Re: [PATCH] unshare: Use rcu_assign_pointer when setting sighand

[Janak Desai <janak@us.ibm.com>]

Andrew Morton wrote:

> Oleg Nesterov <oleg@tv-sign.ru> wrote:
>  
>
> > "Eric W. Biederman" wrote:
> >    
> >
> > > @@ -1573,7 +1573,7 @@ asmlinkage long sys_unshare(unsigned lon
> > >
> > >                if (new_sigh) {
> > >                        sigh = current->sighand;
> > > -                       current->sighand = new_sigh;
> > > +                       rcu_assign_pointer(current->sighand, new_sigh);
> > >                        new_sigh = sigh;
> > >                }
> > >      
> > Isn't it better to just replace this code with
> > 'BUG_ON(new_sigh != NULL)' ?
> >
> > It is never executed, but totally broken, afaics.
> > task_lock() has nothing to do with ->sighand changing.
> >
> >    
>
> /*
> * Unsharing of sighand for tasks created with CLONE_SIGHAND is not
> * supported yet
> */
> static int unshare_sighand(unsigned long unshare_flags, struct sighand_struct **new_sighp)
>
> It's all just a place-holder at present.
>
> If we don't plan on ever supporting unshare(CLONE_SIGHAND) we should take
> that code out and make it return EINVAL.  Right now.
>
> And because we don't presently support CLONE_SIGHAND we should return
> EINVAL if it's set.  Right now.
>  
unshare does return EINVAL if signal handler unsharing is attempted by a
process that is currently sharing its signal handler with another 
process. However,
because of the interaction between signal handlers and vm, CLONE_SIGHAND
is set anytime vm unsharing is attempted. That is, if you are trying to 
unshare
vm, you must unshare signal handlers. But if they are not being shared 
in the
first place, there is no need to prevent unsharing of vm.

Therefore, unshare returns EINVAL if unsharing of signal handlers and/or vm
is attempted by a process that is sharing its signal handler.

> And we should change sys_unshare() to reject not-understood flags.  Right
> now.
>  
Eric just posted a patch to do this.

> If we don't do these things we'll silently break 2.6.16-back-compatibility
> of applications which are coded for future kernels.
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/
>
>  

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/