search for: waychison

...local/src/git/linux-2.6//include/linux/types.h:13:2: warning: #warning "Attempt to use kernel headers from user space, see http://kernelnewbies.org/KernelHeaders" In order to silence this warning, make sure we define __EXPORTED_HEADERS__ when building klibc userland. Signed-off-by: Mike Waychison <mikew at google.com> --- scripts/Kbuild.klibc | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/scripts/Kbuild.klibc b/scripts/Kbuild.klibc index fb399f5..52a95c4 100644 --- a/scripts/Kbuild.klibc +++ b/scripts/Kbuild.klibc @@ -74,7 +74,7 @@ KLIBCWARNFLAGS := -W -...

...s. 11: packet.h needs a definition for struct iovec 12: netdev.c needs sockios.h 13: Define types and values in sys/socket.h 14: Include sys/socket.h from net/if_arp.h 15: Drop unused argument root_dev to ramdisk_load() 16: Support for multiple devices specified on the root= cmdline. Thanks, Mike Waychison

...believe this would help both our use-case (where we'd like to do customization of the early-bootup sequence without having to hack kinit too much), and the use case for initramfs-tools, opening the door to replace all the "core" shell there kinit as a C implementation. Thanks, Mike Waychison Changelog ========= v2 - Added __extern to alphasort declaration. - Split alphasort() out into alphasort.c and its own patch. Related discussions =================== - We recently had a discussion at: http://www.zytor.com/pipermail/klibc/2011-July/003014.html where I wan...

Add support for scandir() and alphasort() as defined in POSIX.1-2008. Signed-off-by: Mike Waychison <mikew at google.com> --- usr/include/dirent.h | 7 +++++ usr/klibc/Kbuild | 2 + usr/klibc/scandir.c | 76 ++++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 84 insertions(+), 1 deletions(-) create mode 100644 usr/klibc/scandir.c diff --git a/usr/include/dire...

...source tree (potentially a read-only nfs share), so I'd like to extend the build to support this. I've started writing a patch set to solve the immediate problems I'm running into. Do you know if there are out-of-tree patches for the same (to avoid duplicating work here..)? Mike Waychison

...to use this drop_capabilities function by specifying capabilities that should be dropped with a new command line flag, '-d'. Given that this patchset is meant to help secure boots, we treat any errors as total failure to boot by exiting the process with a failing exit code. Thanks, Mike Waychison Related discussions =================== - Thread discussing my wanting to compile out kernel interfaces that we do not want to expose to the userspace environment, with Alan Cox convincing me that I really just want to disable certain capabilities: https://lkml.org/lkm...

...causing memory pressure) also appear to have throughput problems alleviated by these changes. As a warning, I've only really tested this using the "small buffers" paths. The devices I'm using do not yet support "mergeable" or "big" receive buffers. --- Mike Waychison (2): virtio_net: Pass gfp flags when allocating rx buffers. virtio_net: Don't disable napi on low memory. drivers/net/virtio_net.c | 213 +++++++++++++++++++++++++++++++++++----------- 1 files changed, 162 insertions(+), 51 deletions(-)

...causing memory pressure) also appear to have throughput problems alleviated by these changes. As a warning, I've only really tested this using the "small buffers" paths. The devices I'm using do not yet support "mergeable" or "big" receive buffers. --- Mike Waychison (2): virtio_net: Pass gfp flags when allocating rx buffers. virtio_net: Don't disable napi on low memory. drivers/net/virtio_net.c | 213 +++++++++++++++++++++++++++++++++++----------- 1 files changed, 162 insertions(+), 51 deletions(-)

...n be mounting /sys, /proc, /dev for the next root image (as this breaks our production environment where these are not expected to be mounted by the time the init-on-disk). Maybe having support for an fstab processed by kinit would be the best middle ground for this sort of thing? Thoughts? Mike Waychison

On Thu, Jul 14, 2011 at 5:48 PM, Mike Waychison <mikew at google.com> wrote: > On Thu, Jul 14, 2011 at 4:39 PM, Alan Cox <alan at lxorguk.ukuu.org.uk> wrote: >>> for stuff I probably should be disabling considering my goal of making >>> it difficult for root to compromise a system. ?And yes, modules are >>...

...ontinue to boot if there was a problem dropping capabilities. We fail because the new drop_capabilities= option on the command line mandates enforcement of a security policy, and we should err on the side of caution if we ever fail to satisfy the administrator's intention. Signed-off-by: Mike Waychison <mikew at google.com> --- v2 - Only drop from the inherited capabilities mask. Only this mask was required as per Andrew Morgan. This also allows us to continue having capabilities to call run-init later on, allowing the following: - Moved dropping of capabilities...

...ndly calling: system("/etc/rc.sysinit"); or similar though and leaving the drop directory handling to it (which is easier done in shell anyway). What are other folks' thoughts on the matter? Would anyone object to calling system() as part of the kinit process? Signed-off-by: Mike Waychison <mikew at google.com> --- usr/kinit/kinit.c | 70 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 70 insertions(+), 0 deletions(-) diff --git a/usr/kinit/kinit.c b/usr/kinit/kinit.c index 7c33718..88d1b28 100644 --- a/usr/kinit/kinit.c +++ b/usr/kinit/kinit.c @@ -1,...

