The patch titled
Disable core ulimit for user core process
has been added to the -mm tree. Its filename is
support-piping-into-commands-in-proc-sys-kernel-core_pattern-fix-2.patch
See http://www.zip.com.au/~akpm/linux/patches/stuff/added-to-mm.txt to find
out what to do about this
------------------------------------------------------
Subject: Disable core ulimit for user core process
From: Andi Kleen <ak@xxxxxxx>
This addresses one of the review comments earlier for the user core
patchkit: when the core dump handler is executed make sure there is no
potential for recursion in case it crashes again.
This currently does it for all pipe user mode helpers. In theory it could
be done only for core dump user helpers, but there are currently no other
users of this function.
Signed-off-by: Andi Kleen <ak@xxxxxxx>
Cc: Alan Cox <alan@xxxxxxxxxxxxxxxxxxx>
Signed-off-by: Andrew Morton <akpm@xxxxxxxx>
---
kernel/kmod.c | 4 ++++
1 files changed, 4 insertions(+)
diff -puN kernel/kmod.c~support-piping-into-commands-in-proc-sys-kernel-core_pattern-fix-2 kernel/kmod.c
--- a/kernel/kmod.c~support-piping-into-commands-in-proc-sys-kernel-core_pattern-fix-2
+++ a/kernel/kmod.c
@@ -35,6 +35,7 @@
#include <linux/mount.h>
#include <linux/kernel.h>
#include <linux/init.h>
+#include <linux/resource.h>
#include <asm/uaccess.h>
extern int max_threads;
@@ -158,6 +159,9 @@ static int ____call_usermodehelper(void
FD_SET(0, fdt->open_fds);
FD_CLR(0, fdt->close_on_exec);
spin_unlock(&f->file_lock);
+
+ /* and disallow core files too */
+ current->signal->rlim[RLIMIT_CORE] = (struct rlimit){0, 0};
}
/* We can run anywhere, unlike our parent keventd(). */
_
Patches currently in -mm which might be from ak@xxxxxxx are
initialize-ieee1394-early-when-built-in.patch
revert-x86_64-mm-re-positioning-the-bss-segment.patch
fstack-protector-feature-annotate-the-pda-offsets.patch
fstack-protector-feature-add-the-kconfig-option.patch
fstack-protector-feature-add-the-canary-field-to-the.patch
fstack-protector-feature-add-the-__stack_chk_fail.patch
fstack-protector-feature-enable-the-compiler-flags.patch
x86-remove-default_ldt-and-simplify-ldt-setting.patch
generic-ioremap_page_range-implementation.patch
generic-ioremap_page_range-flush_cache_vmap.patch
generic-ioremap_page_range-i386-conversion.patch
generic-ioremap_page_range-i386-conversion-fix.patch
generic-ioremap_page_range-x86_64-conversion.patch
generic-ioremap_page_range-x86_64-conversion-fix.patch
some-cleanup-in-the-pipe-code.patch
some-cleanup-in-the-pipe-code-tidy.patch
create-call_usermodehelper_pipe.patch
support-piping-into-commands-in-proc-sys-kernel-core_pattern.patch
support-piping-into-commands-in-proc-sys-kernel-core_pattern-fix-2.patch
-
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
