Changes in .gitignore

4b4193256c8d3bc3a5397b5cd9494c2ad386317d - Merge branch 'next' into for-linus

Tue, 15 Dec 2020 01:27:23 +0100

Merge branch 'next' into for-linusPrepare input updates for 5.11 merge window. List of files: /linux/tools/testing/selftests/clone3/.gitignore

05909cd9a0c8811731b38697af13075e8954314f - Merge tag 'v5.9' into next

Wed, 18 Nov 2020 03:13:23 +0100

Merge tag 'v5.9' into nextSync up with mainline to bring in the latest DTS files. List of files: /linux/tools/testing/selftests/clone3/.gitignore

0ea8a56de21be24cb79abb03dee79aabcd60a316 - Merge drm/drm-next into drm-intel-next-queued

Sat, 12 Sep 2020 02:00:20 +0200

Merge drm/drm-next into drm-intel-next-queuedSync drm-intel-gt-next here so we can have an unified fixes flow.Signed-off-by: Rodrigo Vivi List of files: /linux/tools/testing/selftests/clone3/.gitignore

9ddb236f13594b34a12dacf69a5adca7a1aef35e - Merge branch 'for-linus' into for-next

Wed, 09 Sep 2020 18:26:07 +0200

Merge branch 'for-linus' into for-nextBack-merge to apply the tasklet conversion patches that are basedon the already applied tasklet API changes on 5.9-rc4.Signed-off-by: Takashi Iwai List of files: /linux/tools/testing/selftests/clone3/.gitignore

6bde8ef51c917a657476310728d6cb3de6bac9e4 - Merge branch 'topic/tasklet-convert' into for-linus

Wed, 02 Sep 2020 13:31:45 +0200

Merge branch 'topic/tasklet-convert' into for-linusPull tasklet API conversions.Signed-off-by: Takashi Iwai List of files: /linux/tools/testing/selftests/clone3/.gitignore

ead5d1f4d877e92c051e1a1ade623d0d30e71619 - Merge branch 'master' into for-next

Tue, 01 Sep 2020 14:19:48 +0200

Merge branch 'master' into for-nextSync with Linus' branch in order to be able to apply fixupsof more recent patches. List of files: /linux/tools/testing/selftests/clone3/.gitignore

3bec5b6aae830355e786e204b20a7cea38c3a8ed - Merge tag 'v5.9-rc2' into regulator-5.9

Tue, 25 Aug 2020 12:01:46 +0200

Merge tag 'v5.9-rc2' into regulator-5.9Linux 5.9-rc2 List of files: /linux/tools/testing/selftests/clone3/.gitignore

1959ba4e40ce40c380dbe868433f5c4b20bb1ba3 - Merge tag 'v5.9-rc2' into asoc-5.9

Tue, 25 Aug 2020 12:00:43 +0200

Merge tag 'v5.9-rc2' into asoc-5.9Linux 5.9-rc2 List of files: /linux/tools/testing/selftests/clone3/.gitignore

2d9ad4cfaf4d32a64a4ed556e5bcab9121215026 - Merge tag 'v5.9-rc2' into drm-misc-fixes

Tue, 25 Aug 2020 11:00:02 +0200

Merge tag 'v5.9-rc2' into drm-misc-fixesBackmerge requested by Tomi for a fix to omap inconsistentlocking state issue, and because we need at least v5.9-rc2 now.Signed-off-by: Maarten Lankhorst List of files: /linux/tools/testing/selftests/clone3/.gitignore

d85ddd1318e66c0c2665dbfcbc21a8b66c9152aa - Merge v5.9-rc1 into drm-misc-next

Tue, 18 Aug 2020 14:14:25 +0200

Merge v5.9-rc1 into drm-misc-nextSam needs 5.9-rc1 to have dev_err_probe in to merge some patches.Signed-off-by: Maxime Ripard List of files: /linux/tools/testing/selftests/clone3/.gitignore

9e8238020c5beba64e7ffafbb7ea0fb02fe68270 - Merge branch 'next' into for-linus

Sat, 08 Aug 2020 01:41:01 +0200

Merge branch 'next' into for-linusPrepare input updates for 5.9 merge window. List of files: /linux/tools/testing/selftests/clone3/.gitignore

94fb1afb14c4f0ceb8c5508ddddac6819f662e95 - Mgerge remote-tracking branch 'torvalds/master' into perf/core