...eve this would help both our use-case (where we'd like to do customization of the early-bootup sequence without having to hack kinit too much), and the use case for initramfs-tools, opening the door to replace all the "core" shell there with kinit as a C implementation. Thanks, Mike Waychison Changelog ========= v3 - Renamed run_scripts() to run_parts(). - Introduced the build of a standalone run-parts binary. - Dropped the alphasort and scandir parts of the series as they are now merged. v2 - Added __extern to alphasort declaration. - Split alphasort() out in...

...ian.org/users/maks/klibc.git maks Sam fixed a longstanding x86_32 build bug, thus it seems a good time to flush the queue of the piled up patches, the shortlog tells it: Aurelien Jarno (1): [klibc] sh4: syscalls fixes Benjamin Cama (1): [klibc] fstype: btrfs size endianness fix Mike Waychison (2): [klibc] CFLAGS: enable -fwrapv [klibc] Add ancillary data structures and macros to sys/socket.h Sam Ravnborg (1): [klibc] fix build on native i386 Thorsten Glaser (1): [klibc] add getrusage() maximilian attems (6): [klibc] resume: silence warning on resume try...

...small buffers" and "mergeable" buffers paths. I haven't figured out how to force qemu-kvm to not support the feature bits that trigger 'mergable' receive buffers. ChangeLog: ========== v2: - Rewritten to not introduce a spinlock to protect the virtqueue data. --- Mike Waychison (3): virtio_net: Split receive buffer alloc/add virtio_net: Batch receive buffer filling virtio_net: Don't disable NAPI while allocating drivers/net/virtio_net.c | 325 ++++++++++++++++++++++++++++++++++++++++------ 1 files changed, 285 insertions(+), 40 deletions(-)

...small buffers" and "mergeable" buffers paths. I haven't figured out how to force qemu-kvm to not support the feature bits that trigger 'mergable' receive buffers. ChangeLog: ========== v2: - Rewritten to not introduce a spinlock to protect the virtqueue data. --- Mike Waychison (3): virtio_net: Split receive buffer alloc/add virtio_net: Batch receive buffer filling virtio_net: Don't disable NAPI while allocating drivers/net/virtio_net.c | 325 ++++++++++++++++++++++++++++++++++++++++------ 1 files changed, 285 insertions(+), 40 deletions(-)

...r/utils/minips.c | 1 - usr/utils/mount_main.c | 4 +- usr/utils/readlink.c | 3 +- usr/utils/sleep.c | 3 +- 32 files changed, 187 insertions(+), 171 deletions(-) Karel Zak (1): [klibc] losetup: use stdout and return 0 for -h Mike Waychison (1): [klibc] syscalls: Add sched_setaffinity, sched_getaffinity syscalls Romain Izard (2): [klibc] strndup(): Fix out of bounds read access [klibc] strndup(): Do not corrupt the memory pool Tim Harder (1): [klibc] Kbuild: fix parallel make install error Ulrich Dangel (1):...

So, today, I'm using kinit from our initramfs to handle early boot up sequence. Our init is actually a shell script that does a some setup stuff (plugging values into appropriate proc files mostly), and the script currently passes on to kinit by finishing with "exec /kinit "$@"". I have a situation now though, where due to some ubuntu weirdness, I seem to need to do

...Jim Meyering (1): [klibc] [PARSER] Fix syntax array size Larry Doolittle (1): [klibc] [JOBS] Fix cmdtxt crash on if statements Mark Mentovai (1): [klibc] [BUILD] Fixed build on OS X Matthew Burgess (1): [klibc] [BUILTIN] Add another missing LC_COLLATE to mkbuiltins Mike Waychison (1): [klibc] ipconfig: Use memcpy to avoid strict aliasing warnings. Nobuhiro Iwamatsu (1): [klibc] sh4 build fix Oleg Verych (3): [klibc] [BUILTIN] test: White space fixes [klibc] [BUILTIN] test: little size and speed optimizations [klibc] [BUILTIN] Disallow complet...

...Jim Meyering (1): [klibc] [PARSER] Fix syntax array size Larry Doolittle (1): [klibc] [JOBS] Fix cmdtxt crash on if statements Mark Mentovai (1): [klibc] [BUILD] Fixed build on OS X Matthew Burgess (1): [klibc] [BUILTIN] Add another missing LC_COLLATE to mkbuiltins Mike Waychison (1): [klibc] ipconfig: Use memcpy to avoid strict aliasing warnings. Nobuhiro Iwamatsu (1): [klibc] sh4 build fix Oleg Verych (3): [klibc] [BUILTIN] test: White space fixes [klibc] [BUILTIN] test: little size and speed optimizations [klibc] [BUILTIN] Disallow complet...