From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (mail.openvz.org [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id 7D8178045D for ; Mon, 2 Nov 2026 17:30:50 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A2HTa7q027600; Mon, 2 Nov 2026 20:29:37 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A2HTa7q027600 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="ByYYxYFr" Received: from mail-yw1-f199.google.com (mail-yw1-f199.google.com [209.85.128.199]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A2HTZsn027596 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Mon, 2 Nov 2026 20:29:35 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A2HTZsn027596 Received: by mail-yw1-f199.google.com with SMTP id 00721157ae682-8b0cd41e7aaso47423947b3.3 for ; Mon, 02 Nov 2026 09:29:35 -0800 (PST) X-Forwarded-Encrypted: i=3; AKwUvBzhmDnQNFq02wwuqvCfsnwQ4+eJqRCFm1/dlXFYJwcQoKAUjjOPg3BgkrOWHlN+HZhmWKyw0w==@openvz.org X-Gm-Message-State: APuU4Z9wmFA+oKZERqt5NB5GDgR1nUgUN7Le6t1d3uwJhV0J5N+dPRl/ 0ZmKC0S97rfpZpkU2zvzcpX87PAgTB64v+xEUB+2NcNfYl07CNaqcSHc2717OE1ETLcRvCRVYiO 11ruSHeermcCR3FwZ66uIIWU4BhsbeFgXraH4Oo8ArbHUzBLDkWzJEQ== X-Gm-Gg: AYBFou2uUGUVqtK/OJ6Pju7pfeCbeFmJ5nJIcdkq2A7Wzgn91TFv5XUpuGSsdfAcE0c cc7b82BiD2QD/5YJJdNWKZftCI64QYk7rH1OCAQVkJgJDj+GRbjag3W9O5COJ5+u7swkGVBP/E3 V92ZUQXui+5moiTIX6z8yA0RFZAFPxwON+UXV4VwYc0HBg0qW/xuV0Eg6ji09nnmGBbTKSWcLmz aaRsBURycwS2OR4GmsaJkVCBZKh4/sB8iqU47e/HghvV0dvEwbQlFMkIvo3aTx5z8QI46O4Zit5 N7kWYkgSloDITQ9XhbDvMN4/DRe7L3CqwOWbi0rrSKdeeTlUgL82BHbVj2oQm1CGh8pgyVeiGsh IVKksoON84V4sKWChXaoepGZXkUlC7XstSgXJulNz97SMjG6IJNT0YwkdDxKjYOyGv+JfGdjFbW ZPbfR+LSRHJJIYDsAjTc9xpaFGI9OUMLEsow== X-Received: by 2002:a05:690e:80f:20b0:66f:c719:6161 with SMTP id 956f58d0204a3-67ba4f7e4c7mr4030368d50.27.1793640574466; Mon, 02 Nov 2026 09:29:34 -0800 (PST) X-Received: by 2002:a05:690e:80f:20b0:66f:c719:6161 with SMTP id 956f58d0204a3-67ba4f7e4c7mr4030357d50.27.1793640573840; Mon, 02 Nov 2026 09:29:33 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1793640573; cv=pass; d=google.com; s=arc-20260327; b=UxAYf/ZnZQHbpaZfEmCQEHtaUoov37TjIl515GXE3865ei2xdAYCT21cn4AeRZJu3S FAEJKFV3s7+gmzfrX7GkwvsqNWUObU+bnOg/wv2o9oDSWC5G3/xKLydEE0qeIteHE1WP W10+v6Efj7HzAe56oRN5Bfj7JggVoYnJA+SCTk2kIUB4XX31vUEPwqJJOKNZqbsPpZaZ kdlAqISqcEqK+mrq9gMAOEYu4OJGeKDBMxSdKs2fvg0fDPT2PBscjLprBSUH8763xxF7 z3biLoWPhFVwrT7AJurrFA6vcX/8hmHYN9PaNgYxiZNWtQqb3Pc6CA/Usg3h49zZ94QE SK5Q== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:in-reply-to:from :content-language:references:cc:to:subject:user-agent:date :message-id:dkim-signature; bh=q51U+vKcJ77vPEvCDA+Yc5rG/8/2RFJPdnfx8FebpAc=; fh=VQDKhBgz8Lx9RXvapRlbooCtsgGsUHg4STGkxjpnkho=; b=V3i+LmmpHTo4oTx8z0tx5LSocK5B59RU7OTIa1cxXCfvQc8Gro6tKymzo67QsxYohM G6ArT95bKdnijZ0XxIelbOhiAPkZWWfV9xq5QCq/jQ0eJY4uyaw9le23s0mJBrB23FJQ t9ozk9yUDnz6Tu5GP2YO49xyEPsoePm6qW6l+cmWJlJgzx9rocTaBhCwjw52Akewagen u1EYejFkiZijqfVoj/swhZKpuv5BMFQpT++VZl7hCedyIbjX7TTWFVjgy0hUH8bgCWBS cePmoGSSL/prlPKz8CFzrx2NKa+FDjYw/YWWBgNCM10IUeHP1b/Fto8MaeIQdVEvvNc0 /2Dw==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=selector2 header.b=ByYYxYFr; arc=pass (i=1 spf=pass spfdomain=virtuozzo.com dkim=pass dkdomain=virtuozzo.com dmarc=pass fromdomain=virtuozzo.com); spf=pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=vladimir.riabchun@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c200::3]) by mx.google.com with ESMTPS id 956f58d0204a3-67baf3842f8si7048370d50.174.2026.11.02.09.29.29 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 02 Nov 2026 09:29:29 -0800 (PST) Received-SPF: pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 2a01:111:f403:c200::3 as permitted sender) client-ip=2a01:111:f403:c200::3; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=selector2 header.b=ByYYxYFr; arc=pass (i=1 spf=pass spfdomain=virtuozzo.com dkim=pass dkdomain=virtuozzo.com dmarc=pass fromdomain=virtuozzo.com); spf=pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=vladimir.riabchun@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=TGiMgTgyFtw/qS63oPcVjjW7UHZvqPos6J/0MaZFquzhQMDYB4q7zxozhJ6GnUbVr6Qn7k8Yv7ns2UB86KRZA+xY8dYJ1hhxNj+248jiO3q3zKL5s90UrOxt6tbTq3Ci/wLcNyLb7vDAzTYwyFI4bfMhTAfo5Knbt6n/OIwLFQLJyusnP84va+crWDFhKGbveaya8qacoHmtKF3HHO9iCIFPmte4QniA2DU7PXRpwduPrDa8DFHvlE5g/L60ocSYlwgyPLpYGNpJ3XrhwDKt3t/7wBWVPFUWA333JOe3O14O+lERnAg/zTkbFk27vs/Euq/LNmIteGu8UkZDziz90Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=q51U+vKcJ77vPEvCDA+Yc5rG/8/2RFJPdnfx8FebpAc=; b=dJIZsgDxXCzfFxjhCSdmfFtx7kvRO4h34mD8ZqKf2eqnhZqAJfi+DTw0lhHqQA0y83E/u9YFi68VYeJ2/olTPh6sZWyLYp+CopKRNSYDpdjCiEOwpvEN5zuQpl4t53Pwa33pO/yAzdjE5/jwveDBcZ+3C18HOg6lm+nAT+SjJLB4hrFP/fwttOg86CCkNdLRSqTn5pmApZkuaWFRWwMlbiRK/wQhUmApgJZWlelHIvuJZePwLtU6K6sPly+m+JLmy/UfwpytBnvyptePmUvQ2h4EB3prkEI6WcisC7jjnUSUWB9h74KlCrXkStKK4RatOc2tGcUX/HF7UtpkWukwvQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=virtuozzo.com; dmarc=pass action=none header.from=virtuozzo.com; dkim=pass header.d=virtuozzo.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=virtuozzo.