X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=kernel%2Fvserver%2Flegacy.c;h=51533ac5f9d1bd2bd65d4e697467b95df14f9a3b;hb=refs%2Fheads%2Fvserver;hp=482ea8f24ff0083743f83fde83cda3fe1605ba62;hpb=c7b5ebbddf7bcd3651947760f423e3783bbe6573;p=linux-2.6.git

diff --git a/kernel/vserver/legacy.c b/kernel/vserver/legacy.c
index 482ea8f24..51533ac5f 100644
--- a/kernel/vserver/legacy.c
+++ b/kernel/vserver/legacy.c
@@ -4,34 +4,34 @@
  *  Virtual Server: Legacy Funtions
  *
  *  Copyright (C) 2001-2003  Jacques Gelinas
- *  Copyright (C) 2003-2004  Herbert Pötzl
+ *  Copyright (C) 2003-2007  Herbert Pötzl
  *
  *  V0.01  broken out from vcontext.c V0.05
+ *  V0.02  updated to spaces *sigh*
  *
  */
 
-#include <linux/config.h>
 #include <linux/sched.h>
-#include <linux/namespace.h>
-#include <linux/vserver/legacy.h>
-#include <linux/vserver/namespace.h>
-#include <linux/vserver.h>
-#include <linux/vs_base.h>
 #include <linux/vs_context.h>
 #include <linux/vs_network.h>
+#include <linux/vserver/legacy.h>
+#include <linux/vserver/space.h>
+// #include <linux/mnt_namespace.h>
 
 #include <asm/errno.h>
 #include <asm/uaccess.h>
 
 
+extern int vx_set_init(struct vx_info *, struct task_struct *);
 
 static int vx_set_initpid(struct vx_info *vxi, int pid)
 {
-	if (vxi->vx_initpid)
-		return -EPERM;
+	struct task_struct *init;
 
-	vxi->vx_initpid = pid;
-	return 0;
+	init = find_task_by_real_pid(pid);
+	if (!init)
+		return -ESRCH;
+	return vx_set_init(vxi, init);
 }
 
 int vc_new_s_context(uint32_t ctx, void __user *data)
@@ -54,15 +54,15 @@ int vc_new_s_context(uint32_t ctx, void __user *data)
 		if (ret == 0) {
 			/* We keep the same vx_id, but lower the capabilities */
 			current->vx_info->vx_bcaps &= (~vc_data.remove_cap);
-			// current->cap_bset &= (~vc_data.remove_cap);
 			ret = vx_current_xid();
 			current->vx_info->vx_flags |= vc_data.flags;
 		}
 		return ret;
 	}
 
-	if (!vx_check(0, VX_ADMIN) ||
-		!capable(CAP_SYS_ADMIN) || vx_flags(VX_INFO_PRIVATE, 0))
+	if (!vx_check(0, VS_ADMIN) || !capable(CAP_SYS_ADMIN)
+		/* might make sense in the future, or not ... */
+		|| vx_flags(VX_INFO_PRIVATE, 0))
 		return -EPERM;
 
 	/* ugly hack for Spectator */
@@ -76,95 +76,39 @@ int vc_new_s_context(uint32_t ctx, void __user *data)
 		return -EINVAL;
 
 	if ((ctx == VX_DYNAMIC_ID) || (ctx < MIN_D_CONTEXT))
-		new_vxi = locate_or_create_vx_info(ctx);
+		new_vxi = lookup_or_create_vx_info(ctx);
 	else
-		new_vxi = locate_vx_info(ctx);
+		new_vxi = lookup_vx_info(ctx);
 
 	if (!new_vxi)
 		return -EINVAL;
-	new_vxi->vx_flags &= ~(VXF_STATE_SETUP|VXF_STATE_INIT);
 
