[Devel] [PATCH RHEL COMMIT] sysctl: make hotplug, printk and mmap_min_addr accessible inside a CT

[Konstantin Khorenko]

The commit is pushed to "branch-rh9-5.14.vz9.1.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after ark-5.14
------>
commit 9e6cb2ce57fa717cc2eab7f33e4d52ac9a211b27
Author: Konstantin Khorenko <khorenko at virtuozzo.com>
Date:   Tue Sep 28 19:31:05 2021 +0300

    sysctl: make hotplug, printk and mmap_min_addr accessible inside a CT
    
    (cherry picked from commit 22b9103caf1bb101768963fb9f66c5fe0def5ee3)
    Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
    
    (cherry picked from vz8 commit ecce1f4ba959a818b29403c38eeb39eae184aff9)
    Signed-off-by: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>
---
 kernel/sysctl.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/kernel/sysctl.c b/kernel/sysctl.c
index 1b203142e645..50425f90433d 100644
--- a/kernel/sysctl.c
+++ b/kernel/sysctl.c
@@ -2164,7 +2164,7 @@ static struct ctl_table kern_table[] = {
 		.procname	= "hotplug",
 		.data		= &uevent_helper,
 		.maxlen		= UEVENT_HELPER_PATH_LEN,
-		.mode		= 0644,
+		.mode		= 0644 | S_ISVTX,
 		.proc_handler	= proc_dostring,
 	},
 #endif
@@ -2294,7 +2294,7 @@ static struct ctl_table kern_table[] = {
 		.procname	= "printk",
 		.data		= &console_loglevel,
 		.maxlen		= 4*sizeof(int),
-		.mode		= 0644,
+		.mode		= 0644 | S_ISVTX,
 		.proc_handler	= proc_dointvec,
 	},
 	{
@@ -3119,7 +3119,7 @@ static struct ctl_table vm_table[] = {
 		.procname	= "mmap_min_addr",
 		.data		= &dac_mmap_min_addr,
 		.maxlen		= sizeof(unsigned long),
-		.mode		= 0644,
+		.mode		= 0644 | S_ISVTX,
 		.proc_handler	= mmap_min_addr_handler,
 	},
 #endif