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=q51U+vKcJ77vPEvCDA+Yc5rG/8/2RFJPdnfx8FebpAc=; b=ByYYxYFrIRxz6cUBm908TwNZzuZO65/SBbBL/2+7G0OAxXQxmycawlDqV4GnQTEDWlDsn0Tdgm3hsXyaOCHtV/E4jErWLo67oNC3EuwE+TFliqZ6LrJn8eR6DKHbrRJDfbcKZI3iGfE7GqygiYkI9M+E8357sPaGeCx+8HbcwxIOSlQ0J+L7D5uT8S/mAWZ+/vgVAisS0VfUOk7GBCzVZu5uN+53rl++y1EwYDsC43CNhqmEKiIldFiCtfiEVZnlCrmtuLXsHmAFsQefVOsOXGl+FTAe7CVBNA3HD/wEZN407Y1NeqHGKvPljubmn/Q6Bp4OzlwtTznuNNNKta/yXg== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=virtuozzo.com; Received: from MI7PR08MB201474.eurprd08.prod.outlook.com (2603:10a6:290:112::17) by DU0PR08MB7463.eurprd08.prod.outlook.com (2603:10a6:10:356::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.12; Mon, 2 Nov 2026 17:29:27 +0000 Received: from MI7PR08MB201474.eurprd08.prod.outlook.com ([fe80::f35b:af88:bd82:6dfa]) by MI7PR08MB201474.eurprd08.prod.outlook.com ([fe80::f35b:af88:bd82:6dfa%3]) with mapi id 15.21.0569.011; Mon, 2 Nov 2026 17:29:27 +0000 Message-ID: <7f772e29-fae7-4cbc-bc0b-e339cd65050e@virtuozzo.com> Date: Mon, 2 Nov 2026 18:29:26 +0100 User-Agent: Mozilla Thunderbird To: Pavel Tikhomirov References: <20261026-ovl-use-orig-ve-v2-0-eab58bfc29ca@virtuozzo.com> <20261026-ovl-use-orig-ve-v2-2-eab58bfc29ca@virtuozzo.com> <179318868950.3559520.1087763096256737038.b4-review@b4> Content-Language: en-US From: Vladimir Riabchun In-Reply-To: <179318868950.3559520.1087763096256737038.b4-review@b4> X-ClientProxiedBy: FR0P281CA0153.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:b3::12) To MI7PR08MB201474.eurprd08.prod.outlook.com (2603:10a6:290:112::17) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MI7PR08MB201474:EE_|DU0PR08MB7463:EE_ X-MS-Office365-Filtering-Correlation-Id: e65ebc98-ef6b-4e71-ee63-08df3906d870 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|376014|1800799024|366016|23010399003|3023799007|10067099003|18002099003|22082099003|261102123227099003|56012099006|4143699003|5023799004|261022115727099003|261022105027099003|261022075727099003|261026140227099003|261009223027099003|261028144727099003|261021121427099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MI7PR08MB201474.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(376014)(1800799024)(366016)(23010399003)(3023799007)(10067099003)(18002099003)(22082099003)(261102123227099003)(56012099006)(4143699003)(5023799004)(261022115727099003)(261022105027099003)(261022075727099003)(261026140227099003)(261009223027099003)(261028144727099003)(261021121427099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?STk5TFBTczNhZGR6c0RrMXRCV2RwOVhsVklQL0xWMTN4aVFOZnlhZ3V0b3hG?= =?utf-8?B?ZTdmT2FURVF4ODk5cC8waU1oWCtKaGVtYkZJTzh5TXliUUR1RTdqY01yZmNO?= =?utf-8?B?aUdxdy83dDlVcWVBNjg2RU1Sc2pLWFdSTXBtVGttWDE5SWQ4U3JocDh3akdS?= =?utf-8?B?ZUM4TzhiNXRsSGdGZk1IS3JKNitCMitvODB2S0Z3ZEhlUlNyQ3JiT09Oa1px?