Thu, 06 Aug 2020 13:15:47 +0200

Mgerge remote-tracking branch 'torvalds/master' into perf/coreTo sync headers, for instance, in this case tools/perf was ahead ofupstream till Linus merged tip/perf/core to get thePERF_RECORD_TEXT_POKE changes: Warning: Kernel ABI header at 'tools/include/uapi/linux/perf_event.h' differs from latest version at 'include/uapi/linux/perf_event.h' diff -u tools/include/uapi/linux/perf_event.h include/uapi/linux/perf_event.hSigned-off-by: Arnaldo Carvalho de Melo List of files: /linux/tools/testing/selftests/clone3/.gitignore

74858abbb1032222f922487fd1a24513bbed80f9 - Merge tag 'cap-checkpoint-restore-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux

Wed, 05 Aug 2020 00:02:07 +0200

Merge tag 'cap-checkpoint-restore-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linuxPull checkpoint-restore updates from Christian Brauner: "This enables unprivileged checkpoint/restore of processes. Given that this work has been going on for quite some time the first sentence in this summary is hopefully more exciting than the actual final code changes required. Unprivileged checkpoint/restore has seen a frequent increase in interest over the last two years and has thus been one of the main topics for the combined containers & checkpoint/restore microconference since at least 2018 (cf. [1]). Here are just the three most frequent use-cases that were brought forward: - The JVM developers are integrating checkpoint/restore into a Java VM to significantly decrease the startup time. - In high-performance computing environment a resource manager will typically be distributing jobs where users are always running as non-root. Long-running and "large" processes with significant startup times are supposed to be checkpointed and restored with CRIU. - Container migration as a non-root user. In all of these scenarios it is either desirable or required to run without CAP_SYS_ADMIN. The userspace implementation of checkpoint/restore CRIU already has the pull request for supporting unprivileged checkpoint/restore up (cf. [2]). To enable unprivileged checkpoint/restore a new dedicated capability CAP_CHECKPOINT_RESTORE is introduced. This solution has last been discussed in 2019 in a talk by Google at Linux Plumbers (cf. [1] "Update on Task Migration at Google Using CRIU") with Adrian and Nicolas providing the implementation now over the last months. In essence, this allows the CRIU binary to be installed with the CAP_CHECKPOINT_RESTORE vfs capability set thereby enabling unprivileged users to restore processes. To make this possible the following permissions are altered: - Selecting a specific PID via clone3() set_tid relaxed from userns CAP_SYS_ADMIN to CAP_CHECKPOINT_RESTORE. - Selecting a specific PID via /proc/sys/kernel/ns_last_pid relaxed from userns CAP_SYS_ADMIN to CAP_CHECKPOINT_RESTORE. - Accessing /proc/pid/map_files relaxed from init userns CAP_SYS_ADMIN to init userns CAP_CHECKPOINT_RESTORE. - Changing /proc/self/exe from userns CAP_SYS_ADMIN to userns CAP_CHECKPOINT_RESTORE. Of these four changes the /proc/self/exe change deserves a few words because the reasoning behind even restricting /proc/self/exe changes in the first place is just full of historical quirks and tracking this down was a questionable version of fun that I'd like to spare others. In short, it is trivial to change /proc/self/exe as an unprivileged user, i.e. without userns CAP_SYS_ADMIN right now. Either via ptrace() or by simply intercepting the elf loader in userspace during exec. Nicolas was nice enough to even provide a POC for the latter (cf. [3]) to illustrate this fact. The original patchset which introduced PR_SET_MM_MAP had no permissions around changing the exe link. They too argued that it is trivial to spoof the exe link already which is true. The argument brought up against this was that the Tomoyo LSM uses the exe link in tomoyo_manager() to detect whether the calling process is a policy manager. This caused changing the exe links to be guarded by userns CAP_SYS_ADMIN. All in all this rather seems like a "better guard it with something rather than nothing" argument which imho doesn't qualify as a great security policy. Again, because spoofing the exe link is possible for the calling process so even if this were security relevant it was broken back then and would be broken today. So technically, dropping all permissions around changing the exe link would probably be possible and would send a clearer message to any userspace that relies on /proc/self/exe for security reasons that they should stop doing this but for now we're only relaxing the exe link permissions from userns CAP_SYS_ADMIN to userns CAP_CHECKPOINT_RESTORE. There's a final uapi change in here. Changing the exe link used to accidently return EINVAL when the caller lacked the necessary permissions instead of the more correct EPERM. This pr contains a commit fixing this. I assume that userspace won't notice or care and if they do I will revert this commit. But since we are changing the permissions anyway it seems like a good opportunity to try this fix. With these changes merged unprivileged checkpoint/restore will be possible and has already been tested by various users"[1] LPC 2018 1. "Task Migration at Google Using CRIU" https://www.youtube.com/watch?v=yI_1cuhoDgA&t=12095 2. "Securely Migrating Untrusted Workloads with CRIU" https://www.youtube.com/watch?v=yI_1cuhoDgA&t=14400 LPC 2019 1. "CRIU and the PID dance" https://www.youtube.com/watch?v=LN2CUgp8deo&list=PLVsQ_xZBEyN30ZA3Pc9MZMFzdjwyz26dO&index=9&t=2m48s 2. "Update on Task Migration at Google Using CRIU" https://www.youtube.com/watch?v=LN2CUgp8deo&list=PLVsQ_xZBEyN30ZA3Pc9MZMFzdjwyz26dO&index=9&t=1h2m8s[2] https://github.com/checkpoint-restore/criu/pull/1155[3] https://github.com/nviennot/run_as_exe* tag 'cap-checkpoint-restore-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux: selftests: add clone3() CAP_CHECKPOINT_RESTORE test prctl: exe link permission error changed from -EINVAL to -EPERM prctl: Allow local CAP_CHECKPOINT_RESTORE to change /proc/self/exe proc: allow access in init userns for map_files with CAP_CHECKPOINT_RESTORE pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid pid: use checkpoint_restore_ns_capable() for set_tid capabilities: Introduce CAP_CHECKPOINT_RESTORE List of files: /linux/tools/testing/selftests/clone3/.gitignore

