Commit Graph

4 Commits

Author SHA1 Message Date
katrinzhou 7dbd79cf59 tkernel: mounts: add shield mountpoint in container support
Upstream: no

Add shield mountpoint in container support
$ echo "set /dev/name /mnt/point" >/proc/tkernel/shield_mounts
    to shield the mountpoint
$ echo "clear /dev/name /mnt/point" >/proc/tkernel/shield_mounts
    to delete the mountpoint shielded

Signed-off-by: Weiwei Li <nuonuoli@tencent.com>
Signed-off-by: Xiaoming Gao <newtongao@tencent.com>
Signed-off-by: katrinzhou <katrinzhou@tencent.com>
Signed-off-by: Kairui Song <kasong@tencent.com>
2023-12-12 15:56:47 +08:00
katrinzhou 1c4e7e7a52 tkernel: netatop: add netatop module in kernel/tkernel/
Upstream: no

when netatop module insmod, user tools atop could display
network bandwidth per process

Signed-off-by: Zhiping Du <zhipingdu@tencent.com>
Signed-off-by: Wang Fuhai <fuhaiwang@tencent.com>
Signed-off-by: katrinzhou <katrinzhou@tencent.com>
Signed-off-by: Kairui Song <kasong@tencent.com>
2023-12-12 15:56:47 +08:00
katrinzhou c9c30816bb tkernel: ttools: add ttools module to support ptrace protect
Upstream: no

Add ttools module to support ptrace protect and get
file refcounts by fd.

Signed-off-by: Xiaoming Gao <newtongao@tencent.com>
Signed-off-by: katrinzhou <katrinzhou@tencent.com>
Signed-off-by: Kairui Song <kasong@tencent.com>
2023-12-12 15:56:47 +08:00
katrinzhou 0585394287 tkernel: initial support and nonpriv_bind
Upstream: no

- /proc/tkernel/nonpriv_netbind:
Contain list of ports allowed for nonpriv bind

echo +80 > /proc/tkernel/nonpriv_netbind
echo -80 > /proc/tkernel/nonpriv_netbind

Controls whether allow/deny nonpriv user bind to specified port.

Signed-off-by: Samuel Liao <samuelliao@tencent.com>
Signed-off-by: Xiaoming Gao <newtongao@tencent.com>
Signed-off-by: katrinzhou <katrinzhou@tencent.com>
Signed-off-by: Kairui Song <kasong@tencent.com>
2023-12-12 15:56:47 +08:00