Messages in this thread | | | From | Alexey Gladkov <> | Subject | [PATCH v3 0/3] Allow to change ipc/mq sysctls inside ipc namespace | Date | Wed, 21 Sep 2022 12:41:46 +0200 |
| |
Right now ipc and mq limits count as per ipc namespace, but only real root can change them. By default, the current values of these limits are such that it can only be reduced. Since only root can change the values, it is impossible to reduce these limits in the rootless container.
We can allow limit changes within ipc namespace because mq parameters are limited by RLIMIT_MSGQUEUE and ipc parameters are not limited to anything other than cgroups.
--
Alexey Gladkov (3): sysctl: Allow change system v ipc sysctls inside ipc namespace sysctl: Allow to change limits for posix messages queues docs: Add information about ipc sysctls limitations
Documentation/admin-guide/sysctl/kernel.rst | 14 ++++++-- ipc/ipc_sysctl.c | 36 +++++++++++++++++++-- ipc/mq_sysctl.c | 36 +++++++++++++++++++++ 3 files changed, 81 insertions(+), 5 deletions(-)
-- 2.33.4
| |