mirror of
https://github.com/torvalds/linux.git
synced 2026-09-24 06:24:02 +02:00
f2b69ea2d1
- an interpreter opened at registration is charged - an interpreter a 'B' entry binds is charged too - an entry that opens none is not - removing an entry gives the charge back - a nested user namespace cannot buy itself budget by raising its own limit Skips where the sysctl or binfmt_misc is missing. The 'B' case lives in binfmt_misc_bpf.c because binding needs a handler. It binds from a child in a user namespace of its own, through the fd the child inherited, so the charge lands on the child while the interpreter is still opened with the entry file's credentials, and nothing outside the child sees a changed limit. Link: https://patch.msgid.link/20260803-work-binfmt_misc-interplimit-v1-2-4a2435500bd9@kernel.org Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
33 lines
500 B
Plaintext
33 lines
500 B
Plaintext
# SPDX-License-Identifier: GPL-2.0-only
|
|
subdir*
|
|
script*
|
|
execveat
|
|
execveat.symlink
|
|
execveat.moved
|
|
execveat.path.ephemeral
|
|
execveat.ephemeral
|
|
execveat.denatured
|
|
non-regular
|
|
null-argv
|
|
/check-exec
|
|
/false
|
|
/inc
|
|
/load_address.*
|
|
!load_address.c
|
|
/recursion-depth
|
|
/set-exec
|
|
xxxxxxxx*
|
|
pipe
|
|
S_I*.test
|
|
binfmt_misc_bpf
|
|
binfmt_misc_interplimit
|
|
binfmt_bpf_interp
|
|
binfmt_bpf_app
|
|
binfmt_misc_transparent
|
|
binfmt_transparent_interp
|
|
binfmt_misc_loader
|
|
binfmt_loader_payload
|
|
binfmt_loader_payload_static
|
|
*.bpf.o
|
|
vmlinux.h
|