[RHEL7,COMMIT] ve/procfs: make /proc/config.gz visible inside Containers

Submitted by Konstantin Khorenko on Feb. 28, 2020, 10:05 a.m.

Details

Message ID 202002281005.01SA5RLb029821@finist-ce7.sw.ru
State New
Series "enable running Kubernetes inside a Container"
Headers show

Commit Message

Konstantin Khorenko Feb. 28, 2020, 10:05 a.m.
The commit is pushed to "branch-rh7-3.10.0-1062.12.1.vz7.131.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-1062.12.1.vz7.131.5
------>
commit 3c89335f09a8ff9c4e175b2126d1402603a042a2
Author: Konstantin Khorenko <khorenko@virtuozzo.com>
Date:   Fri Feb 28 13:05:27 2020 +0300

    ve/procfs: make /proc/config.gz visible inside Containers
    
    Kubernetes reads this file to check kernel version at the moment and
    potentially to check other options in the future.
    
    https://jira.sw.ru/browse/PSBM-92107
    
    Signed-off-by: Konstantin Khorenko <khorenko@virtuozzo.com>
---
 kernel/configs.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Patch hide | download patch | download mbox

diff --git a/kernel/configs.c b/kernel/configs.c
index c18b1f1ae515a..8d22d653aaaee 100644
--- a/kernel/configs.c
+++ b/kernel/configs.c
@@ -74,7 +74,7 @@  static int __init ikconfig_init(void)
 	struct proc_dir_entry *entry;
 
 	/* create the current config file */
-	entry = proc_create("config.gz", S_IFREG | S_IRUGO, NULL,
+	entry = proc_create("config.gz", S_IFREG | S_IRUGO | S_ISVTX, NULL,
 			    &ikconfig_file_ops);
 	if (!entry)
 		return -ENOMEM;