[Devel] [PATCH RHEL7 COMMIT] Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code

Konstantin Khorenko khorenko at virtuozzo.com
Thu Mar 2 04:19:09 PST 2017


The commit is pushed to "branch-rh7-3.10.0-514.6.1.vz7.28.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-514.6.1.vz7.28.7
------>
commit 149bff11f3d9d3fec00da9ac59215e80e54244cd
Author: Konstantin Khorenko <khorenko at virtuozzo.com>
Date:   Thu Mar 2 16:13:00 2017 +0400

    Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code
    
    The perf_event_open() syscall is available from Containers.  The
    CONFIG_CGROUP_PERF option is set in current OpenVZ kernel configs, but let's
    force-enable it if CONFIG_VE is enabled to prevent possible non-secure kernel
    config if someone rebuilds the kernel with own config.
    
    https://jira.sw.ru/browse/PSBM-51360
    
    Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/Kconfig.openvz | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/Kconfig.openvz b/kernel/Kconfig.openvz
index d85d1dd..ae3b2f3 100644
--- a/kernel/Kconfig.openvz
+++ b/kernel/Kconfig.openvz
@@ -18,6 +18,7 @@ config VE
 	select CGROUPS
 	select CGROUP_DEVICE
 	select CGROUP_FREEZER
+	select CGROUP_PERF
 	select SCHEDSTATS
 	help
 	  This option adds support of virtual Linux running on the original box


More information about the Devel mailing list