Compare commits

...

13 Commits

Author SHA1 Message Date
Michael Kerrisk daa754a4d6 Changes.old: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 23:13:58 +02:00
Michael Kerrisk fabb1a2a0b syscalls.2: Add Linux 5.14 system calls
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 22:43:25 +02:00
Michael Kerrisk d5ee9f931e memfd_secret.2: SEE ALSO: add memfd_create(2)
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 22:43:25 +02:00
Michael Kerrisk e817f70a5f memfd_create.2: SEE ALSO: add memfd_secret(2)
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 22:43:25 +02:00
Michael Kerrisk 84a2ce0f18 memfd_secret.2: Minor edits to Mike Rapoport's patch
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 22:43:25 +02:00
Michael Kerrisk eabb03a4d2 memfd_secret.2: wfix
Added "RAM-based" after consultation with Mike Rapoport

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 22:43:19 +02:00
Mike Rapoport ac5edfeb1d memfd_secret.2: New page describing memfd_secret() system call
Signed-off-by: Mike Rapoport <rppt@linux.ibm.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 22:40:49 +02:00
Michael Kerrisk 824b408b7d Changes.old: tfix in 5.13 changelog
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 22:32:40 +02:00
Michael Kerrisk 4aa8739e0f Changes.old: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 22:24:57 +02:00
Michael Kerrisk 03564de187 Changes.old: Add missing entry in 5.13 changelog
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2021-08-27 22:15:28 +02:00
Michael Kerrisk 2af47cd371 Start of man-pages-5.14: updating Changes and Changes.old 2021-08-27 22:13:35 +02:00
Michael Kerrisk 333691eb13 Start of man-pages-5.14: updating .Announce and .lsm files 2021-08-27 22:13:35 +02:00
Michael Kerrisk 48cbf99783 Start of man-pages-5.14: renaming .Announce and .lsm files 2021-08-27 22:13:35 +02:00
7 changed files with 537 additions and 331 deletions

