Received: by 2002:a89:d88:0:b0:1fa:5c73:8e2d with SMTP id eb8csp2644866lqb; Tue, 28 May 2024 06:30:22 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCU+NeiWGNI9V7K0WCjx6kEnuwkshiH5tqeRVxXECLLnsBrCDjKQaR9l6CSDOJEr+qXuOVAJAsXTbvtU1ZhL1NtauFFs1OPwzThW9C2s5w== X-Google-Smtp-Source: AGHT+IGNgOewdh781BVhHpCIDJSD7N0frbg4lmx92GLR7u4fj8SZxSFmR6aylXqv78sTZq4cFpaY X-Received: by 2002:ac8:5889:0:b0:43d:e6fa:1ffc with SMTP id d75a77b69052e-43fb0eeb496mr165794731cf.54.1716903021853; Tue, 28 May 2024 06:30:21 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1716903021; cv=pass; d=google.com; s=arc-20160816; b=jYHUZ4aKHCo/o+RFL4A06RAANGUz9bG6LJWgYR1A+UNhHfcRevz/YdWYcLQa0NhVf8 T2UOegfnA/YTp/ySUxixI0aegRM//7VFPldjwVie/L5cXJwPMQ3vrmt6pvYdrcSJCqG+ JxmbwAJHuz0/wERfvuAkyfFrbnTwxceNIViY81QRUXYxXAFPhfJ/AASMSMHiPEMDbBJk RZTJOHQC5K0vjbcX+OX+WiUcrrBXcJpXw4Czc4yGYdBlfssvMSac/WivZOdaO0ltAUkt 6C12eKTwE08b3a5zMT6ltQJSddTumuUjsbXN2KOzaBrW1Q7kxh1ZFI2jKFbVvkmBjH41 XUYw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:list-unsubscribe:list-subscribe :list-id:precedence:dkim-signature; bh=KT035x9FB4QR+Y6hrveG8FjyfKimSkkfkMUdyuKTqZw=; fh=z0L1rCgKamq0J6l80Mv5VCG9BRmOiNhxWzOLLi7quTQ=; b=a1hLSV/ZKLTRkHw1+PCXY02Udf05ePyy4eNyI09MH1zXDnkxf/EP17vZzSZzqxCj4M PE6K7aRn6JwsAFGC83BP7CcjmpTPwhdvuGG9z2U8/h0o4wn/YqlF7tIqIsxVbOL1V6+Y T7hh0rsLQuxSXk3hpNe92HVgq49bIlOq6cdF0vgPVPopDB8chtn+DkHfCWaj+sRXOlOy h16lN0odsAPz/xKQcLSJGLVUhXhdH3oBk1czesfRUcyzECVPi4TPdE4c6AUW6Gc3VYZB /YGi/Wohg91t6h5v2z7pcBKfRryvOz6IbWw3FhwDeVMa6X2ZdqWdicSpWJTx/7plV+PU h51A==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=Juo9CSCD; arc=pass (i=1 spf=pass spfdomain=gmail.com dkim=pass dkdomain=gmail.com dmarc=pass fromdomain=gmail.com); spf=pass (google.com: domain of linux-kernel+bounces-192414-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45d1:ec00::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-192414-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from ny.mirrors.kernel.org (ny.mirrors.kernel.org. [2604:1380:45d1:ec00::1]) by mx.google.com with ESMTPS id d75a77b69052e-43fb18e9ea4si120152541cf.763.2024.05.28.06.30.21 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 28 May 2024 06:30:21 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel+bounces-192414-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45d1:ec00::1 as permitted sender) client-ip=2604:1380:45d1:ec00::1; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=Juo9CSCD; arc=pass (i=1 spf=pass spfdomain=gmail.com dkim=pass dkdomain=gmail.com dmarc=pass fromdomain=gmail.com); spf=pass (google.com: domain of linux-kernel+bounces-192414-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45d1:ec00::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-192414-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ny.mirrors.kernel.org (Postfix) with ESMTPS id F16811C21D50 for ; Tue, 28 May 2024 13:30:20 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 5E83F16F0F2; Tue, 28 May 2024 13:30:15 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Juo9CSCD" Received: from mail-lf1-f48.google.com (mail-lf1-f48.google.com [209.85.167.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 06C1C17C7F; Tue, 28 May 2024 13:30:12 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.167.48 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716903014; cv=none; b=sD8zqnXRLIF5LEa/uJnkb+8hFb4PjhPs03Jwtad95VoVIoExxzRYVBnDiMSOa4ak7k70g1k0FlhVIZgOrzLAdbHrgw5xsrfVrZ4YQAP4vttwObRHsfG78W2SVrgzBlrIom8HfIDPaAZfsjjCyTNWiGCCluj1L8n/uJ/GVNg0buk= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716903014; c=relaxed/simple; bh=KT035x9FB4QR+Y6hrveG8FjyfKimSkkfkMUdyuKTqZw=; h=MIME-Version:References:In-Reply-To:From:Date:Message-ID:Subject: To:Cc:Content-Type; b=EYrldctYhO20Z1dnyPFZxvao80z3eCV+TB39zj4RDFywfX6OGLsit4Y5K7Vd/a+L+ExSqOa0BKXNevkCIK6IwDdA2oSM5vEy2fwGNu1WPZUv+S0IWaq/8ZltG8DuvuoqZLieFNiAc5ePKQERUVao4ECZtMpPKS5/TppbvPJHY7c= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=Juo9CSCD; arc=none smtp.client-ip=209.85.167.48 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-lf1-f48.google.com with SMTP id 2adb3069b0e04-5296232e00bso1058826e87.3; Tue, 28 May 2024 06:30:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1716903011; x=1717507811; darn=vger.kernel.