Commit Graph

2884 Commits

Author SHA1 Message Date
Michael Kerrisk 289b177f0f random.7: Remove recommendation against consuming large amounts of randomness
From the email discussion:

> >    Usage recommendations
> >        The kernel random-number generator relies on  entropy  gathered
> >        from  device  drivers and other sources of environmental noise.
> >        It is designed to produce a small amount of  high-quality  seed
> >        material to seed a cryptographically secure pseudorandom number
> >        generator (CSPRNG).  It is designed for  security,  not  speed,
> >        and  is  poorly  suited  to generating large amounts of crypto‐
> >        graphic random data.  Users should be economical in the  amount
> >        of seed material that they consume via getrandom(2), /dev/uran‐
> >        dom, and /dev/random.
> >
> >        ┌─────────────────────────────────────────────────────┐
> >        │FIXME                                                │
> >        ├─────────────────────────────────────────────────────┤
> >        │Is it really  necessary  to  avoid  consuming  large │
> >        │amounts from /dev/urandom? Various sources linked to │
> >        │by https://bugzilla.kernel.org/show_bug.cgi?id=71211 │
> >        │suggest it is not.                                   │
> >        │                                                     │
> >        │And: has the answer to the previous question changed │
> >        │across kernel versions?                              │
> >        └─────────────────────────────────────────────────────┘
> >        Consuming unnecessarily large  quantities  of  data  via  these
> >        interfaces  will  have  a negative impact on other consumers of
> >        randomness.

[Ted T'so:]

> So "poorly suited" is definitely true.  Also true is that urandom is
> not engineered for use for non-cryptographic uses.  It's always going
> to be faster to use random(3) for those purposes.
>
> As far as whether or not it has a negative impact, it depends on how
> much you trust the underlying cryptographic algorithms.  If the CSPRNG
> is seeded correctly with at least 256 bits of entropy that can't be
> guessed by the attacker, and if the underlying cryptographic
> primitives are secure, then it won't matter.  But *if* there is an
> unknown vulnerability in the underlying primitive, and *if* large
> amounts of data generated by the CSPRNG would help exploit that
> vulnerability, and *if* that bulk amount of CSPRNG output is made
> available to an attacker with the capability to break the underlying
> cryptographic vulnerability, then there would be a problem.
>
> Obviously, no one knows of such a vulnerability, and I'm fairly
> confident that there won't be such a vulnerability across the
> different ways we've used to generate the urandom source --- but some
> people are professional paranoids, and would argue that we shouldn't
> make bulk output of the CSPRNG available for no good reason, just in
> case.

[Nikos Mavrogiannopoulos:]

The above is certainly accurate, however, I think that such a
discussion or text, when reflected to a man-page is going to
cause problems. The audience of a man-page are not crypto people,
and seeing such text would create confusion rather than clarify
how these devices/apis should be used. The *if* part is not put
into a perspective, suggesting that such an *if* is possible.
However, if one clarifies, i.e., in that case, your TLS or SSH
connection is most likely broken as well, and not because of any
attack on /dev/urandom, then one can see that we are heading
towards a theoretical discussion.

My suggestion, on that particular text would be to remove it,
but make it explicit somewhere in the text that all the
assurances for the devices depend on the crypto primitives,
rather than describing risks that may arise on particular
usage patterns *if* primitives are broken.

