Re: [RFC PATCH 6/6] selftests: Test RLIMIT_NPROC in clone-created user namespaces

To: Michal Koutný <mkoutny@xxxxxxxx>, Eric Biederman <ebiederm@xxxxxxxxxxxx>, Alexey Gladkov <legion@xxxxxxxxxx>
Subject: Re: [RFC PATCH 6/6] selftests: Test RLIMIT_NPROC in clone-created user namespaces
From: Shuah Khan <skhan@xxxxxxxxxxxxxxxxxxx>
Date: Wed, 9 Feb 2022 18:25:34 -0700
Cc: Kees Cook <keescook@xxxxxxxxxxxx>, Shuah Khan <shuah@xxxxxxxxxx>, Christian Brauner <brauner@xxxxxxxxxx>, Solar Designer <solar@xxxxxxxxxxxx>, Ran Xiaokai <ran.xiaokai@xxxxxxxxxx>, linux-kernel@xxxxxxxxxxxxxxx, linux-kselftest@xxxxxxxxxxxxxxx, Linux Containers <containers@xxxxxxxxxxxxxxxxxxxxxxxxxx>, Shuah Khan <skhan@xxxxxxxxxxxxxxxxxxx>
In-reply-to: <20220207121800.5079-7-mkoutny@suse.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.8.1

On 2/7/22 5:18 AM, Michal Koutný wrote:

Verify RLIMIT_NPROC observance in user namespaces also in the
clone(CLONE_NEWUSER) path.
Note the such a user_ns is created by the privileged user.


Does this test run in non-privileged user mode? If it doesn't
let add a check and skip the test.

Signed-off-by: Michal Koutný <mkoutny@xxxxxxxx>


thanks,
-- Shuah

Follow-Ups:
- Re: [RFC PATCH 6/6] selftests: Test RLIMIT_NPROC in clone-created user namespaces
  - From: Michal Koutný

References:
- [RFC PATCH 0/6] RLIMIT_NPROC in ucounts fixups
  - From: Michal Koutný
- [RFC PATCH 6/6] selftests: Test RLIMIT_NPROC in clone-created user namespaces
  - From: Michal Koutný