Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932729Ab2JJXXC (ORCPT ); Wed, 10 Oct 2012 19:23:02 -0400 Received: from mail-pb0-f46.google.com ([209.85.160.46]:45778 "EHLO mail-pb0-f46.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932676Ab2JJXWy (ORCPT ); Wed, 10 Oct 2012 19:22:54 -0400 Date: Wed, 10 Oct 2012 16:20:47 -0700 From: Sergey Senozhatsky To: "Paul E. McKenney" Cc: Sergey Senozhatsky , Cristian =?iso-8859-1?Q?Rodr=EDguez?= , linux-kernel@vger.kernel.org, James Morris Subject: Re: include/linux/cgroup.h:566 suspicious rcu_dereference_check() usage! Message-ID: <20121010232047.GF4628@swordfish.datadirect.datadirectnet.com> References: <506F649F.4050109@opensuse.org> <20121008194921.GF2453@linux.vnet.ibm.com> <20121010010859.GA3210@swordfish.datadirect.datadirectnet.com> <20121010032503.GB13994@linux.vnet.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20121010032503.GB13994@linux.vnet.ibm.com> User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 4688 Lines: 121 On (10/09/12 20:25), Paul E. McKenney wrote: > > Looks sane to me! Dropping my patch. > > Thanx, Paul > Thanks a lot, Paul. I will resend with proper subject, so it'll be more visible in the list. -ss > > ---------------------------------------------------------------------------- > > > > Commit ad676077 > > | Author: Aristeu Rozanski > > | Date: Thu Oct 4 17:15:17 2012 -0700 > > | device_cgroup: convert device_cgroup internally to policy + exceptions > > > > moved RCU read-side protection from devcgroup_inode_mknod(), which, however is required > > by task_devcgroup(). Patch also add RCU read-side protection to __devcgroup_inode_permission() > > function, introduced in commit ad676077. > > > > [ 0.946303] include/linux/cgroup.h:566 suspicious rcu_dereference_check() usage! > > [ 0.946511] > > [ 0.946606] 2 locks held by kdevtmpfs/28: > > [ 0.946684] #0: (sb_writers){.+.+.+}, at: [] mnt_want_write+0x24/0x4b > > [ 0.947083] #1: (&sb->s_type->i_mutex_key#3/1){+.+.+.}, at: [] kern_path_create+0x83/0x144 > > [ 0.947598] > > [ 0.947787] Call Trace: > > [ 0.947868] [] lockdep_rcu_suspicious+0x109/0x112 > > [ 0.947958] [] devcgroup_inode_mknod+0x9e/0xee > > [ 0.948043] [] vfs_mknod+0x8a/0xed > > [ 0.948129] [] handle_create.isra.2+0x144/0x1b5 > > [ 0.948214] [] ? devtmpfsd+0x9f/0x138 > > [ 0.948298] [] ? do_raw_spin_lock+0x67/0xde > > [ 0.948384] [] ? do_raw_spin_unlock+0x8f/0x98 > > [ 0.948469] [] ? handle_create.isra.2+0x1b5/0x1b5 > > [ 0.948554] [] devtmpfsd+0xe4/0x138 > > [ 0.948638] [] ? handle_create.isra.2+0x1b5/0x1b5 > > [ 0.948724] [] kthread+0xd5/0xdd > > [ 0.948814] [] kernel_thread_helper+0x4/0x10 > > [ 0.948900] [] ? retint_restore_args+0x13/0x13 > > [ 0.948985] [] ? __init_kthread_worker+0x5a/0x5a > > [ 0.949069] [] ? gs_change+0x13/0x13 > > > > > > devcgroup_inode_mknod() part submitted by Paul E. McKenney. > > > > > > Signed-off-by: Sergey Senozhatsky > > > > --- > > > > security/device_cgroup.c | 21 +++++++++++++++++---- > > 1 file changed, 17 insertions(+), 4 deletions(-) > > > > diff --git a/security/device_cgroup.c b/security/device_cgroup.c > > index 44dfc41..043eb00 100644 > > --- a/security/device_cgroup.c > > +++ b/security/device_cgroup.c > > @@ -558,7 +558,8 @@ static int __devcgroup_check_permission(struct dev_cgroup *dev_cgroup, > > > > int __devcgroup_inode_permission(struct inode *inode, int mask) > > { > > - struct dev_cgroup *dev_cgroup = task_devcgroup(current); > > + struct dev_cgroup *dev_cgroup; > > + int ret; > > short type, access = 0; > > > > if (S_ISBLK(inode->i_mode)) > > @@ -570,13 +571,20 @@ int __devcgroup_inode_permission(struct inode *inode, int mask) > > if (mask & MAY_READ) > > access |= ACC_READ; > > > > - return __devcgroup_check_permission(dev_cgroup, type, imajor(inode), > > + rcu_read_lock(); > > + > > + dev_cgroup = task_devcgroup(current); > > + ret = __devcgroup_check_permission(dev_cgroup, type, imajor(inode), > > iminor(inode), access); > > + > > + rcu_read_unlock(); > > + return ret; > > } > > > > int devcgroup_inode_mknod(int mode, dev_t dev) > > { > > - struct dev_cgroup *dev_cgroup = task_devcgroup(current); > > + struct dev_cgroup *dev_cgroup; > > + int ret; > > short type; > > > > if (!S_ISBLK(mode) && !S_ISCHR(mode)) > > @@ -587,7 +595,12 @@ int devcgroup_inode_mknod(int mode, dev_t dev) > > else > > type = DEV_CHAR; > > > > - return __devcgroup_check_permission(dev_cgroup, type, MAJOR(dev), > > + rcu_read_lock(); > > + > > + dev_cgroup = task_devcgroup(current); > > + ret = __devcgroup_check_permission(dev_cgroup, type, MAJOR(dev), > > MINOR(dev), ACC_MKNOD); > > > > + rcu_read_unlock(); > > + return ret; > > } > > > > -- > > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > > the body of a message to majordomo@vger.kernel.org > > More majordomo info at http://vger.kernel.org/majordomo-info.html > > Please read the FAQ at http://www.tux.org/lkml/ > > > -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/