Reviewed-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
Reported-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-26 14:31:53 +01:00
Michael Kerrisk 88e28f78bd sched.7: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-22 14:44:07 +01:00
Michael Kerrisk 3c61c8ac19 sched.7: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-22 13:42:49 +01:00
Michael Kerrisk cfd62fa259 sched.7: Give the page a more generic NAME
The page isn't just about APIs.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-22 13:21:32 +01:00
Michael Kerrisk 1f7fb9c057 sched.7: NOTES: mention cgroups CPU controller
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-22 13:19:20 +01:00
Michael Kerrisk 55a51edbd7 bootparam.7: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-21 10:54:55 +01:00
Michael Kerrisk 7c896e1ece random.7: wfix
Reported-by: Jeremy Harris <jgh@redhat.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-19 11:28:46 +01:00
Michael Kerrisk a4439a507a inotify.7: srcfix: FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-18 10:41:26 +01:00
Michael Kerrisk 705bb6738b inotify.7: Note a subtlety of event generation when monitoring a directory
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-18 10:39:10 +01:00
Michael Kerrisk 2b44a16879 random.7: wfix
Reported-by: Theodore Ts'o <tytso@mit.edu>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-15 22:14:52 +01:00
Michael Kerrisk e97a8a1d49 random.7: srcfix: tweak FIXMEs
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-15 07:48:59 +01:00
Michael Kerrisk 091ae4d20b random.7: Tewaks after review by Ted T'so
Reviewed-by: Theodore Ts'o <tytso@mit.edu>
Reported-by: Theodore Ts'o <tytso@mit.edu>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-15 07:40:35 +01:00
Michael Kerrisk 76d8c32d6f random.7: Fixes after review by Laurent Georget
Reviewed-by: Laurent Georget <laurent@lgeorget.eu>
Reported-by: Laurent Georget <laurent@lgeorget.eu>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-15 07:19:09 +01:00
Michael Kerrisk e10dec2908 random.7: wfix
Reported-by: Jeremy Harris <jgh@redhat.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-15 06:57:51 +01:00
Michael Kerrisk b171f0af8a random.7: srcfix: FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-13 07:34:18 +01:00
Michael Kerrisk 2c158ae506 random.7: Note that simulations don't need cryptographically secure random numbers
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-13 07:26:51 +01:00
Michael Kerrisk cdfedc0324 random.7: wfix
Reported-by: Laurent Georget <laurent.georget@supelec.fr>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-12 23:00:40 +01:00
Michael Kerrisk 5a1df80797 random.7: srcfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-12 20:18:15 +01:00
Michael Kerrisk e919912d34 random.7: wfix
Further weaken any suggestion that the "random" source is
in some cases preferable.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-12 13:19:10 +01:00
Michael Kerrisk d8de7cba64 random.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-12 12:22:10 +01:00
Michael Kerrisk dce6b79650 getrandom.2, random.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-12 12:22:10 +01:00
Michael Kerrisk 0ae2c1356d random.7: New page providing an overview of interfaces for obtaining randomness
Ccontains material extracted from getrandom(2) and random(4),
as well as new material.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-12 12:22:10 +01:00
Michael Kerrisk 1d99db5f09 udplite.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-11 09:46:13 +01:00
Michael Kerrisk b64fbdca61 user_namespaces.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-11 09:38:06 +01:00
Michael Kerrisk d51fc363eb udp.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-11 09:34:52 +01:00
Michael Kerrisk d70877837a socket.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-11 09:34:08 +01:00
Michael Kerrisk d4c45a8e43 ipv6.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-11 09:33:18 +01:00
Michael Kerrisk 82d28cfa21 ip.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-11 09:32:09 +01:00
Michael Kerrisk 4e9362fe4b inotify.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-11 09:30:27 +01:00
Michael Kerrisk dac9acbf99 credentials.7: SEE ALSO: add setpriv(1)
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-10 08:33:46 +01:00
Michael Kerrisk 0b710a48c5 signal.7: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-09 16:50:10 +01:00
Michael Kerrisk fdf41f57c7 capabilities.7: CAP_SYS_ADMIN allows privileged ioctl() operations on /dev/random
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-09 14:51:17 +01:00
Michael Kerrisk ba8f381e12 capabilities.7: CAP_SYS_ADMIN governs ptrace(2) PTRACE_SECCOMP_GET_FILTER
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-08 14:07:56 +01:00
Michael Kerrisk 4e07c70f90 fallocate.2, fcntl.2, lseek.2, madvise.2, memfd_create.2, mmap.2, remap_file_pages.2, swapon.2, proc.5, cgroups.7, shm_overview.7, user_namespaces.7: Fix cross references to new tmpfs(5) page
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-07 16:21:41 +01:00
Michael Kerrisk 1cb4e899f0 pipe.7: Document pre-Linux 4.9 bugs in pipe limit checking
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-06 13:14:07 -07:00
Michael Kerrisk 33dc4b59be proc.5, pipe.7: Move /proc/sys/fs/pipe-max-size content from proc(5) to pipe(7)
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-06 13:14:07 -07:00
Michael Kerrisk cc6b4da2ec pipe.7: Fixes after review by Vegard Nossum
Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
Reviewed-by: Willy Tarreau <w@1wt.eu>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-06 13:14:07 -07:00
Michael Kerrisk 12033ac49d pipe.7: Add a lot more detail on /proc files controlling memory usage by pipes
Add a lot more detail on /proc/sys/fs/pipe-max-size and
/proc/sys/fs/pipe-user-pages-{soft,hard}.

Reviewed-by: Willy Tarreau <w@1wt.eu>
Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-06 13:14:06 -07:00
Vegard Nossum 81c4577e23 pipe.7: Document /proc files controlling memory usage by pipes
Document /proc/sys/fs/pipe-max-size and
/proc/sys/fs/pipe-user-pages-{soft,hard}.