= =?utf-8?B?cXIxa1NiVHY2K1RMMFYxM09VeWI5ZTdJT1Ayb2orRUR1ajNZRmJHeGtQU1k4?= =?utf-8?B?ZXI1Ulp5WUs2b3Ntb2UwUjFNRUpKZS9jVzZ0ckUxdUVYYVNnZVdDSi9ISW1D?= =?utf-8?B?TzVlVjNyOTVnMWczdFZYL2FrbFlqdHcvRzhCSGpmVktOaE91ZlBVN1d1ZzZ6?= =?utf-8?B?OTVwQWljamhRcDd0QnZBZ3pYSnM0dm04d2haeW80TVc3VmdHaVcyQ0ZLNkd4?= =?utf-8?B?U3ZlM1Q3UmhLazV3ZDVYWlRkY2tSZWx3bWRyRzRCWEVxcmJrbTFBOEJST0Qv?= =?utf-8?B?dWhrQWE0R25Fc2pOS3kvby9zRnQ1Ty9YVDByY1lVdFlvYVp3TzEyQ0dXRHhR?= =?utf-8?B?bEsrVEFGWTFKaENiaGxlcXZtRHlmNGxOWE11SzlCdWdIMHczaXh6MFE1ZTQ0?= =?utf-8?B?bmwwbTQvYjViMkwyWDJKNlpzcnNLRGR2MkY0dTdRdTVqVkQ2MHRjV3E3NCti?= =?utf-8?B?WlF1VlJIQk1Vd1JEUDFRaFc0K24yOXBRbzZMdjI4blhRR1JDbEtuNytrTzI5?= =?utf-8?B?RFNaTktsNmhMZ3hhY2h5YlBXaEM3U3k5dWUxVFZSakNvMXZDZE1qbE5YQUV4?= =?utf-8?B?Szc0ejFVWTJFMW0xVFRYVTF0MUZ3Y21acW12cjlWbm1TaXFFbExKaFlpVS9L?= =?utf-8?B?c0ZlWnhBM2RUZEd0WTVnUDZZbWxRT3VjNHpsSk90cVpCQXBXYkRIOHcrRGdl?= =?utf-8?B?M1BpUlhwdzBKSy8zUXNHdXg5cVQyV3plQW1aLzFxWVN1ak5rZVRpdmJBT0tN?= =?utf-8?B?MkQ5RUNsQjdVZFZpUnNGWGlHYVFzcjZCN1RwZVBWZHcxOGFvMG9pWW44Q0ZP?= =?utf-8?B?dFhDRS9jSkJoS1ltQXZ1bHRHMWJMcC8vNUtydkZLUmlUS3BOQldsbTdZRGdo?= =?utf-8?B?S2h6cVJ4a2dwOENUVXlpTkhWc0JwNjZnTFZRSFFVZ3dOLzJia0VKTVlOQWZP?= =?utf-8?B?Ty8zd2sycmxCd0VLWk9haG5wMTJEVmxjTnk4WVdSL3grZ292ckhFcE1ndEpv?= =?utf-8?B?WHltTzZybnZORUd5Yk5jVXp3bkY3SnVSN1BkQWJGVGV3Sm12SWlpODhFbWMz?= =?utf-8?B?WWlDNVRvWXNNeklXRFpyMU1MK2JTZEdYem4yNWJDQXlLUDVxYmtSVmdwbWFz?= =?utf-8?B?bFk3OWJYVWVBU1dXMkNyaWFpRkxQVE80Ukpaek1vbkFGc2dIYW1raFltWUFE?= =?utf-8?B?eWM2UE5jN2pUQnhaSmJIbmhicFFhWGdsQVBLZko4MGo3bDV5L2lVMEhiV2c0?= =?utf-8?B?WXBqM0RhQXYxS2tRMzNLellrS1hRVDZJejlNdUVERktBemJiT2lpdGpSUmRj?= =?utf-8?B?UWVCVGhwV0dPT0NXRUJTT0lLUUFGZUQxM2ZmY3ZZZkFENW1mclN2aEJpV1Ru?= =?utf-8?B?OTQxbnZhUzUwY0dXdDVaTDRKdzBmRDgxWjR3dXNvSVhGYTBiRkt1bVZFUmJp?= =?utf-8?B?WkZPQ2dCR21NK0p1MFlFTVJieTQyU093SDFwaGdCRk5veHhTVE9peS84elZp?= =?utf-8?B?MDEvYUNNcGtGclJCajNyc0VHckduSnFvZGlxUjFZa1JTalVrTExSWENlRysy?= =?utf-8?B?TG5FT0JCeFBPcDlMbFQ0ZUNzNnFKNGtYcURTSjZKbXlWbE8xMWM2V2E1VDkz?= =?utf-8?B?MEtEZWlNU3dDNUdGRDVuZE1obVo0TnVHYjhSb1JhdWt1QXl4ZHJiaEdOdnRQ?= =?utf-8?B?Zk1zZzdYa0FDeGRIeWJRY2JjQ0FwcWFrZ1FlWVVla0JSNGRqSWo2SUdPdjEx?= =?utf-8?B?d2E2RzZFRXRzNG1xcm5SZkFSMXZFYVlNK1VTeGZJL21PQ3MxNmFNUFBXaDBa?= =?utf-8?B?cWNRVjNLQVJoeFhzMVhhOEo2K055Tmo3cjNycW1odDB0QmwzcThPN1hIRmxX?= =?utf-8?B?WWtzdENza1pVWHJjRkxxVUsyYi8wbTNtU0I5Y1I3Ni83YkcrQXVnNEMyNVUr?= =?utf-8?B?a0FQck80enVrbGQwbjdqdzRDS0ZZOGdPTjRQcks4cHBKOVczUWE0WTRHbTVG?= =?utf-8?B?Q0psTTdXd3JoRisrRUF0UDBPU3B6N1BxUTljaHB0YW5NTEhpeVVHNnVlTk4r?= =?utf-8?B?M1JzRFBMWGZBQm8wdytXN1RXQ01YK3lKY1dpbENzMHlGRGNobGlEVGJBWGNw?= =?utf-8?Q?K7TOfJDlgLbbZt6c=3D?