[Devel,RHEL7,COMMIT] Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code

Submitted by Konstantin Khorenko on March 2, 2017, 12:19 p.m.

Details

Message ID 201703021219.v22CJ9rr030844@finist_cl7.x64_64.work.ct
State New
Series "Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code"
Headers show

Commit Message

Konstantin Khorenko March 2, 2017, 12:19 p.m.
The commit is pushed to "branch-rh7-3.10.0-514.6.1.vz7.28.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-514.6.1.vz7.28.7
------>
commit 149bff11f3d9d3fec00da9ac59215e80e54244cd
Author: Konstantin Khorenko <khorenko@virtuozzo.com>
Date:   Thu Mar 2 16:13:00 2017 +0400

    Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code
    
    The perf_event_open() syscall is available from Containers.  The
    CONFIG_CGROUP_PERF option is set in current OpenVZ kernel configs, but let's
    force-enable it if CONFIG_VE is enabled to prevent possible non-secure kernel
    config if someone rebuilds the kernel with own config.
    
    https://jira.sw.ru/browse/PSBM-51360
    
    Signed-off-by: Konstantin Khorenko <khorenko@virtuozzo.com>
---
 kernel/Kconfig.openvz | 1 +
 1 file changed, 1 insertion(+)

Patch hide | download patch | download mbox

diff --git a/kernel/Kconfig.openvz b/kernel/Kconfig.openvz
index d85d1dd..ae3b2f3 100644
--- a/kernel/Kconfig.openvz
+++ b/kernel/Kconfig.openvz
@@ -18,6 +18,7 @@  config VE
 	select CGROUPS
 	select CGROUP_DEVICE
 	select CGROUP_FREEZER
+	select CGROUP_PERF
 	select SCHEDSTATS
 	help
 	  This option adds support of virtual Linux running on the original box