Signed-off: Vegard Nossum <vegard.nossum@oracle.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-06 13:14:06 -07:00
Michael Kerrisk 498aad5099 kill.2, sigaction.2, signal.2, credentials.7, signal.7: Change section number from 2 to 3 in killpg() references
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-11-04 18:01:28 +01:00
Michael Kerrisk 30ed4712c7 chroot.2, dup.2, nfsservctl.2, utimensat.2, malloc_get_state.3, pthread_setaffinity_np.3, ddp.7, fifo.7, ip.7: Remove some out-of-date/obsolete/irrelevant FIXMEs
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-31 16:45:46 +01:00
Michael Kerrisk c63b745431 user_namespaces.7: srcfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-31 16:44:08 +01:00
Michael Kerrisk f1bf4c8c5e svipc.7: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-31 16:43:05 +01:00
Michael Kerrisk 01fe8592ce standards.7: POSIX.1-2016 (POSIX.1-2008 TC2) has now been released
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-31 16:41:57 +01:00
Michael Kerrisk 922077e0bb netlink.7: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-29 13:43:30 +02:00
Michael Kerrisk 85e10b8c43 udp.7: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-29 13:43:30 +02:00
Michael Kerrisk a933bc9ee9 tcp.7: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-29 13:43:30 +02:00
Michael Kerrisk e57fe8add6 socket.7: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-29 13:43:30 +02:00
Michael Kerrisk 6248a90b6b signal.7: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-29 13:43:30 +02:00
Michael Kerrisk 47a2bb177e sched.7: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-29 13:43:30 +02:00
Michael Kerrisk b237b37c70 namespaces.7: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-29 13:43:30 +02:00
Michael Kerrisk 2c596bf5ff ip.7: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-29 13:43:30 +02:00
Michael Kerrisk 1a0fbe37e6 capabilities.7: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-29 13:36:14 +02:00
Michael Kerrisk c174eb6a07 cgroups.7: tfix: fix pathname of perf-record.txt kernel source file
Reported-by: Michael Hausenblas <michael.hausenblas@gmail.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-22 13:50:22 +02:00
Michael Kerrisk 2cf45b0d77 capabilities.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-19 10:53:38 +02:00
Michael Kerrisk 3bbab71ae8 capabilities.7: tfix + wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-18 10:46:54 +02:00
Michael Kerrisk de6a5c0501 capabilities.7: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-18 09:43:27 +02:00
Michael Kerrisk 3b3d46e7cf pkeys.7: srcfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-18 08:00:12 +02:00
Dave Hansen c92965c2be pkey.7: Add description of signal handling behavior
The signal behavior of pkeys is special compared to many other
processor and OS features.  Add a special section to describe
the behavior.

Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com>
2016-10-18 07:58:52 +02:00
Michael Kerrisk 79a2a43713 pkeys.7: Note that SIGSEGV results if pkey restrictions are violated
And point to sigaction(2) for further details.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-17 14:04:11 +02:00
Michael Kerrisk 8bb4e76704 pkeys.7: Cosmetic changes to example program
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-17 14:04:11 +02:00
Michael Kerrisk 435f231ac9 pkeys.7: Various tweaks to the text
No changes to technical details.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-17 14:04:11 +02:00
Dave Hansen 452f54946f pkeys.7: New page with overview of Memory Protection Keys
Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com>
2016-10-17 12:51:10 +02:00
Jakub Wilk a15e067376 cgroups.7: tfix
Signed-off-by: Jakub Wilk <jwilk@jwilk.net>
2016-10-08 20:08:06 +02:00
Jakub Wilk ffc3e08c2f uri.7: Use "example.com" as example domain
The owner of the "xyz.com" domain might not be happy that their
domain is used in examples. RFC 2606 reserves (among others)
"example.com" for this purpose, so let's use it.