= X-OriginatorOrg: virtuozzo.com X-MS-Exchange-CrossTenant-Network-Message-Id: e65ebc98-ef6b-4e71-ee63-08df3906d870 X-MS-Exchange-CrossTenant-AuthSource: MI7PR08MB201474.eurprd08.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Nov 2026 17:29:27.4852 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 0bc7f26d-0264-416e-a6fc-8352af79c58f X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: pIxcmiRDeB8EtS6F/JowfkskoZQjjxw7oUPnZQK/8FxoJJITx4oHvLnKtmL/Lek83UNuUt+cObC2ewFInNX6sz8ndeFsvZhKOr8O8As59rk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR08MB7463 X-OZ-Fwd: true Cc: devel@openvz.org Subject: Re: [Devel] [PATCH hci-8.1 v2 2/4] ve: Introduce override_ve/revert_ve helpers X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org On 10/28/26 12:58, Pavel Tikhomirov wrote: >> These helpers mirror override_creds/revert_creds and are supposed to >> be used together in cases when VE creds may be stored and later used >> by the different VE task. > > In multiple places like /proc//status task will jump to other VE. > > Also anything using get_task_ve will be tricked to believe in task VE > change. E.g.: > > Small information leak, drivers/connector/cn_proc.c:209. > proc_event_connector() sends events about a task to that task's VE's > listeners. > Agree. I'll instead introduce a separate field in task struct, which will contain ve override, and will be used by ve_capable only. >> >> https://virtuozzo.atlassian.net/browse/VSTOR-142405 >> Signed-off-by: Vladimir Riabchun >> >> diff --git a/include/linux/ve.h b/include/linux/ve.h >> index 717567775f58e..9d633717a7fe2 100644 >> --- a/include/linux/ve.h >> +++ b/include/linux/ve.h >> @@ -295,6 +295,23 @@ static inline struct vdso_image *ve_get_vdso_64(struct ve_struct *ve) >> return ve->vdso_64; >> } >> >> +static inline struct ve_struct *override_ve(struct ve_struct *new_ve) >> +{ >> + struct ve_struct *old_ve; >> + >> + guard(task_lock)(current); > > This adds a lock to hot paths such as ovl_permission, ovl_getattr and > ovl_lookup; AI deems this worth stating, probably not that critical, > but the save check result approach has no such problem. Adding a separate field for overrides will solve this problem. Nobody should race on it. > >> + old_ve = current->task_ve; >> + >> + current->task_ve = new_ve; >> + return old_ve; >> +} > > What about direction checks? ve0->veX ok and veX->ve0 is probably a > security breach and should not be allowed. I'll add a guard against it. If current is a CT process, it shouldn't be able to override VE, only ve0 -> veX is OK. > -- Best regards, Riabchun Vladimir Linux Kernel Developer, Virtuozzo _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel