User namespace mount updates
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| linux (Ubuntu) |
Fix Released
|
Medium
|
Seth Forshee | ||
| Xenial |
Fix Released
|
Medium
|
Seth Forshee | ||
Bug Description
These commits bring xenial up to date wrt my branch for upstream. Most
of the changes here are in response to upstream feedback. At a high
level the changes are:
- A small improvement to the quota code, then disallow enabling quota
for mounts from non-init user namespaces. Since quota in non-init
namespaces isn't a requirement in 16.04 we're better off disabling it
until we know for sure how it will be handled upstream. However ext4
might temporarily enable quota during mount if recovering from an
unclean unmount, so the kernel needs to be able to handle it.
- Revert the way capabilities are determined for inodes in userns
mounts back to how it is upstream, i.e. based on both capabilities
and inode ownership, but allow a privileged user in s_user_ns to
chown if the id being changed is invalid and the other id is either
invalid or an id mapped into s_user_ns. This gives the mounter
control over inodes with unmappable ids while making it safe to have
s_user_ns != &init_user_ns for proc and kernfs-based mounts.
- Fix an incompatibility between cgroup namespaces and user namespace
mounts. Previously this was fixed as a side effect of another patch,
but that patch is being reverted.
- Remove a needless mount option initialization in fuse.
- Fix a resource leak for an error path in sget_userns().
| description: | updated |
| Changed in linux (Ubuntu Xenial): | |
| status: | In Progress → Fix Committed |
| Launchpad Janitor (janitor) wrote | #1 |
| Changed in linux (Ubuntu Xenial): | |
| status: | Fix Committed → Fix Released |
This bug was fixed in the package linux - 4.4.0-18.34
---------------
linux (4.4.0-18.34) xenial; urgency=low
[ Tim Gardner ]
* Release Tracking Bug
- LP: #1566868
* [i915_bpo] Fix RC6 on SKL GT3 & GT4 (LP: #1564759)
- SAUCE: i915_bpo: drm/i915/skl: Fix rc6 based gpu/system hang
- SAUCE: i915_bpo: drm/i915/skl: Fix spurious gpu hang with gt3/gt4 revs
* CONFIG_
- [Config] CONFIG_
* [Feature] Memory Bandwidth Monitoring (LP: #1397880)
- perf/x86/cqm: Fix CQM handling of grouping events into a cache_group
- perf/x86/cqm: Fix CQM memory leak and notifier leak
- x86/cpufeature: Carve out X86_FEATURE_*
- Merge branch 'timers-
- x86/topology: Create logical package id
- perf/x86/mbm: Add Intel Memory B/W Monitoring enumeration and init
- perf/x86/mbm: Add memory bandwidth monitoring event management
- perf/x86/mbm: Implement RMID recycling
- perf/x86/mbm: Add support for MBM counter overflow handling
* User namespace mount updates (LP: #1566505)
- SAUCE: quota: Require that qids passed to dqget() be valid and map into s_user_ns
- SAUCE: fs: Allow superblock owner to change ownership of inodes with unmappable ids
- SAUCE: fuse: Don't initialize user_id or group_id in mount options
- SAUCE: cgroup: Use a new super block when mounting in a cgroup namespace
- SAUCE: fs: fix a posible leak of allocated superblock
* [arm64] kernel BUG at /build/
(LP: #1566518)
- arm64: Honour !PTE_WRITE in set_pte_at() for kernel mappings
- arm64: Update PTE_RDONLY in set_pte_at() for PROT_NONE permission
* [Feature]USB core and xHCI tasks for USB 3.1 SuperSpeedPlus (SSP) support
for Alpine Ridge on SKL (LP: #1519623)
- usb: define USB_SPEED_
- usb: set USB 3.1 roothub device speed to USB_SPEED_
- usb: show speed "10000" in sysfs for USB 3.1 SuperSpeedPlus devices
- usb: add device descriptor for usb 3.1 root hub
- usb: Support USB 3.1 extended port status request
- xhci: Make sure xhci handles USB_SPEED_
- xhci: set roothub speed to USB_SPEED_
- xhci: USB 3.1 add default Speed Attributes to SuperSpeedPlus device capability
- xhci: set slot context speed field to SuperSpeedPlus for USB 3.1 SSP devices
- usb: Add USB3.1 SuperSpeedPlus Isoc Endpoint Companion descriptor
- usb: Parse the new USB 3.1 SuperSpeedPlus Isoc endpoint companion descriptor
- usb: Add USB 3.1 Precision time measurement capability descriptor support
- xhci: refactor and cleanup endpoint initialization.
- xhci: Add SuperSpeedPlus high bandwidth isoc support to xhci endpoints
- xhci: cleanup isoc tranfers queuing code
- xhci: Support extended burst isoc TRB structure used by xhci 1.1 for USB 3.1
- SAUCE: (noup) usb: fix regression in SuperSpeed endpoint descriptor parsing
* wrong/missing permissions for device f...