Signed-off-by: Jakub Wilk <jwilk@jwilk.net>
2016-10-08 20:07:18 +02:00
Michael Kerrisk b8efb41432 memusage.1, memusagestat.1, pldd.1, accept.2, adjtimex.2, arch_prctl.2, bdflush.2, bpf.2, close.2, epoll_ctl.2, epoll_wait.2, execve.2, execveat.2, fanotify_init.2, fanotify_mark.2, fcntl.2, fsync.2, get_kernel_syms.2, getdomainname.2, getgroups.2, gethostname.2, getrandom.2, getrlimit.2, getrusage.2, getsid.2, getunwind.2, io_getevents.2, ioctl_fat.2, kexec_load.2, killpg.2, listxattr.2, lseek.2, madvise.2, memfd_create.2, mknod.2, mlock.2, modify_ldt.2, msgctl.2, msgget.2, msgop.2, readlink.2, readv.2, reboot.2, recvmmsg.2, rename.2, request_key.2, restart_syscall.2, sched_setaffinity.2, sched_setattr.2, sched_setparam.2, seccomp.2, select_tut.2, semctl.2, semget.2, semop.2, set_thread_area.2, seteuid.2, setgid.2, setpgid.2, setresuid.2, setreuid.2, setsid.2, setuid.2, shmctl.2, shmget.2, shmop.2, sigaction.2, sigprocmask.2, stat.2, symlink.2, syscall.2, sysctl.2, unlink.2, bindresvport.3, byteorder.3, dlopen.3, endian.3, error.3, ffs.3, fmemopen.3, getcwd.3, getlogin.3, getnetent.3, getprotoent.3, getservent.3, getumask.3, getutent.3, glob.3, isalpha.3, lio_listio.3, login.3, mbsinit.3, mbstowcs.3, mbtowc.3, mkstemp.3, nextup.3, ntp_gettime.3, posix_fallocate.3, posix_spawn.3, pthread_join.3, pthread_rwlockattr_setkind_np.3, random.3, rcmd.3, realpath.3, resolver.3, setjmp.3, setnetgrent.3, sigvec.3, strerror.3, strverscmp.3, system.3, toupper.3, towlower.3, towupper.3, wcstombs.3, wordexp.3, cciss.4, loop.4, mouse.4, random.4, core.5, group.5, hosts.5, resolv.conf.5, ascii.7, environ.7, epoll.7, glob.7, ip.7, mq_overview.7, packet.7, pipe.7, raw.7, sched.7, signal.7, socket.7, symlink.7, ld.so.8, sln.8: tstamp
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk e4c759bc0d cgroups.7: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk 754f4cf5bd cgroups.7: Describe the cgroups v2 cgroup.events file
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk dddb7ea1fc cgroups.7: Document cgroups v2 unified hierarchy
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk 2befa495c2 cgroups.7: Restructure list of cgroup v2 differences
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk 5b38b21d2d cgroups.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk 23388d411f cgroups.7: Substantial reworking of text on v1 cgroup release notification
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk 88afe701da cgroups.7: Relocate text on "Cgroups v1 release notification"
No text changes

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk fb4752e127 cgroups.7: Add some subheadings
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk 4580c2f6cb cgroups.7: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk 860573adaa cgroups.7: Relocate "Cgroups version 1 controllers" subsection
No text changes

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk f524e7f8c7 cgroups.7: Add some details to discussion of cgroup.procs file
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk 31ec2a5cf7 cgroups.7: A cgroup v1 controller can't be mounted against multiple hierarchies
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:23 +02:00
Michael Kerrisk 15ce4b0cae cgroups.7: Create a NOTES section and move fork/execve discussion there
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-08 14:08:17 +02:00
Michael Kerrisk 3ddb25ac9b cgroups.7: Rework text on cgroup v2 "leaf" nodes
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk b43be47ef1 cgroups.7: Relocate text on cgroup v2 "leaf" nodes
No content changes

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk e466137a86 cgroups.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk 87402a2e5b cgroups.7: Clarify discussion of the "tasks" file
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk 9ed582ac20 cgroups.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk c91a9f8acb cgroups.7: Relocate "Release notification" subsection
No text changes.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk 3b6c1d46ef cgroups.7: Add "Release notification" subheading
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk 59dabd75ad cgroups.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk 56daf0c4a9 cgroups.7: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk 818339692a cgroups.7: Minor rework, plus note behavior on execve(2)
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:35 +02:00
Michael Kerrisk 35e8cd2f1e cgroups.7: Minor addition
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 77e0a62674 cgroups.7: Rework discussion of mounting v1 controllers
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 66648e1d91 cgroups.7: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 55f52de8f6 cgroups.7: Prefer "controller" over "subsystem"
Replace various uses of "subsystem" with "controller". The
former too was originally used in describing cgroups, but it
is vague to the point of ambiguity. The latter term is a
little less ambiguous.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 1a90a85efc cgroups.7: Note that a controller can't be simultaneously used in v1 and v2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 8fc9db1e06 cgroups.7: Minor rewording
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 8bff71400e cgroups.7: Rework intro text a little
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 28bcfee96d cgroups.7: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 6398ca15da cgroups.7: Use "threads" rather than "tasks" in description
Users-space programmers generally consider things in terms of
"processes" and threads". Update the text to remove most uses
of the term "tasks".

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 2a8ef76b59 cgroups.7: wfix: fix reference to a kernel source file
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00
Michael Kerrisk 1a4f7d5908 cgroups.7: Remove some redundant text on /proc files
The /proc files were mentioned in two different places.
Once is enough.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-10-07 23:01:34 +02:00