X-Git-Url: http://git.onelab.eu/?p=util-vserver-pl.git;a=blobdiff_plain;f=python%2Fvserverimpl.c;h=98125c9a8efd958d75faf33dc38f4dc7c06f4690;hp=3ac9069ef0d8724827cd4b2bde822c0760d434fd;hb=af20c60c0c8834ba245e4936390d01e6e4e4ac10;hpb=7b236ea15e1ae5f8378d0f6d0833a05f3d7409fe diff --git a/python/vserverimpl.c b/python/vserverimpl.c index 3ac9069..98125c9 100644 --- a/python/vserverimpl.c +++ b/python/vserverimpl.c @@ -59,6 +59,8 @@ static inline PyObject *inc_and_ret_none(void) #define NONE inc_and_ret_none() +#define PL_INSECURE_BCAPS (vc_get_insecurebcaps() | (1 << VC_CAP_NET_BIND_SERVICE)) + /* * context create */ @@ -71,7 +73,7 @@ vserver_chcontext(PyObject *self, PyObject *args) if (!PyArg_ParseTuple(args, "I|K", &ctx, &bcaps)) return NULL; - bcaps |= ~(vc_get_insecurebcaps() | (1 << VC_CAP_NET_BIND_SERVICE)); + bcaps |= ~PL_INSECURE_BCAPS; if ((ctx_is_new = pl_chcontext(ctx, bcaps, 0)) < 0) return PyErr_SetFromErrno(PyExc_OSError); @@ -145,9 +147,10 @@ vserver_get_rlimit(PyObject *self, PyObject *args) { static PyObject * vserver_set_rlimit(PyObject *self, PyObject *args) { struct vc_rlimit limits; - struct rlimit lim; + struct vc_rlimit_mask mask; + uint32_t bitmask; xid_t xid; - int resource, lresource; + int resource; PyObject *ret; limits.min = VC_LIM_KEEP; @@ -157,30 +160,18 @@ vserver_set_rlimit(PyObject *self, PyObject *args) { if (!PyArg_ParseTuple(args, "IiLLL", &xid, &resource, &limits.hard, &limits.soft, &limits.min)) return NULL; - lresource = resource; - switch (resource) { - case VC_VLIMIT_NSOCK: - case VC_VLIMIT_ANON: - case VC_VLIMIT_SHMEM: - goto do_vc_set_rlimit; - case VC_VLIMIT_OPENFD: - lresource = RLIMIT_NOFILE; - break; - default: - break; - } - - getrlimit(lresource,&lim); - if (adjust_lim(&limits,&lim)) { - setrlimit(lresource, &lim); - } - - do_vc_set_rlimit: errno = 0; - if (vc_set_rlimit(xid, resource, &limits)==-1) + + if (vc_get_rlimit_mask(xid, &mask)==-1) { ret = PyErr_SetFromErrno(PyExc_OSError); - else - ret = __vserver_get_rlimit(xid, resource); + } else { + bitmask = (1<vna_prefix = 64; break; default: - errno = -EINVAL; + errno = EINVAL; return -1; } @@ -461,24 +452,35 @@ get_mask(struct vc_net_addr *addr) static PyObject * vserver_net_add(PyObject *self, PyObject *args) { - struct vc_net_addr addr; + struct vc_net_addr addr = { .vna_type = 0 }; nid_t nid; const char *ip; if (!PyArg_ParseTuple(args, "Is", &nid, &ip)) return NULL; - if (convert_address(ip, &addr) == -1) - return PyErr_Format(PyExc_ValueError, "%s is not a valid IP address", ip); + /* Optimize standard case, which also needs to be handled differently */ + if (strcmp(ip, "0.0.0.0") == 0) { + addr.vna_type = VC_NXA_TYPE_MASK | VC_NXA_TYPE_IPV4; + addr.vna_flags = 0; + addr.vna_prefix = 0; + addr.vna_parent = 0; + addr.vna_v4_mask.s_addr = 0; + addr.vna_v4_ip.s_addr = 0; + } + else { + if (convert_address(ip, &addr) == -1) + return PyErr_Format(PyExc_ValueError, "%s is not a valid IP address", ip); - switch (get_mask(&addr)) { - case -1: - return PyErr_SetFromErrno(PyExc_OSError); - case 0: - /* XXX error here? */ - break; + switch (get_mask(&addr)) { + case -1: + return PyErr_SetFromErrno(PyExc_OSError); + case 0: + /* XXX error here? */ + break; + } + addr.vna_type |= VC_NXA_TYPE_ADDR; } - addr.vna_type |= VC_NXA_TYPE_ADDR; if (vc_net_add(nid, &addr) == -1 && errno != ESRCH) return PyErr_SetFromErrno(PyExc_OSError); @@ -505,12 +507,13 @@ vserver_net_remove(PyObject *self, PyObject *args) else { if (convert_address(ip, &addr) == -1) return PyErr_Format(PyExc_ValueError, "%s is not a valid IP address", ip); - addr.vna_type |= VC_NXA_TYPE_ADDR; - } - switch (get_mask(&addr)) { - case -1: - return PyErr_SetFromErrno(PyExc_OSError); + switch (get_mask(&addr)) { + case -1: + return PyErr_SetFromErrno(PyExc_OSError); + } + + addr.vna_type |= VC_NXA_TYPE_ADDR; } if (vc_net_remove(nid, &addr) == -1 && errno != ESRCH) @@ -609,7 +612,7 @@ vserver_mount(PyObject *self, PyObject *args) if (secure_chdir(&dirs, guest, target) == -1) goto out; - if (mount(source, ".", type, flags, data) == -1) + if (mount(source, ".", type, flags, data) == -1 && errno != EBUSY) goto out; restore_dirs(&dirs); @@ -739,8 +742,4 @@ initvserverimpl(void) PyModule_AddIntConstant(mod, "VLIMIT_ANON", (int)VC_VLIMIT_ANON); PyModule_AddIntConstant(mod, "VLIMIT_SHMEM", (int)VC_VLIMIT_SHMEM); - /* scheduler flags */ - PyModule_AddIntConstant(mod, - "VS_SCHED_CPU_GUARANTEED", - VS_SCHED_CPU_GUARANTEED); }