[Devel] [PATCH RHEL COMMIT] ve/procfs: make /proc/config.gz visible inside Containers

[Konstantin Khorenko]

The commit is pushed to "branch-rh9-5.14.vz9.1.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after ark-5.14
------>
commit 5ede68f84ca983b64244b5dcfbddb521b8007aad
Author: Vasily Averin <vvs at virtuozzo.com>
Date:   Thu Sep 30 18:13:19 2021 +0300

    ve/procfs: make /proc/config.gz visible inside Containers
    
    Kubernetes reads this file to check kernel version at the moment and
    potentially to check other options in the future.
    
    https://jira.sw.ru/browse/PSBM-92107
    
    Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
    
    (cherry picked from vz7 commit 076550cd53c8 ("ve/procfs: make /proc/config.gz
    visible inside Containers"))
    
    Signed-off-by: Vasily Averin <vvs at virtuozzo.com>
    
    (cherry-picked from vz8 commit 9d25330cda8b ("ve/procfs: make /proc/config.gz
    visible inside Containers"))
    
    Signed-off-by: Nikita Yushchenko <nikita.yushchenko at virtuozzo.com>
---
 kernel/configs.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kernel/configs.c b/kernel/configs.c
index a28c79c5f713..6619ef2493fa 100644
--- a/kernel/configs.c
+++ b/kernel/configs.c
@@ -57,7 +57,7 @@ static int __init ikconfig_init(void)
 	struct proc_dir_entry *entry;
 
 	/* create the current config file */
-	entry = proc_create("config.gz", S_IFREG | S_IRUGO, NULL,
+	entry = proc_create("config.gz", S_IFREG | S_IRUGO | S_ISVTX, NULL,
 			    &config_gz_proc_ops);
 	if (!entry)
 		return -ENOMEM;