330
Changes
View File

@ -1,47 +1,7 @@
==================== Changes in man-pages-5.13 ====================
==================== Changes in man-pages-5.14 ====================
Released: 2021-08-27, Christchurch
Released: ????-??-??, Munich
Ahelenia Ziemiańska (наб) <nabijaczleweli@nabijaczleweli.xyz>
Alan Peakall <Alan.Peakall@helpsystems.com>
Alejandro Colomar <alx.manpages@gmail.com>
Alexis Wilke <alexis@m2osw.com>
Askar Safin <safinaskar@mail.ru>
Christian Brauner <christian.brauner@ubuntu.com>
Christophe Leroy <christophe.leroy@csgroup.eu>
Christopher Yeleighton <giecrilj@stegny.2a.pl>
Cristian Morales Vega <christian.morales.vega@gmail.com>
Dan Robertson <dan@dlrobertson.com>
Darrick J. Wong <djwong@kernel.org>
Dominique Brazziel <dbrazziel@snet.net>
EmanueleTorre <torreemanuele6@gmail.com>
Eric W. Biederman <ebiederm@xmission.com>
G. Branden Robinson <g.branden.robinson@gmail.com>
Helge Kreutzmann <debian@helgefjell.de>
Jakub Wilk <jwilk@jwilk.net>
James O. D. Hunt <jamesodhunt@gmail.com>
Jonny Grant <jg@jguk.org>
Kees Cook <keescook@chromium.org>
Kir Kolyshkin <kolyshkin@gmail.com>
Kurt Kanzenbach <kurt@linutronix.de>
kXuan <kxuanobj@gmail.com>
Michael Kerrisk <mtk.manpages@gmail.com>
Michael Weiß <michael.weiss@aisec.fraunhofer.de>
NeilBrown <neilb@suse.de>
Nora Platiel <nplatiel@gmx.us>
Pali Rohár <pali@kernel.org>
Peter Collingbourne <pcc@google.com>
Richard Palethorpe <rpalethorpe@suse.com>
Rodrigo Campos <rodrigo@kinvolk.io>
Sagar Patel <sagarmp@cs.unc.edu>
Serge E. Hallyn <serge@hallyn.com>
Sergey Petrakov <kr@spmail.info>
Stefan Kanthak <stefan.kanthak@nexgo.de>
Štěpán Němec <stepnem@gmail.com>
Thomas Gleixner <tglx@linutronix.de>
Thomas Voss <thomasavoss@protonmail.com>
Viet Than <thanhoangviet@gmail.com>
Will Manley <will@williammanley.net>
Contributors
------------
@ -57,301 +17,19 @@ Apologies if I missed anyone!
New and rewritten pages
-----------------------
mount_setattr.2
Christian Brauner [Alejandro Colomar, Michael Kerrisk]
New manual page documenting the mount_setattr() system call
Newly documented interfaces in existing pages
---------------------------------------------
futex.2
Kurt Kanzenbach [Alejandro Colomar, Thomas Gleixner, Michael Kerrisk]
Document FUTEX_LOCK_PI2
ioctl_tty.2
Pali Rohár [Alejandro Colomar, Michael kerrisk]
Document ioctls: TCGETS2, TCSETS2, TCSETSW2, TCSETSF2
pidfd_open.2
Michael Kerrisk
Document PIDFD_NONBLOCK
seccomp_unotify.2
Rodrigo Campos [Alejandro Colomar]
Document SECCOMP_ADDFD_FLAG_SEND
sigaction.2
Peter Collingbourne [Alejandro Colomar, Michael Kerrisk]
Document SA_EXPOSE_TAGBITS and the flag support detection protocol
statx.2
NeilBrown
Document STATX_MNT_ID
capabilities.7
user_namespaces.7
Michael Kerrisk, Kir Kolyshkin [Alejandro Colomar]
Describe CAP_SETFCAP for mapping UID 0
mount_namespaces.7
Michael Kerrisk [Christian Brauner, Eric W. Biederman]
More clearly explain the notion of locked mounts
For a long time, this manual page has had a brief discussion of
"locked" mounts, without clearly saying what this concept is, or
why it exists. Expand the discussion with an explanation of what
locked mounts are, why mounts are locked, and some examples of the
effect of locking.
user_namespaces.7
Michael Kerrisk
Document /proc/PID/projid_map
ld.so.8
Michael Kerrisk
Document --list-tunables option added in glibc 2.33
New and changed links
---------------------
Global changes
--------------
A few pages
Michael Kerrisk
ERRORS: correct alphabetic order
A few pages
Michael Kerrisk
Place SEE ALSO entries in correct order
A few pages
Michael Kerrisk
Arrange .SH sections in correct order
Various pages
Michael Kerrisk
Fix EBADF error description
Make the description of the EBADF error for invalid 'dirfd' more
uniform. In particular, note that the error only occurs when the
pathname is relative, and that it occurs when the 'dirfd' is
neither valid *nor* has the value AT_FDCWD.
Various pages
Michael Kerrisk
ERRORS: combine errors into a single alphabetic list
These pages split out extra errors for some APIs into a separate
list. Probably, the pages are easier to ready if all errors are
combined into a single list.
Note that there still remain a few pages where the errors are
listed separately for different APIs. For the moment, it seems
best to leave those pages as is, since the error lists are
largely distinct in those pages.
VArious pages
Michael Kerrisk
Terminology clean-up: "mount point" ==> "mount"
Many times, these pages use the terminology "mount point", where
"mount" would be better. A "mount point" is the location at which
a mount is attached. A "mount" is an association between a
filesystem and a mount point.
accept.2
access.2
getpriority.2
mlock.2
Michael Kerrisk
ERRORS: combine errors into a single list
These pages split out errors into separate lists (perhaps per API,
perhaps "may" vs "shall", perhaps "Linux-specific" vs
standard(??)), but there's no good reason to do this. It makes
the error list harder to read, and is inconsistent with other
pages. So, combine the errors into a single list.
fanotify_mark.2
futimesat.2
mount_setattr.2
statx.2
symlink.2
mkfifo.3
Michael Kerrisk
Refer the reader to openat(2) for explanation of why 'dirfd' is useful
Various pages
Thomas Voss [Alejandro Colomar]
Consistently use '*argv[]'
Changes to individual pages
---------------------------
iconv.1
iconvconfig.8
Michael Kerrisk [Christopher Yeleighton]
FILES: note that files may be under /usr/lib64 rather than /lib/64
See https://bugzilla.kernel.org/show_bug.cgi?id=214163
ldd.1
Alejandro Colomar [EmanueleTorre]
Fix example command
add_key.2
keyctl.2
request_key.2
Michael Kerrisk [Dominique Brazziel]
Note that the "libkeyutils" package provides <keyutils.h>
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992377
close_range.2
Michael Kerrisk, Alejandro Colomar
Glibc 2.34 has added a close_range() wrapper
execve.2
Michael Kerrisk [Nora Platiel]
The pathname given to interpreter is not necessarily absolute
Michael Kerrisk
SEE ALSO: getauxval(3)
getauxval(3) is useful background regarding execve(2).
fanotify_mark.2
Michael Kerrisk
ERRORS: add missing EBADF error for invalid 'dirfd'
ioctl_tty.2
Pali Rohár [Alejandro Colomar]
Update DTR example
Do not include unused (and incompatible) header file termios.h and
include required header files for puts() and close() functions.
mount.2
Michael Kerrisk
ERRORS: add EPERM error for case where a mount is locked
Refer the reader to mount_namespaces(7) for details.
Michael Kerrisk
SEE ALSO: add mount_setattr(2)
open.2
Michael Kerrisk
Explicitly describe the EBADF error that can occur with openat()
In particular, specifying an invalid file descriptor number
in 'dirfd' can be used as a check that 'pathname' is absolute.
Michael Kerrisk
Clarify that openat()'s dirfd must be opened with O_RDONLY or O_PATH
Michael Kerrisk
Add mount_setattr(2) to list of 'dirfd' APIs
open_by_handle_at.2
Michael Kerrisk
ERRORS: add missing EBADF error for invalid 'dirfd'
readv2.2
Will Manley [Alejandro Colomar]
Note preadv2(..., RWF_NOWAIT) bug in BUGS section
readv.2
pipe.7
Michael Kerrisk [наб]
Make text on pipe writes more general to avoid a confusion in writev(2)
seccomp.2
Eric W. Biederman [Kees Cook]
Clarify that bad system calls kill the thread (not the process)
syscalls.2
Michael Kerrisk
Add quotactl_fd(); remove quotactl_path()
quotactl_path() was never wired up in Linux 5.13.
It was replaced instead by quotactl_fd(),
Michael Kerrisk
Add system calls that are new in 5.13
umount.2
Michael Kerrisk
ERRORS: add EINVAL for case where mount is locked
wait.2
Richard Palethorpe [Alejandro Colomar]
Add ESRCH for when pid == INT_MIN
Michael Kerrisk
ERRORS: document EAGAIN for waitid() on a PID file descriptor
getaddrinfo.3
Alejandro Colomar [Cristian Morales Vega]
Note that 'errno' is set in parallel with EAI_SYSTEM
getauxval.3
Michael Kerrisk
SEE ALSO: add execve(2)
getopt.3
James O. D. Hunt [Alejandro Colomar]
Further clarification of 'optstring'
pthread_setname_np.3
Michael Kerrisk [Alexis Wilke]
EXAMPLES: remove a bug by simplifying the code
strlen.3
wcslen.3
Michael Kerrisk [Alejandro Colomar, Jonny Grant]
Recommend alternatives where input buffer might not be null-terminated
strstr.3
Alejandro Colomar [Stefan Kanthak]
Document special case for empty needle
termios.3
Pali Rohár [Alejandro Colomar]
SPARC architecture has 4 different Bnnn constants
Pali Rohár [Alejandro Colomar]
Add information how to set baud rate to any other value
Pali Rohár [Alejandro Colomar]
Use bold style for Bnn and EXTn macro constants
Pali Rohár [Alejandro Colomar]
Document missing baud-rate constants
tsearch.3
Michael Kerrisk
NAME: add twalk_r
wcstok.3
Jakub Wilk
Fix type mismatch in the example
proc.5
Michael Kerrisk
Add /proc/PID/projid_map, referring reader to user_namespaces(7)
Michael Kerrisk
Remove duplicated /proc/[pid]/gid_map entry
mount_namespaces.7
Michael Kerrisk
Terminology clean-up: "mount point" ==> "mount"
Many times, this page uses the terminology "mount point", where
"mount" would be better. A "mount point" is the location at which
a mount is attached. A "mount" is an association between a
filesystem and a mount point.
Michael Kerrisk
SEE ALSO: add mount_setattr(2)
namespaces.7
Štěpán Němec [Alejandro Colomar]
Fix confusion caused by text reorganization
path_resolution.7
Michael Kerrisk [Askar Safin]
Improve description of trailing slashes
See https://bugzilla.kernel.org/show_bug.cgi?id=212385
posixoptions.7
Alejandro Colomar [Alan Peakall]
Fix legacy functions list (s/getcwd/getwd/)
user_namespaces.7
Kir Kolyshkin [Alejandro Colomar]
Fix a reference to a kernel document
Michael Kerrisk [Eric W. Biederman]
Add a definition of "global root"
vdso.7
Michael Kerrisk [Christophe Leroy]
Update CLOCK_REALTIME_COARSE + CLOCK_MONOTONIC_COARSE info for powerpc
Alejandro Colomar [Christophe Leroy]
Add y2038 compliant gettime for ppc/32

View File

@ -54583,3 +54583,373 @@ signal.7
vsock.7
Alyssa Ross
ioctls are on /dev/vsock, not sockets
==================== Changes in man-pages-5.13 ====================
Released: 2021-08-27, Christchurch
Contributors
------------
The following people contributed patches/fixes or (noted in brackets
in the changelog below) reports, notes, and ideas that have been
incorporated in changes in this release:
Ahelenia Ziemiańska (наб) <nabijaczleweli@nabijaczleweli.xyz>
Alan Peakall <Alan.Peakall@helpsystems.com>
Alejandro Colomar <alx.manpages@gmail.com>
Alexis Wilke <alexis@m2osw.com>
Askar Safin <safinaskar@mail.ru>
Christian Brauner <christian.brauner@ubuntu.com>
Christophe Leroy <christophe.leroy@csgroup.eu>
Christopher Yeleighton <giecrilj@stegny.2a.pl>
Cristian Morales Vega <christian.morales.vega@gmail.com>
Dan Robertson <dan@dlrobertson.com>
Darrick J. Wong <djwong@kernel.org>
Dominique Brazziel <dbrazziel@snet.net>
EmanueleTorre <torreemanuele6@gmail.com>
Eric W. Biederman <ebiederm@xmission.com>
G. Branden Robinson <g.branden.robinson@gmail.com>
Helge Kreutzmann <debian@helgefjell.de>
Jakub Wilk <jwilk@jwilk.net>
James O. D. Hunt <jamesodhunt@gmail.com>
Jonny Grant <jg@jguk.org>
Kees Cook <keescook@chromium.org>
Kir Kolyshkin <kolyshkin@gmail.com>
Kurt Kanzenbach <kurt@linutronix.de>
kXuan <kxuanobj@gmail.com>
Michael Kerrisk <mtk.manpages@gmail.com>
Michael Weiß <michael.weiss@aisec.fraunhofer.de>
NeilBrown <neilb@suse.de>
Nora Platiel <nplatiel@gmx.us>
Pali Rohár <pali@kernel.org>
Peter Collingbourne <pcc@google.com>
Richard Palethorpe <rpalethorpe@suse.com>
Rodrigo Campos <rodrigo@kinvolk.io>
Sagar Patel <sagarmp@cs.unc.edu>
Serge E. Hallyn <serge@hallyn.com>
Sergey Petrakov <kr@spmail.info>
Stefan Kanthak <stefan.kanthak@nexgo.de>
Štěpán Němec <stepnem@gmail.com>
Thomas Gleixner <tglx@linutronix.de>
Thomas Voss <thomasavoss@protonmail.com>
Viet Than <thanhoangviet@gmail.com>
Will Manley <will@williammanley.net>
Apologies if I missed anyone!
New and rewritten pages
-----------------------
mount_setattr.2
Christian Brauner [Alejandro Colomar, Michael Kerrisk]
New manual page documenting the mount_setattr() system call
Removed Pages
-------------
getumask.3
Michael Kerrisk
This function was never implemented on Linux. It seems pointless to
retain such a page 20 years after it was written.
Newly documented interfaces in existing pages
---------------------------------------------
futex.2
Kurt Kanzenbach [Alejandro Colomar, Thomas Gleixner, Michael Kerrisk]
Document FUTEX_LOCK_PI2
ioctl_tty.2
Pali Rohár [Alejandro Colomar, Michael kerrisk]
Document ioctls: TCGETS2, TCSETS2, TCSETSW2, TCSETSF2
pidfd_open.2
Michael Kerrisk
Document PIDFD_NONBLOCK
seccomp_unotify.2
Rodrigo Campos [Alejandro Colomar]
Document SECCOMP_ADDFD_FLAG_SEND
sigaction.2
Peter Collingbourne [Alejandro Colomar, Michael Kerrisk]
Document SA_EXPOSE_TAGBITS and the flag support detection protocol
statx.2
NeilBrown
Document STATX_MNT_ID
capabilities.7
user_namespaces.7
Michael Kerrisk, Kir Kolyshkin [Alejandro Colomar]
Describe CAP_SETFCAP for mapping UID 0
mount_namespaces.7
Michael Kerrisk [Christian Brauner, Eric W. Biederman]
More clearly explain the notion of locked mounts
For a long time, this manual page has had a brief discussion of
"locked" mounts, without clearly saying what this concept is, or
why it exists. Expand the discussion with an explanation of what
locked mounts are, why mounts are locked, and some examples of the
effect of locking.
user_namespaces.7
Michael Kerrisk
Document /proc/PID/projid_map
ld.so.8
Michael Kerrisk
Document --list-tunables option added in glibc 2.33
Global changes
--------------
A few pages
Michael Kerrisk
ERRORS: correct alphabetic order
A few pages
Michael Kerrisk
Place SEE ALSO entries in correct order
A few pages
Michael Kerrisk
Arrange .SH sections in correct order
Various pages
Michael Kerrisk
Fix EBADF error description
Make the description of the EBADF error for invalid 'dirfd' more
uniform. In particular, note that the error only occurs when the
pathname is relative, and that it occurs when the 'dirfd' is
neither valid *nor* has the value AT_FDCWD.
Various pages
Michael Kerrisk
ERRORS: combine errors into a single alphabetic list
These pages split out extra errors for some APIs into a separate
list. Probably, the pages are easier to ready if all errors are
combined into a single list.
Note that there still remain a few pages where the errors are
listed separately for different APIs. For the moment, it seems
best to leave those pages as is, since the error lists are
largely distinct in those pages.
Various pages
Michael Kerrisk
Terminology clean-up: "mount point" ==> "mount"
Many times, these pages use the terminology "mount point", where
"mount" would be better. A "mount point" is the location at which
a mount is attached. A "mount" is an association between a
filesystem and a mount point.
accept.2
access.2
getpriority.2
mlock.2
Michael Kerrisk
ERRORS: combine errors into a single list
These pages split out errors into separate lists (perhaps per API,
perhaps "may" vs "shall", perhaps "Linux-specific" vs
standard(??)), but there's no good reason to do this. It makes
the error list harder to read, and is inconsistent with other
pages. So, combine the errors into a single list.
fanotify_mark.2
futimesat.2
mount_setattr.2
statx.2
symlink.2
mkfifo.3
Michael Kerrisk
Refer the reader to openat(2) for explanation of why 'dirfd' is useful
Various pages
Thomas Voss [Alejandro Colomar]
Consistently use '*argv[]'
Changes to individual pages
---------------------------
iconv.1
iconvconfig.8
Michael Kerrisk [Christopher Yeleighton]
FILES: note that files may be under /usr/lib64 rather than /lib/64
See https://bugzilla.kernel.org/show_bug.cgi?id=214163
ldd.1
Alejandro Colomar [EmanueleTorre]
Fix example command
add_key.2
keyctl.2
request_key.2
Michael Kerrisk [Dominique Brazziel]
Note that the "libkeyutils" package provides <keyutils.h>
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992377
close_range.2
Michael Kerrisk, Alejandro Colomar
Glibc 2.34 has added a close_range() wrapper
execve.2
Michael Kerrisk [Nora Platiel]
The pathname given to interpreter is not necessarily absolute
Michael Kerrisk
SEE ALSO: getauxval(3)
getauxval(3) is useful background regarding execve(2).
fanotify_mark.2
Michael Kerrisk
ERRORS: add missing EBADF error for invalid 'dirfd'
ioctl_tty.2
Pali Rohár [Alejandro Colomar]
Update DTR example
Do not include unused (and incompatible) header file termios.h and
include required header files for puts() and close() functions.
mount.2
Michael Kerrisk
ERRORS: add EPERM error for case where a mount is locked
Refer the reader to mount_namespaces(7) for details.
Michael Kerrisk
SEE ALSO: add mount_setattr(2)
open.2
Michael Kerrisk
Explicitly describe the EBADF error that can occur with openat()
In particular, specifying an invalid file descriptor number
in 'dirfd' can be used as a check that 'pathname' is absolute.
Michael Kerrisk
Clarify that openat()'s dirfd must be opened with O_RDONLY or O_PATH
Michael Kerrisk
Add mount_setattr(2) to list of 'dirfd' APIs
open_by_handle_at.2
Michael Kerrisk
ERRORS: add missing EBADF error for invalid 'dirfd'
readv2.2
Will Manley [Alejandro Colomar]
Note preadv2(..., RWF_NOWAIT) bug in BUGS section
readv.2
pipe.7
Michael Kerrisk [наб]
Make text on pipe writes more general to avoid a confusion in writev(2)
seccomp.2
Eric W. Biederman [Kees Cook]
Clarify that bad system calls kill the thread (not the process)
syscalls.2
Michael Kerrisk
Add quotactl_fd(); remove quotactl_path()
quotactl_path() was never wired up in Linux 5.13.
It was replaced instead by quotactl_fd(),
Michael Kerrisk
Add system calls that are new in 5.13
umount.2
Michael Kerrisk
ERRORS: add EINVAL for case where mount is locked
wait.2
Richard Palethorpe [Alejandro Colomar]
Add ESRCH for when pid == INT_MIN
Michael Kerrisk
ERRORS: document EAGAIN for waitid() on a PID file descriptor
getaddrinfo.3
Alejandro Colomar [Cristian Morales Vega]
Note that 'errno' is set in parallel with EAI_SYSTEM
getauxval.3
Michael Kerrisk
SEE ALSO: add execve(2)
getopt.3
James O. D. Hunt [Alejandro Colomar]
Further clarification of 'optstring'
pthread_setname_np.3
Michael Kerrisk [Alexis Wilke]
EXAMPLES: remove a bug by simplifying the code
strlen.3
wcslen.3
Michael Kerrisk [Alejandro Colomar, Jonny Grant]
Recommend alternatives where input buffer might not be null-terminated
strstr.3
Alejandro Colomar [Stefan Kanthak]
Document special case for empty needle
termios.3
Pali Rohár [Alejandro Colomar]
SPARC architecture has 4 different Bnnn constants
Pali Rohár [Alejandro Colomar]
Add information how to set baud rate to any other value
Pali Rohár [Alejandro Colomar]
Use bold style for Bnn and EXTn macro constants
Pali Rohár [Alejandro Colomar]
Document missing baud-rate constants
tsearch.3
Michael Kerrisk
NAME: add twalk_r
wcstok.3
Jakub Wilk
Fix type mismatch in the example
proc.5
Michael Kerrisk
Add /proc/PID/projid_map, referring reader to user_namespaces(7)
Michael Kerrisk
Remove duplicated /proc/[pid]/gid_map entry
mount_namespaces.7
Michael Kerrisk
Terminology clean-up: "mount point" ==> "mount"
Many times, this page uses the terminology "mount point", where
"mount" would be better. A "mount point" is the location at which
a mount is attached. A "mount" is an association between a
filesystem and a mount point.
Michael Kerrisk
SEE ALSO: add mount_setattr(2)
namespaces.7
Štěpán Němec [Alejandro Colomar]
Fix confusion caused by text reorganization
path_resolution.7
Michael Kerrisk [Askar Safin]
Improve description of trailing slashes
See https://bugzilla.kernel.org/show_bug.cgi?id=212385
posixoptions.7
Alejandro Colomar [Alan Peakall]
Fix legacy functions list (s/getcwd/getwd/)
user_namespaces.7
Kir Kolyshkin [Alejandro Colomar]
Fix a reference to a kernel document
Michael Kerrisk [Eric W. Biederman]
Add a definition of "global root"
vdso.7
Michael Kerrisk [Christophe Leroy]
Update CLOCK_REALTIME_COARSE + CLOCK_MONOTONIC_COARSE info for powerpc
Alejandro Colomar [Christophe Leroy]
Add y2038 compliant gettime for ppc/32

View File

@ -1,7 +1,7 @@
RELEASE
The Linux man page maintainer proudly announces. . .
man-pages-5.13.tar.gz - man pages for Linux
man-pages-5.14.tar.gz - man pages for Linux
Differences from the previous manual pages release are listed in
the file "Changes".

View File

@ -1,13 +1,13 @@
Begin3
Title: Section 2, 3, 4, 5 and 7 man pages for Linux
Version: 5.13
Entered-date: 2021-08-27
Version: 5.14
Entered-date: ????-??-??
Description: Linux manual pages
Keywords: man pages
Author: several
Maintained-by: Michael Kerrisk <mtk.manpages@gmail.com>
Primary-site: http://www.kernel.org/pub/linux/docs/man-pages
2825k man-pages-5.13.tar.gz
????k man-pages-5.14.tar.gz
Copying-policy: several; the pages are all freely distributable as long as
nroff source is provided
End

View File

@ -559,6 +559,7 @@ main(int argc, char *argv[])
.SH SEE ALSO
.BR fcntl (2),
.BR ftruncate (2),
.BR memfd_secret (2),
.BR mmap (2),
.BR shmget (2),
.BR shm_open (3)

156
man2/memfd_secret.2 Normal file
View File

@ -0,0 +1,156 @@
.\" Copyright (c) 2021, IBM Corporation.
.\" Written by Mike Rapoport <rppt@linux.ibm.com>
.\"
.\" Based on memfd_create(2) man page
.\" Copyright (C) 2014 Michael Kerrisk <mtk.manpages@gmail.com>
.\" and Copyright (C) 2014 David Herrmann <dh.herrmann@gmail.com>
.\"
.\" %%%LICENSE_START(GPLv2+)
.\"
.\" This program is free software; you can redistribute it and/or modify
.\" it under the terms of the GNU General Public License as published by
.\" the Free Software Foundation; either version 2 of the License, or
.\" (at your option) any later version.
.\"
.\" This program is distributed in the hope that it will be useful,
.\" but WITHOUT ANY WARRANTY; without even the implied warranty of
.\" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
.\" GNU General Public License for more details.
.\"
.\" You should have received a copy of the GNU General Public
.\" License along with this manual; if not, see
.\" <http://www.gnu.org/licenses/>.
.\" %%%LICENSE_END
.\"
.TH MEMFD_SECRET 2 2020-08-02 Linux "Linux Programmer's Manual"
.SH NAME
memfd_secret \- create an anonymous RAM-based file
to access secret memory regions
.SH SYNOPSIS
.nf
.PP
.BR "#include <sys/syscall.h>" " /* Definition of " SYS_* " constants */"
.B #include <unistd.h>
.PP
.BI "int syscall(SYS_memfd_secret, unsigned int " flags );
.fi
.PP
.IR Note :
glibc provides no wrapper for
.BR memfd_secret (),
necessitating the use of
.BR syscall (2).
.SH DESCRIPTION
.BR memfd_secret ()
creates an anonymous RAM-based file and returns a file descriptor
that refers to it.
The file provides a way to create and access memory regions
with stronger protection than usual RAM-based files and
anonymous memory mappings.
Once all open references to the file are closed,
it is automatically released.
The initial size of the file is set to 0.
Following the call, the file size should be set using
.BR ftruncate (2).
.PP
The memory areas backing the file created with
.BR memfd_secret (2)
are visible only to the processes that have access to the file descriptor.
The memory region is removed from the kernel page tables
and only the page tables of the processes holding the file descriptor
map the corresponding physical memory.
(Thus, the pages in the region can't be accessed by the kernel itself,
so that, for example, pointers to the region can't be passed to
system calls.)
.PP
The following values may be bitwise ORed in
.I flags
to control the behavior of
.BR memfd_secret ():
.TP
.B FD_CLOEXEC
Set the close-on-exec flag on the new file descriptor,
which causes the region to be removed from the process on
.BR execve (2).
See the description of the
.B O_CLOEXEC
flag in
.BR open (2)
.PP
As its return value,
.BR memfd_secret ()
returns a new file descriptor that refers to an anonymous file.
This file descriptor is opened for both reading and writing
.RB ( O_RDWR )
and
.B O_LARGEFILE
is set for the file descriptor.
.PP
With respect to
.BR fork (2)
and
.BR execve (2),
the usual semantics apply for the file descriptor created by
.BR memfd_secret ().
A copy of the file descriptor is inherited by the child produced by
.BR fork (2)
and refers to the same file.
The file descriptor is preserved across
.BR execve (2),
unless the close-on-exec flag has been set.
.PP
The memory region is locked into memory in the same way as with
.BR mlock (2),
so that it will never be written into swap.
However the implementation of
.BR memfd_secret ()
will not try to populate the whole range during the
.BR mmap (2)
call that attaches the region into the process's address space;
instead, the pages are only actually allocated
as they are faulted in.
The amount of memory allowed for memory mappings
of the file descriptor obeys the same rules as
.BR mlock (2)
and cannot exceed
.BR RLIMIT_MEMLOCK .
.SH RETURN VALUE
On success,
.BR memfd_secret ()
returns a new file descriptor.
On error, \-1 is returned and
.I errno
is set to indicate the error.
.SH ERRORS
.TP
.B EINVAL
.I flags
included unknown bits.
.TP
.B EMFILE
The per-process limit on the number of open file descriptors has been reached.
.TP
.B EMFILE
The system-wide limit on the total number of open files has been reached.
.TP
.B ENOMEM
There was insufficient memory to create a new anonymous file.
.TP
.B ENOSYS
.BR memfd_secret ()
is not implemented on this architecture.
.SH VERSIONS
The
.BR memfd_secret ()
system call first appeared in Linux 5.14.
.SH CONFORMING TO
The
.BR memfd_secret ()
system call is Linux-specific.
.SH SEE ALSO
.BR fcntl (2),
.BR ftruncate (2),
.BR mlock (2),
.BR memfd_create (2),
.BR mmap (2),
.BR setrlimit (2)

View File

@ -149,7 +149,7 @@ into a 2.4.x release after 2.4.15.
When this is so, the version where the system call appeared
in both of the major kernel series is listed.
.PP
The list of system calls that are available as at kernel 5.11
The list of system calls that are available as at kernel 5.14
(or in a few cases only on older kernels) is as follows:
.\"
.\" Looking at scripts/checksyscalls.sh in the kernel source is
@ -442,6 +442,7 @@ T}
.\" bb6fb6dfcc17cddac11ac295861f7608194447a7
\fBmembarrier\fP(2) 3.17
\fBmemfd_create\fP(2) 3.17
\fBmemfd_secret\fP(2) 5.14
\fBmigrate_pages\fP(2) 2.6.16
\fBmincore\fP(2) 2.4
\fBmkdir\fP(2) 1.0