlcectGm68M2CfuAZZwl/DI7FA== X-Received: by 2002:a05:6000:2012:b0:488:83f7:6352 with SMTP id ffacd0b85a97d-48e3eb24734mr13982123f8f.4.1793026348636; Mon, 26 Oct 2026 07:52:28 -0700 (PDT) X-Received: by 2002:a05:6000:2012:b0:488:83f7:6352 with SMTP id ffacd0b85a97d-48e3eb24734mr13982075f8f.4.1793026348121; Mon, 26 Oct 2026 07:52:28 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1793026348; cv=none; d=google.com; s=arc-20260327; b=DKx+zJUG12XGLeP4R0g8DiAgoiCTV71Qt5GQeyZJw3X7ACbxAsWP/i4yPzXzKQaIAD wvOa9xQkmXga7DGHeDD7gpfKBtNj52aTg1UaHQjK5+oVdy3Ay1xKPMcRJCKv8zNtICvi opWBA3JEgzf7n9GNkgGRE4tSwMymu5q1HqxatnB4HJEkRHs1OZxCEDezIyv5x8KxtILH NKRJFpWG/2/yE7ds8xV0b8Zy2+Q01IZ2quSk5+DPH29k+/zSr1hfqhn8PxrsUH2EqBtU duqCPW2qwKGysZ+5jSlyVAkSaTuscVQFJ+eaWmD/vHCF8+SmjV4UE8KTMgCCbkOFA92+ pqUg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :mime-version:subject:date:from:dkim-signature; bh=tNVI8n8G4dGm/Kt8q+cor88aWMoQ6CUosNM7grMfeMA=; fh=cWfQ0WqBv1Pw7PhINIHK2v1yyoiscNQykPdEfpvTs1g=; b=qEVCbPxSNtHWhwiK19giApBC8NaEVFT1ah6IVqJxZdE7648Rv7VJMwM6lmgxDvbIpI 2tJ4WJ7f81fMcVyFuAtbLFKlrS4WMpaFmE0yeceQdFjU4NuY2P71JM3ndor40+ceo35i 0GsTyqybIYyPOEeAB9LtLO/8qCZtPqgxkpB7Z9LpXSe8UyDyFpSdzk5lVB0NNjcRmKwl YvwWDpMPIsmXyHS8Oiw5qIdnuW1rCnGyGpBt3EQCeMuqRYsgMLdVzvHCNKwapYhLIIsC 5+Au1MoS2Laqa5YpBaSrFbWe7Q3C7TrWfvY93QSCgF7pp3f1EGWYZd77CP5jE9iccHpU SfLg==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=iaUTZFF+; spf=pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=vladimir.riabchun@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id ffacd0b85a97d-48e3ecf6e2esi20438844f8f.255.2026.10.26.07.52.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 07:52:28 -0700 (PDT) Received-SPF: pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=iaUTZFF+; spf=pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=vladimir.riabchun@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=Message-Id:Content-Type:MIME-Version:Subject:Date :From; bh=tNVI8n8G4dGm/Kt8q+cor88aWMoQ6CUosNM7grMfeMA=; b=iaUTZFF+xie1xSKHU7Q uJ/8OMkrkpnq939UkA/XUcJHrx1YANttVy54ViUGd3EwFRAHn4Hk+PrAEcss/RXNAu2XMuShVyHY7 i9Ocx3HwzoaYsrW/L9YJNOlKN/1Ku8hRhd0DCFZC2rcPG7uJ7iVob5lkyxJmO75Sv7HTPbIBXkieY qMKEd30/d4XGDNlDN7uvL1T3UIExdMXqog9rgac+VYrkAT0JC405VP0FoPvZVG2AMv9oS+ltE8K4a xE3mw1qyQQvnpvUfoTX6EMIg5XyOSv+OdmtaXhFNNGc6pW4+YtQs1f/M8C7Qjl7PB/hLj4kS8Pt5Y UeIIGyVmnmKJUSQ==; Received: from ch-demo-asa.virtuozzo.com ([130.117.225.8] helo=192.168.1.87) by relay.virtuozzo.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xLM04-004zLL-1y; Mon, 26 Oct 2026 15:52:19 +0100 From: Vladimir Riabchun Date: Mon, 26 Oct 2026 15:52:22 +0100 MIME-Version: 1.0 Message-Id: <20261026-ovl-use-orig-ve-v2-3-eab58bfc29ca@virtuozzo.com> References: <20261026-ovl-use-orig-ve-v2-0-eab58bfc29ca@virtuozzo.com> In-Reply-To: <20261026-ovl-use-orig-ve-v2-0-eab58bfc29ca@virtuozzo.com> To: Konstantin Khorenko , ptikhomirov@virtuozzo.com, vasileios.almpanis@virtuozzo.com X-Mailer: b4 0.16.0 X-OZ-Fwd: true Cc: devel@openvz.org Subject: [Devel] [PATCH hci-8.1 v2 3/4] ovl: Keep creator VE in overlayfs superblock X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org Overlayfs superblock stores creator creds in it, but these creds should go together with the VE they were taken from. Store the VE in the superblock. We can't use mount->owner_ve, because several mounts can reference one superblock. https://virtuozzo.atlassian.net/browse/VSTOR-142405 Signed-off-by: Vladimir Riabchun --- fs/overlayfs/ovl_entry.h | 1 + fs/overlayfs/params.c | 3 +++ fs/overlayfs/super.c | 3 +++ 3 files changed, 7 insertions(+) diff --git a/fs/overlayfs/ovl_entry.h b/fs/overlayfs/ovl_entry.h index ab78001635e7..a6ad8b8de48c 100644 --- a/fs/overlayfs/ovl_entry.h +++ b/fs/overlayfs/ovl_entry.h @@ -77,6 +77,7 @@ struct ovl_fs { struct ovl_config config; /* creds of process who forced instantiation of super block */ const struct cred *creator_cred; + struct ve_struct *creator_ve; bool tmpfile; bool noxattr; bool nofh; diff --git a/fs/overlayfs/params.c b/fs/overlayfs/params.c index 32c58fcfe52f..c047f1265b8e 100644 --- a/fs/overlayfs/params.c +++ b/fs/overlayfs/params.c @@ -8,6 +8,7 @@ #include #include #include +#include #include "overlayfs.h" #include "params.h" @@ -761,6 +762,8 @@ void ovl_free_fs(struct ovl_fs *ofs) kfree(ofs->config.workdir); if (ofs->creator_cred) put_cred(ofs->creator_cred); + if (ofs->creator_ve) + put_ve(ofs->creator_ve); kfree(ofs); } diff --git a/fs/overlayfs/super.c b/fs/overlayfs/super.c index fb47711c8fb9..8ab39a35a873 100644 --- a/fs/overlayfs/super.c +++ b/fs/overlayfs/super.c @@ -18,6 +18,7 @@ #include #include #include +#include #include "overlayfs.h" #include "params.h" @@ -1328,6 +1329,8 @@ int ovl_fill_super(struct super_block *sb, struct fs_context *fc) sb->s_d_op = &ovl_dentry_operations; + ofs->creator_ve = get_ve(get_exec_env()); + err = -ENOMEM; ofs->creator_cred = cred = prepare_creds(); if (!cred) -- 2.52.0 _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel