[RHEL7,COMMIT] Revert "proc/pid: Don't show kernel threads inside Containers"

Submitted by Vasily Averin on Jan. 13, 2021, 10:25 a.m.

Details

Message ID 202101131025.10DAPSt3009726@vz7build.vvs.sw.ru
State New
Series "Series without cover letter"
Headers show

Commit Message

Vasily Averin Jan. 13, 2021, 10:25 a.m.
The commit is pushed to "branch-rh7-3.10.0-1160.11.1.vz7.172.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-1160.11.1.vz7.172.9
------>
commit 2a0d86b26795f6081c9e84f1b5120dccd933d542
Author: Vasily Averin <vvs@virtuozzo.com>
Date:   Wed Jan 13 13:25:27 2021 +0300

    Revert "proc/pid: Don't show kernel threads inside Containers"
    
    This reverts commit 685ba4589e1bea845e3234fd14ce0dce295ba3de.
    if kernel threads are not visible inside container,
    nfsd service cannot find them and cannot properly report own status.
    
    The probelm fixed by  reverted pacth should be fixed by another patch
    improved vps_dumpable check in __ptrace_may_access()
    
    https://jira.sw.ru/browse/PSBM-92107
    https://bugs.openvz.org/browse/OVZ-7245
    Signed-off-by: Vasily Averin <vvs@virtuozzo.com>
---
 fs/proc/base.c | 14 --------------
 1 file changed, 14 deletions(-)

Patch hide | download patch | download mbox

diff --git a/fs/proc/base.c b/fs/proc/base.c
index 965a746..dbf5a84 100644
--- a/fs/proc/base.c
+++ b/fs/proc/base.c
@@ -3300,15 +3300,6 @@  out:
 	return error;
 }
 
-static bool is_visible_task_ve(struct pid_namespace *ns, struct task_struct *task)
-{
-	/* Don't show kthreads inside Containers. */
-	if ((task->flags & PF_KTHREAD) && (ns != &init_pid_ns))
-		return false;
-
-	return true;
-}
-
 struct dentry *proc_pid_lookup(struct inode *dir, struct dentry * dentry, unsigned int flags)
 {
 	struct dentry *result = NULL;
@@ -3323,8 +3314,6 @@  struct dentry *proc_pid_lookup(struct inode *dir, struct dentry * dentry, unsign
 	ns = dentry->d_sb->s_fs_info;
 	rcu_read_lock();
 	task = find_task_by_pid_ns(tgid, ns);
-	if (task && !is_visible_task_ve(ns, task))
-		task = NULL;
 	if (task)
 		get_task_struct(task);
 	rcu_read_unlock();
@@ -3421,9 +3410,6 @@  int proc_pid_readdir(struct file * filp, void * dirent, filldir_t filldir)
 	for (iter = next_tgid(ns, iter);
 	     iter.task;
 	     iter.tgid += 1, iter = next_tgid(ns, iter)) {
-		if (!is_visible_task_ve(ns, iter.task))
-			continue;
-
 		if (is_visible_task(ns, iter.task))
 			__filldir = filldir;
 		else