• L
    Revert "proc: Point /proc/{mounts,net} at /proc/thread-self/{mounts,net}... · 155134fe
    Linus Torvalds 提交于
    Revert "proc: Point /proc/{mounts,net} at /proc/thread-self/{mounts,net} instead of /proc/self/{mounts,net}"
    
    This reverts commits 344470ca and e8132440.
    
    It turns out that the exact path in the symlink matters, if for somewhat
    unfortunate reasons: some apparmor configurations don't allow dhclient
    access to the per-thread /proc files.  As reported by Jörg Otte:
    
      audit: type=1400 audit(1407684227.003:28): apparmor="DENIED"
        operation="open" profile="/sbin/dhclient"
        name="/proc/1540/task/1540/net/dev" pid=1540 comm="dhclient"
        requested_mask="r" denied_mask="r" fsuid=0 ouid=0
    
    so we had better revert this for now.  We might be able to work around
    this in practice by only using the per-thread symlinks if the thread
    isn't the thread group leader, and if the namespaces differ between
    threads (which basically never happens).
    
    We'll see. In the meantime, the revert was made to be intentionally easy.
    Reported-by: NJörg Otte <jrg.otte@gmail.com>
    Acked-by: NEric W. Biederman <ebiederm@xmission.com>
    Signed-off-by: NLinus Torvalds <torvalds@linux-foundation.org>
    155134fe
root.c 5.7 KB