From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.ispras.ru (mail.ispras.ru [83.149.199.84]) by sourceware.org (Postfix) with ESMTPS id EA3BC385625D for ; Wed, 11 May 2022 16:01:20 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org EA3BC385625D Received: from mail.ispras.ru (unknown [83.149.199.84]) by mail.ispras.ru (Postfix) with ESMTPSA id 044FF407626A; Wed, 11 May 2022 16:01:15 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 May 2022 19:01:14 +0300 From: Alexey Izbyshev To: Christian Brauner Cc: Florian Weimer , Adhemerval Zanella , libc-alpha@sourceware.org, Carlos O'Donell Subject: Re: [PATCH v4 0/3] Linux: Fix posix_spawn when user with time namespaces In-Reply-To: <20220511092119.ke4zlm2dkazasmva@wittgenstein> References: <20220510191155.1998575-1-adhemerval.zanella@linaro.org> <877d6tb3hl.fsf@oldenburg.str.redhat.com> <20220511092119.ke4zlm2dkazasmva@wittgenstein> User-Agent: Roundcube Webmail/1.4.4 Message-ID: <4b782402b96e54d755a9cc7cc0be5778@ispras.ru> X-Sender: izbyshev@ispras.ru Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-2.5 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS, SPF_HELO_NONE, SPF_PASS, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2022 16:01:22 -0000 On 2022-05-11 12:21, Christian Brauner wrote: > On Tue, May 10, 2022 at 09:18:46PM +0200, Florian Weimer wrote: >> * Adhemerval Zanella: >> >> > The patchset adds some support to tests the fallback code to >> > use only use CLONE_VFORK. It uses unshare directly because >> > it simpler than add container support. >> > >> > Adhemerval Zanella (3): >> > linux: Add CLONE_NEWTIME from Linux 5.6 to bits/sched.h >> > support: Add support_enter_time_namespace >> > linux: Add fallback for clone failure on posix_spawn (BZ #29115) >> >> Christan, how likely is it that we'd get another time namespace >> variant >> that would only become effective after execve (when the DSO is >> remapped >> anyway)? > > Not unlikely if it helps you avoid a lot of complexity. I will need > some > time to track down Andrei and others to discuss though. > A more general question is whether the kernel aims to maintain the property that vfork() can always be used in place of fork() in the future. If it doesn't, code that currently relies on vfork() (even unwittingly via high-level APIs like posix_spawn()) will still have to grow workarounds. Thanks, Alexey