[Devel] [PATCH vz9 5/5] ve/procfs: make /proc/config.gz visible inside Containers

Nikita Yushchenko nikita.yushchenko at virtuozzo.com
Wed Sep 29 21:25:24 MSK 2021


From: Vasily Averin <vvs at virtuozzo.com>

Kubernetes reads this file to check kernel version at the moment and
potentially to check other options in the future.

https://jira.sw.ru/browse/PSBM-92107

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>

(cherry picked from vz7 commit 076550cd53c8 ("ve/procfs: make /proc/config.gz
visible inside Containers"))

Signed-off-by: Vasily Averin <vvs at virtuozzo.com>

(cherry-picked from vz8 commit 9d25330cda8b ("ve/procfs: make /proc/config.gz
visible inside Containers"))

Signed-off-by: Nikita Yushchenko <nikita.yushchenko at virtuozzo.com>
---
 kernel/configs.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kernel/configs.c b/kernel/configs.c
index a28c79c5f713..6619ef2493fa 100644
--- a/kernel/configs.c
+++ b/kernel/configs.c
@@ -57,7 +57,7 @@ static int __init ikconfig_init(void)
 	struct proc_dir_entry *entry;
 
 	/* create the current config file */
-	entry = proc_create("config.gz", S_IFREG | S_IRUGO, NULL,
+	entry = proc_create("config.gz", S_IFREG | S_IRUGO | S_ISVTX, NULL,
 			    &config_gz_proc_ops);
 	if (!entry)
 		return -ENOMEM;
-- 
2.30.2



More information about the Devel mailing list