[Devel] [PATCH RHEL8 COMMIT] ve/procfs: make /proc/config.gz visible inside Containers

[Konstantin Khorenko]

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh8-4.18.0-240.1.1.vz8.5.34
------>
commit b2c38b4d7f03d4d9c4ef52cc08ec7f6d95ec3526
Author: Vasily Averin <vvs at virtuozzo.com>
Date:   Wed Jun 2 19:48:10 2021 +0300

    ve/procfs: make /proc/config.gz visible inside Containers
    
    Kubernetes reads this file to check kernel version at the moment and
    potentially to check other options in the future.
    
    https://jira.sw.ru/browse/PSBM-92107
    
    Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
    
    (cherry picked from vz7 commit 076550cd53c8 ("ve/procfs: make /proc/config.gz
    visible inside Containers"))
    
    Signed-off-by: Vasily Averin <vvs at virtuozzo.com>
---
 kernel/configs.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kernel/configs.c b/kernel/configs.c
index 2df132b20217..61a6d3764b5f 100644
--- a/kernel/configs.c
+++ b/kernel/configs.c
@@ -74,7 +74,7 @@ static int __init ikconfig_init(void)
 	struct proc_dir_entry *entry;
 
 	/* create the current config file */
-	entry = proc_create("config.gz", S_IFREG | S_IRUGO, NULL,
+	entry = proc_create("config.gz", S_IFREG | S_IRUGO | S_ISVTX, NULL,
 			    &ikconfig_file_ops);
 	if (!entry)
 		return -ENOMEM;