-	ret = vx_migrate_task(current, new_vxi);
+	ret = -EPERM;
+	if (!vx_info_flags(new_vxi, VXF_STATE_SETUP, 0) &&
+		vx_info_flags(new_vxi, VX_INFO_PRIVATE, 0))
+		goto out_put;
+
+	ret = vx_migrate_task(current, new_vxi,
+		vx_info_flags(new_vxi, VXF_STATE_SETUP, 0));
+	new_vxi->vx_flags &= ~VXF_STATE_SETUP;
+
 	if (ret == 0) {
 		current->vx_info->vx_bcaps &= (~vc_data.remove_cap);
-		// current->cap_bset &= (~vc_data.remove_cap);
 		new_vxi->vx_flags |= vc_data.flags;
 		if (vc_data.flags & VX_INFO_INIT)
 			vx_set_initpid(new_vxi, current->tgid);
 		if (vc_data.flags & VX_INFO_NAMESPACE)
-			vx_set_namespace(new_vxi,
-				current->namespace, current->fs);
+			vx_set_space(new_vxi, CLONE_NEWNS|CLONE_FS);
 		if (vc_data.flags & VX_INFO_NPROC)
-			new_vxi->limit.rlim[RLIMIT_NPROC] =
-				current->rlim[RLIMIT_NPROC].rlim_max;
+			__rlim_set(&new_vxi->limit, RLIMIT_NPROC,
+				current->signal->rlim[RLIMIT_NPROC].rlim_max);
+
+		/* tweak some defaults for legacy */
+		new_vxi->vx_flags |= (VXF_HIDE_NETIF|VXF_INFO_INIT);
 		ret = new_vxi->vx_id;
 	}
+out_put:
 	put_vx_info(new_vxi);
 	return ret;
 }
 
-
-extern struct nx_info *create_nx_info(void);
-
-/*  set ipv4 root (syscall) */
-
-int vc_set_ipv4root(uint32_t nbip, void __user *data)
-{
-	int i, err = -EPERM;
-	struct vcmd_set_ipv4root_v3 vc_data;
-	struct nx_info *new_nxi, *nxi = current->nx_info;
-
-	if (nbip < 0 || nbip > NB_IPV4ROOT)
-		return -EINVAL;
-	if (copy_from_user (&vc_data, data, sizeof(vc_data)))
-		return -EFAULT;
-
-	if (!nxi || nxi->ipv4[0] == 0 || capable(CAP_NET_ADMIN))
-		// We are allowed to change everything
-		err = 0;
-	else if (nxi) {
-		int found = 0;
-
-		// We are allowed to select a subset of the currently
-		// installed IP numbers. No new one allowed
-		// We can't change the broadcast address though
-		for (i=0; i<nbip; i++) {
-			int j;
-			__u32 nxip = vc_data.nx_mask_pair[i].ip;
-			for (j=0; j<nxi->nbipv4; j++) {
-				if (nxip == nxi->ipv4[j]) {
-					found++;
-					break;
-				}
-			}
-		}
-		if ((found == nbip) &&
-			(vc_data.broadcast == nxi->v4_bcast))
-			err = 0;
-	}
-	if (err)
-		return err;
-
-	new_nxi = create_nx_info();
-	if (!new_nxi)
-		return -EINVAL;
-
-	new_nxi->nbipv4 = nbip;
-	for (i=0; i<nbip; i++) {
-		new_nxi->ipv4[i] = vc_data.nx_mask_pair[i].ip;
-		new_nxi->mask[i] = vc_data.nx_mask_pair[i].mask;
-	}
-	new_nxi->v4_bcast = vc_data.broadcast;
-	// current->nx_info = new_nxi;
-	if (nxi) {
-		printk("!!! switching nx_info %p->%p\n", nxi, new_nxi);
-		clr_nx_info(&current->nx_info);
-	}
-	nx_migrate_task(current, new_nxi);
-	// set_nx_info(&current->nx_info, new_nxi);
-	// current->nid = new_nxi->nx_id;
-	put_nx_info(new_nxi);
-	return 0;
-}
-
-