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=KT035x9FB4QR+Y6hrveG8FjyfKimSkkfkMUdyuKTqZw=; b=Juo9CSCDePve2+0thC76PYPmAGnSO1RVePVPnM+bU+wDWC8uVoA7amPYSDGyx8NBjf XOtwfcyYw52mqH53Xo9Mpvtd5dFXayblB5evID46/s/LxMzcZ8sUGx09dzOyw2IMFuum uLh/zkII3jQXEHKsmL+Q5KV/xxx3dftxHtifWfh6KaDFypJ6HHkreZcNJRiODXZENlJW ldWbFOfC9maywAgZ+beNKwgaFXQRpurLJQ+Sr+An+cpAcpDnPPsMdlX3VJcRD8tviCTs IBUM7nOXldsPgqRFLBuOrOAxlVhoXf8hOptzpNuF5aVSgzWmxMlPmdlesNaWJPwr1xCW iAPg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1716903011; x=1717507811; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=KT035x9FB4QR+Y6hrveG8FjyfKimSkkfkMUdyuKTqZw=; b=MpT8rSe1ipLFsMcimuo28EZFjsoliZ5tt6Q7rfLRkmV31+rnrBYCJfw1JNf/eKt/oV RWBH9IFlzK0f67eo0DUniWitYA0VT+Aoc+fiQnLI2XTkOsv9VSnx7IoAqOP49/zFNQZG LhpI9SVJQ95xxsyEW5/ywcfN+6vX23dvPsD+aC/PqhDDAL/S3U51Nb5Mb/8dNfoNKNH+ aqzFMfx5a59aeMhiECzIXNLw+TKNBxwiIqX94gwsSZJP2wngbrT8uJQA/4Oy76u/W8lU 1bgHPgMOhIbmYgEkJ54pw0ASfKjbqldnFAxWGxsAw7F6PMqkrquA7/mNc4axSKQXeVFF Wh2A== X-Forwarded-Encrypted: i=1; AJvYcCUFNgDLz3dqCJQzn5YZ4AZelKJRAQS/3dZRfl0hhi7cjU+JPbWL8tIxRqMk8wHv3pdGp262O2NatMftqaH7OWPzEV2aqS24f1TKX2hr0mMPXlXy+R01vJ55Fq2/PGulEL8BtqCGGF+e+Lk96lhH4m3RmSyA X-Gm-Message-State: AOJu0Yw36ss80YyB0yifXVoJPRh+eKprq2Lj0XvIwMy6f1yDw9z6XRyj lsXSnkz2iNdYhOyEEB42XdrPBt+/pjCm9cFwovId5fkqUxwCZbqa6LX2Af+z4GflPSEBhhW6y4n K9N6uRSgCztb4JKb0pnpIyZ5umWc= X-Received: by 2002:ac2:5a09:0:b0:523:88e9:9cd2 with SMTP id 2adb3069b0e04-529667cf983mr6448775e87.67.1716903010905; Tue, 28 May 2024 06:30:10 -0700 (PDT) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 References: <096178c9-91de-4752-bdc4-6a31bcdcbaf8@amd.com> <4871a305-5d45-47d2-85f2-d718c423db80@canonical.com> <3b880c7c-0d19-4bb6-9f0f-fb69047f41cd@canonical.com> <5c94947b-1f1f-44a7-8b9c-b701c78350b4@canonical.com> In-Reply-To: <5c94947b-1f1f-44a7-8b9c-b701c78350b4@canonical.com> From: Mateusz Guzik Date: Tue, 28 May 2024 15:29:58 +0200 Message-ID: Subject: Re: [RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions To: John Johansen Cc: Neeraj Upadhyay , paul@paul-moore.com, jmorris@namei.org, serge@hallyn.com, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, "Gautham R. Shenoy" , "Shukla, Santosh" , "Narayan, Ananth" , raghavendra.kodsarathimmappa@amd.com, koverstreet@google.com, paulmck@kernel.org, boqun.feng@gmail.com, vinicius.gomes@intel.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, May 24, 2024 at 11:52=E2=80=AFPM John Johansen wrote: > > On 5/24/24 14:10, Mateusz Guzik wrote: > > On Fri, Mar 8, 2024 at 9:09=E2=80=AFPM John Johansen > > wrote: > >> > >> On 3/2/24 02:23, Mateusz Guzik wrote: > >>> On 2/9/24, John Johansen wrote: > >>>> On 2/6/24 20:40, Neeraj Upadhyay wrote: > >>>>> Gentle ping. > >>>>> > >>>>> John, > >>>>> > >>>>> Could you please confirm that: > >>>>> > >>>>> a. The AppArmor refcount usage described in the RFC is correct? > >>>>> b. Approach taken to fix the scalability issue is valid/correct? > >>>>> > >>>> > >>>> Hi Neeraj, > >>>> > >>>> I know your patchset has been waiting on review for a long time. > >>>> Unfortunately I have been very, very busy lately. I will try to > >>>> get to it this weekend, but I can't promise that I will be able > >>>> to get the review fully done. > >>>> > >>> > >>> Gentle prod. > >>> > >>> Any chances of this getting reviewed in the foreseeable future? Would > >>> be a real bummer if the patchset fell through the cracks. > >>> > >> > >> yes, sorry I have been unavailable for the last couple of weeks. I am > >> now back, I have a rather large backlog to try catching up on but this > >> is has an entry on the list. > >> > > > > So where do we stand here? > > > sorry I am still trying to dig out of my backlog, I will look at this, > this weekend. > How was the weekend? ;) --=20 Mateusz Guzik