From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (mail.openvz.org [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id 82B0B811BB for ; Thu, 5 Nov 2026 18:50:11 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A5Imt2f007965; Thu, 5 Nov 2026 21:48:55 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A5Imt2f007965 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="AeIGhdEG" Received: from mail-wr1-f71.google.com (mail-wr1-f71.google.com [209.85.221.71]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A5ImnhF007947 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Thu, 5 Nov 2026 21:48:50 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A5ImnhF007947 Received: by mail-wr1-f71.google.com with SMTP id ffacd0b85a97d-490c69dc02bso1361962f8f.1 for ; Thu, 05 Nov 2026 10:48:49 -0800 (PST) X-Forwarded-Encrypted: i=2; AKwUvBwjhj9jtiZk8y9cYf4ob7A+xdBMgQ1yihowHtrOnZ0BQ1ggY/j0EyepXuNMgY4Ovr7L3ZNNbQ==@openvz.org X-Gm-Message-State: APuU4Z/nPOoxZ98vYkDqpCVhHnllUDgDauIb6pp8EyfsYrorKoaWT9/Y rHQ/Nr8Q1SrQx0nFHQuOZ3guSPypwdwRWumYJP6M3Czm1fdo9VPri4a/bYKtTPRd3nqCcKLtWQh ZkibmZyf9lGHMGryTS+9bpl0GF37aYBCif02juL507heW+z+9lMjhTg== X-Gm-Gg: AYBFou3vosh4dJJ0TLBDiMLFddG/UmE2h9SZDAZLyD5ALV83aZjGzBTcgEQxO8D/JDy AXdXAQxHdjilrWFnhFeTKartqx6ScBjVYw1F9vLmRnV4WI3bc8UUbLeG0hC1s1nY2nBULgWvn7A L9oF3cOnX2LAneOVUpxWmwZoAnkRZiB1D7V7iPH1KYL1Ezy+nKx32bjP/uoUtMkjnEbMlpAdSMf N39D2EOtQVoOp50HDy3b7rZT0H/8X8Mwt/EpCPewb3aCjH2CNPyL7rI8mZMEJ2QtKj6k+gEsP8A 3XpFpInuOT2S8vvyA+qw/IsPD+vk6zhS2t93UksjQ9sq2+NJV2AlTjeA4k67vkM/vRjPJIbp+R6 W9vhw3WfsucyqXCqG X-Received: by 2002:a5d:5d82:0:b0:491:83e7:32bd with SMTP id ffacd0b85a97d-49277f88313mr930813f8f.50.1793904529536; Thu, 05 Nov 2026 10:48:49 -0800 (PST) X-Received: by 2002:a5d:5d82:0:b0:491:83e7:32bd with SMTP id ffacd0b85a97d-49277f88313mr930774f8f.50.1793904529028; Thu, 05 Nov 2026 10:48:49 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1793904529; cv=none; d=google.com; s=arc-20260327; b=dQGAGRFOCAhAGZDxlObCpFwa2H8LWOi7HZSy3N8I1CPF5bmKw75xt8aI0x4Xh/1Tez 4XY6dR455BaWuvHVuGHD/eDwPSiKQvC7OhwxvaCyMbhKBRg5LgSTNiMIHvH/IeMPR/gt TtxWvxxv+62d11GTWjSwuQwsZuNHAlKMqvuJ4RivO+EFGzpytQVd6kHqf2wP7Ckx0fiU +Hsr9LPWJ93eZhwipDaIf3+zk7DoPFM6jnwiOz9gNqCMktt4zxkk8+VruXtO9Lu2P4WL 5k0wBQj+d7IiYHWjaLZEJ4hj/myZ940rh4YwRURJ1+H5b8yssmiH/KHTlugGi+JVOV0U C3UQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :mime-version:subject:date:from:dkim-signature; bh=sGulrYlYJ0Y3DFfMCZAPTiFaUI3lWwhHlW9AmPBbDlg=; fh=bRkZfFa6377EgOVW8zBDri2gGIQqe/ZeiH+ijEM/ROI=; b=h0ZNnl9lhOh85tiYxrWOwIoFHh54xqJU4TORBnrzHWzXchk6UeqKnnGDsJ8aCqU/qA q+RmVCjk+noegYfkE3bndUtgSKWmNjwBcOLGhZno3uTjh3l09fiaRVT/JENiRMrGvc9r 2UnvFANweD5E+2F63Jr6d2X26RILOH+htsQdboeYr/Xww4YEx+OMlAts/o77jazhh0n+ yR2qd42SwyYfcgPwIHm9K+B9XCAUjg56PmZY15qIZmIhSrQMHAexTT/XfCF6zMAS2eup uQbSAnXHu+EJDAxlGo2ByOCqG8G/4NS8cnWZ7rFA2/6dTSj9gsJxxCL9GKBKsVxiipap lDIw==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=AeIGhdEG; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id ffacd0b85a97d-48ff04414d4si11562528f8f.437.2026.11.05.10.48.48 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 05 Nov 2026 10:48:49 -0800 (PST) Received-SPF: pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=AeIGhdEG; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=Message-Id:Content-Type:MIME-Version:Subject:Date :From; bh=sGulrYlYJ0Y3DFfMCZAPTiFaUI3lWwhHlW9AmPBbDlg=; b=AeIGhdEGrcJfvNTUTdQ msDBVB/ifk7PcYzvE+zitM5wVjw/usMklFdeYF8nF2pVTgrBYZfkOQR29bXxeFy0XhRmNSrVtkyR2 