Commit Graph

16 Commits

Author SHA1 Message Date
Yongliang Gao 757f8aaf97 tkernel: make the code for the kill block feature cleaner
No functional changes, just making the code cleaner.

Signed-off-by: Yongliang Gao <leonylgao@tencent.com>
Reviewed-by: Jianping Liu <frankjpliu@tencent.com>
2024-11-12 12:56:14 +08:00
Yongliang Gao 3cc17b97d8 tkernel: support kill block feature
If the kill signal match the block rule, it will be blocked.
This feature is useful to some k8s user who don't allow k8s
kill user process.

Signed-off-by: Hongbo Li <herberthbli@tencent.com>
Signed-off-by: Yongliang Gao <leonylgao@tencent.com>
Reviewed-by: Jianping Liu <frankjpliu@tencent.com>
2024-11-12 12:56:08 +08:00
Yongliang Gao a415b16b7a tkernel: support kill hook interface
Add a kill hook callback in check_kill_permission to support
kill interception.

Signed-off-by: Yongliang Gao <leonylgao@tencent.com>
Reviewed-by: Jianping Liu <frankjpliu@tencent.com>
2024-11-12 12:55:00 +08:00
Yongliang Gao b1e66f19d1 tkernel: add irq latency tool
A tool of detecting irq/softirq latency. The principle is
base of whether the timer is triggered regulartly or not.

Signed-off-by: Liu Hua <shookliu@tencent.com>
Signed-off-by: Jianping Liu <frankjpliu@tencent.com>
Signed-off-by: Yongliang Gao <leonylgao@tencent.com>
2024-11-07 19:49:32 +08:00
Jianping Liu d5f2baead9 emm: update to v0.1.7.4
Signed-off-by: Jianping Liu <frankjpliu@tencent.com>
Reviewed-by: Yongliang Gao <leonylgao@tencent.com>
2024-09-28 22:53:01 +08:00
Jianping Liu 28fb95817d emm: upadate to v0.1.7.3
Signed-off-by: Jianping Liu <frankjpliu@tencent.com>
Reviewed-by: Yongliang Gao <leonylgao@tencent.com>
2024-09-14 11:15:50 +08:00
frankjpliu 1541ee2d1b Merge branch 'remotes/origin/huntazhang/cmdlog' into 'master' (merge request !140)
Adapt cmdlog
2024-08-23 11:21:29 +00:00
Jianping Liu f03179c2a4 submodule: update emm and thirdparty/release-drivers
emm update to v0.1.7.2
release-drivers update to v1.0

Signed-off-by: Jianping Liu <frankjpliu@tencent.com>
Reviewed-by: Yongliang Gao <leonylgao@tencent.com>
2024-08-20 14:53:00 +08:00
huntazhang 62b6061f57 [PATCH] security: add security hook point
Adapted to tkernel5  and fixed some bugs.

Signed-off-by: Zhiping Du <zhipingdu@tencent.com>
Signed-off-by: zhiguang peng <zgpeng@tencent.com>
Signed-off-by: Haiquan zhang  <huntazhang@tencent.com>
Signed-off-by: jit xie  <jitxie@tencent.com>
2024-07-31 15:40:12 +08:00
Jianping Liu bd6c8af32d emm: update to v0.1.5
Signed-off-by: Jianping Liu <frankjpliu@tencent.com>
Reviewed-by: Yongliang Gao <leonylgao@tencent.com>
2024-06-13 10:24:11 +08:00
Jianping Liu efc053f5a2 emm: update emm to v0.1.4
Signed-off-by: Jianping Liu <frankjpliu@tencent.com>
Reviewed-by: Yongliang Gao <leonylgao@tencent.com>
2024-05-17 15:12:42 +08:00
Jianping Liu 5539eb9481 emm: add submodule of emm
WuJing will using emm ko, it is a outtree module.

Signed-off-by: Jianping Liu <frankjpliu@tencent.com>
Reviewed-by: Yongliang Gao <leonylgao@tencent.com>
2024-04-30 17:18:01 +08:00
katrinzhou 7dbd79cf59 tkernel: mounts: add shield mountpoint in container support
Upstream: no

Add shield mountpoint in container support
$ echo "set /dev/name /mnt/point" >/proc/tkernel/shield_mounts
    to shield the mountpoint
$ echo "clear /dev/name /mnt/point" >/proc/tkernel/shield_mounts
    to delete the mountpoint shielded

Signed-off-by: Weiwei Li <nuonuoli@tencent.com>
Signed-off-by: Xiaoming Gao <newtongao@tencent.com>
Signed-off-by: katrinzhou <katrinzhou@tencent.com>
Signed-off-by: Kairui Song <kasong@tencent.com>
2023-12-12 15:56:47 +08:00
katrinzhou 1c4e7e7a52 tkernel: netatop: add netatop module in kernel/tkernel/
Upstream: no

when netatop module insmod, user tools atop could display
network bandwidth per process

Signed-off-by: Zhiping Du <zhipingdu@tencent.com>
Signed-off-by: Wang Fuhai <fuhaiwang@tencent.com>
Signed-off-by: katrinzhou <katrinzhou@tencent.com>
Signed-off-by: Kairui Song <kasong@tencent.com>
2023-12-12 15:56:47 +08:00
katrinzhou c9c30816bb tkernel: ttools: add ttools module to support ptrace protect
Upstream: no

Add ttools module to support ptrace protect and get
file refcounts by fd.

Signed-off-by: Xiaoming Gao <newtongao@tencent.com>
Signed-off-by: katrinzhou <katrinzhou@tencent.com>
Signed-off-by: Kairui Song <kasong@tencent.com>
2023-12-12 15:56:47 +08:00
katrinzhou 0585394287 tkernel: initial support and nonpriv_bind
Upstream: no

- /proc/tkernel/nonpriv_netbind:
Contain list of ports allowed for nonpriv bind

echo +80 > /proc/tkernel/nonpriv_netbind
echo -80 > /proc/tkernel/nonpriv_netbind

Controls whether allow/deny nonpriv user bind to specified port.

Signed-off-by: Samuel Liao <samuelliao@tencent.com>
Signed-off-by: Xiaoming Gao <newtongao@tencent.com>
Signed-off-by: katrinzhou <katrinzhou@tencent.com>
Signed-off-by: Kairui Song <kasong@tencent.com>
2023-12-12 15:56:47 +08:00