9b031c86506cef9acae45e61339fcf9deaabb793 - Merge branch 'elan-i2c' into next

Wed, 22 Jul 2020 04:02:33 +0200

Merge branch 'elan-i2c' into nextBring in update to Elan touchpad driver to support newer touchpads withhigher resolution. List of files: /linux/tools/testing/selftests/clone3/.gitignore

1d27a0be16d6c95fd71deef34e94b40cb4411cc9 - selftests: add clone3() CAP_CHECKPOINT_RESTORE test

Sun, 19 Jul 2020 12:04:17 +0200

selftests: add clone3() CAP_CHECKPOINT_RESTORE testThis adds a test that changes its UID, uses capabilities toget CAP_CHECKPOINT_RESTORE and uses clone3() with set_tid tocreate a process with a given PID as non-root.Signed-off-by: Adrian Reber Link: https://lore.kernel.org/r/20200719100418.2112740-8-areber@redhat.com[christian.brauner@ubuntu.com: use TH_LOG() instead of ksft_print_msg()]Signed-off-by: Christian Brauner List of files: /linux/tools/testing/selftests/clone3/.gitignore

16ba7e312045cd5d32fba0156312b4303f200787 - Merge branches 'for-5.7/upstream-fixes', 'for-5.8/apple', 'for-5.8/asus', 'for-5.8/core', 'for-5.8/intel-ish', 'for-5.8/logitech', 'for-5.8/mcp2221' and 'for-5.8/multitouch' into for-linus

Wed, 03 Jun 2020 22:23:52 +0200

Merge branches 'for-5.7/upstream-fixes', 'for-5.8/apple', 'for-5.8/asus', 'for-5.8/core', 'for-5.8/intel-ish', 'for-5.8/logitech', 'for-5.8/mcp2221' and 'for-5.8/multitouch' into for-linus List of files: /linux/tools/testing/selftests/clone3/.gitignore

d053cf0d771f6547cb0537759a9af63cf402908d - Merge branch 'for-5.8' into for-linus

Mon, 01 Jun 2020 10:15:16 +0200

Merge branch 'for-5.8' into for-linus List of files: /linux/tools/testing/selftests/clone3/.gitignore

1f422417945d08731e2915e0addb976f11b3a85a - Merge branch 'timers/drivers/timer-ti' into timers/drivers/next

Sat, 23 May 2020 00:01:13 +0200

Merge branch 'timers/drivers/timer-ti' into timers/drivers/next List of files: /linux/tools/testing/selftests/clone3/.gitignore

4aef2ec9022b217f74d0f4c9b84081f07cc223d9 - Merge branch 'kvm-amd-fixes' into HEAD

Wed, 13 May 2020 18:14:05 +0200

Merge branch 'kvm-amd-fixes' into HEAD List of files: /linux/tools/testing/selftests/clone3/.gitignore

68f0f2690e183306b52671a9ad09fb31808b0500 - Merge branch 'for-mingo' of git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu into core/rcu

Mon, 11 May 2020 22:54:30 +0200

Merge branch 'for-mingo' of git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu into core/rcuPull RCU updates from Paul McKenney: 1. Miscellaneous fixes. 2. kfree_rcu() updates. 3. Remove scheduler locking restriction 4. RCU-tasks update, including addition of RCU Tasks Trace for BPF use and RCU Tasks Rude. (This branch is on top of #3 due to overlap of changed code.) 5. RCU CPU stall warning updates. 6. Torture-test updates. List of files: /linux/tools/testing/selftests/clone3/.gitignore