ntsHN+Tc8cQpp4kfTF23WcWfoAQ8DW6G1MKArJFO+8/TPoZANlcdiFleeUTUCmWI6sqXtBQbDy01X j3eZWni49aQ+zGbxuR/SHsoi5rOK29mmphyGxf0Liw0qFqqGlTfek7or2cDaIdjysrmvgbgcHHDhl OPTRwSzQat17WcBYfVZGoW0l2jf4mC7Ejb0tCkkEKstSHPiXEFwSmPMVaYz6peVZQWf9mYSENorVb UtKvzzH0Q0KPfQw==; Received: from ch-demo-asa.virtuozzo.com ([130.117.225.8] helo=f0.sw.ru) by relay.virtuozzo.com with esmtp (Exim 4.96) (envelope-from ) id 1xP2S2-007GKi-0M; Thu, 05 Nov 2026 19:48:46 +0100 From: Konstantin Khorenko Date: Thu, 05 Nov 2026 19:48:44 +0100 MIME-Version: 1.0 Message-Id: <20261105-b4-prep-khorenko-vstor-153679-mbind-ve-v1-1-b4fcd27c8001@virtuozzo.com> References: <20261105-b4-prep-khorenko-vstor-153679-mbind-ve-v1-0-b4fcd27c8001@virtuozzo.com> In-Reply-To: <20261105-b4-prep-khorenko-vstor-153679-mbind-ve-v1-0-b4fcd27c8001@virtuozzo.com> To: Pavel Tikhomirov , Vasileios Almpanis X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=1404; i=khorenko@virtuozzo.com; h=from:subject:message-id; bh=DPfvhQKd786tXqz7b+qd/LEerjdH4AobzbGmcFOzQno=; b=owEBbQKS/ZANAwAKAVGWCkf5YVwqAcsmYgBq7M+PhplvOnihsNjPAVkICq1jGn7a5EinLnrfc IdpY73sx0CJAjMEAAEKAB0WIQRWD23IPcXT0GO9CCxRlgpH+WFcKgUCauzPjwAKCRBRlgpH+WFc KkZED/9afoBsJCVvtxAy0UnmSeicn2bp6jMaCF3gHT0VZXSC9jgknbYCmXFigfuwcdnew8kH2iw p1G+H2fT4eFLakGpn49Dl2OtZ2Y/XICiM/OO8jj6m5ssf2zHpbuzx9Ycc5WMFvHOoJM1XMEZtfk Cccl4K4F1fdInJruP/uhRRZH63BjG9oTdTvMSuSkfNBgCDXltwSRVehqy5s4NDg8NrkcNOfg+au 8ZPTWPpjU3hYUPRQB9S3FH8gPxnyW9ADIrYZOAdQpcQMUyYNR8d+3qIuSxrsXSHldphIXsiMD3M WjzgIUhrCEc6ittBdjnlplGQQfXG1teo5BnxxKxxu/gcKMIFJGMxbkW3SE63oMwrK4W8fEHI2jz M7aJHKPeyzqoL6mgaBRafbXzmUTj142uVqUSUyi8/1DpweCdqPgM7LUoz7L+ob3KW85mA7Z4qsV P7A5raXqKE9m74twuDi+Rn9wcu8/2Wo0ZsRxSFr816+gIOuyuzYsYeDgoZKqh9jl4HnGnGGOwFu +56Mo9KqfiPqHRLxwcKVpQ7PmUohG6SaiBDWxDlkA5Cw1218Js0pGOjZKNZucNjG2ir91wQhuKv b/PwjwBFokmTMCJSoKym45bhWJtqVM3NK1ie7nLBuR4rQf7xWdKWC4AXyb7Dd3ufvmxBwFz0lHj WbNIG6MJqGe9WQA== X-Developer-Key: i=khorenko@virtuozzo.com; a=openpgp; fpr=560F6DC83DC5D3D063BD082C51960A47F9615C2A X-OZ-Fwd: true Cc: devel@openvz.org Subject: [Devel] [PATCH hci-8.1 1/2] mempolicy: prohibit mbind and set_mempolicy_home_node in VE X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org A CT is meant to see a kernel without NUMA support: in a non-super VE the NUMA API syscalls return -ENOSYS, as they do in a kernel built without CONFIG_NUMA. Return -ENOSYS from mbind(2) and set_mempolicy_home_node(2) at the start of the handler, before any argument check, as the other NUMA API syscalls do. Fixes: a803a5b2ea97 ("mempolicy: prohibit all NUMA API syscalls in VE") https://virtuozzo.atlassian.net/browse/VSTOR-153679 Feature: mm: prohibit NUMA API inside CT Signed-off-by: Konstantin Khorenko --- mm/mempolicy.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/mm/mempolicy.c b/mm/mempolicy.c index 3255d3e987180..9b2a32ef92949 100644 --- a/mm/mempolicy.c +++ b/mm/mempolicy.c @@ -1584,6 +1584,9 @@ SYSCALL_DEFINE4(set_mempolicy_home_node, unsigned long, start, unsigned long, le int err = -ENOENT; VMA_ITERATOR(vmi, mm, start); + if (!ve_is_super(get_exec_env())) + return -ENOSYS; + start = untagged_addr(start); if (start & ~PAGE_MASK) return -EINVAL; @@ -1645,6 +1648,9 @@ SYSCALL_DEFINE6(mbind, unsigned long, start, unsigned long, len, unsigned long, mode, const unsigned long __user *, nmask, unsigned long, maxnode, unsigned int, flags) { + if (!ve_is_super(get_exec_env())) + return -ENOSYS; + return kernel_mbind(start, len, mode, nmask, maxnode, flags); } -- 2.43.0 _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel