On Tue, Jun 03, 2008 at 02:16:33PM +0200, Miklos Szeredi wrote:
There's not much left to do, actually... FWIW, solution goes like this:
* introduce structure on the classes of sysctls
(currently - root and per-network-namespace). Namely "X is parent of Y",
with "if task T sees Y, it also sees X" as defining property.
* when adding a sysctl table, find a "parent" one. Which is to say,
find the deepest node on its stem that already is present in one of the
tables from our class or its ancestor classes. That table will be our
parent and that node in it - attachment point.
* delay freeing the table headers; have them refcounted and instead
of unconditionally freeing the sucker on unregistration just drop the refcount.
Now we can keep a pair (reference to header, pointer to ctl table entry)
as long as we hold refcount on header. It won't affect unregistration
in any way. And at any point we can try to acquire "active" (use) reference
to header. If that succeeds, we know that
+ unregistration hadn't been started
+ unregistration won't be finished until we unuse the sucker
+ table entry is alive and will stay alive until then.
So we can hold references to those puppies from inodes under /proc/sys
without blocking unregistration, etc.
What's more, we can associate such pair with each node in sysctl tree.
For non-directories that's obvious. For directories, take the tree such
that directory belongs to tree \setminus parent of tree.
That's pretty much it. Filesystem side is simple - we keep a pointer to
class of tree responsible for a node (see directly above) in dentry.
And ->d_compare() checks that class of candidate match should be visible
for task doing the lookup. ->lookup() tries finding an entry with requested
name in sysctl table (found by directory inode) and in case of miss it goes
through the list of tables attached at that node, searching in those that
ought to be visible to us.
As the result, we have direct access to sysctl table entry right from inode,
maintain these references accross lookups without going through the contortions
done by current code and we do *NOT* use the same dentry for flipping between
unrelated sysctl nodes with different visibility...
--
