85 lines
3.4 KiB
Plaintext
85 lines
3.4 KiB
Plaintext
|
File Locking Release Notes
|
||
|
|
|
||
|
|
Andy Walker <andy@lysaker.kvaerner.no>
|
||
|
|
|
||
|
|
12 May 1997
|
||
|
|
|
||
|
|
|
||
|
|
1. What's New?
|
||
|
|
--------------
|
||
|
|
|
||
|
|
1.1 Broken Flock Emulation
|
||
|
|
--------------------------
|
||
|
|
|
||
|
|
The old flock(2) emulation in the kernel was swapped for proper BSD
|
||
|
|
compatible flock(2) support in the 1.3.x series of kernels. With the
|
||
|
|
release of the 2.1.x kernel series, support for the old emulation has
|
||
|
|
been totally removed, so that we don't need to carry this baggage
|
||
|
|
forever.
|
||
|
|
|
||
|
|
This should not cause problems for anybody, since everybody using a
|
||
|
|
2.1.x kernel should have updated their C library to a suitable version
|
||
|
|
anyway (see the file "Documentation/Changes".)
|
||
|
|
|
||
|
|
1.2 Allow Mixed Locks Again
|
||
|
|
---------------------------
|
||
|
|
|
||
|
|
1.2.1 Typical Problems - Sendmail
|
||
|
|
---------------------------------
|
||
|
|
Because sendmail was unable to use the old flock() emulation, many sendmail
|
||
|
|
installations use fcntl() instead of flock(). This is true of Slackware 3.0
|
||
|
|
for example. This gave rise to some other subtle problems if sendmail was
|
||
|
|
configured to rebuild the alias file. Sendmail tried to lock the aliases.dir
|
||
|
|
file with fcntl() at the same time as the GDBM routines tried to lock this
|
||
|
|
file with flock(). With pre 1.3.96 kernels this could result in deadlocks that,
|
||
|
|
over time, or under a very heavy mail load, would eventually cause the kernel
|
||
|
|
to lock solid with deadlocked processes.
|
||
|
|
|
||
|
|
|
||
|
|
1.2.2 The Solution
|
||
|
|
------------------
|
||
|
|
The solution I have chosen, after much experimentation and discussion,
|
||
|
|
is to make flock() and fcntl() locks oblivious to each other. Both can
|
||
|
|
exists, and neither will have any effect on the other.
|
||
|
|
|
||
|
|
I wanted the two lock styles to be cooperative, but there were so many
|
||
|
|
race and deadlock conditions that the current solution was the only
|
||
|
|
practical one. It puts us in the same position as, for example, SunOS
|
||
|
|
4.1.x and several other commercial Unices. The only OS's that support
|
||
|
|
cooperative flock()/fcntl() are those that emulate flock() using
|
||
|
|
fcntl(), with all the problems that implies.
|
||
|
|
|
||
|
|
|
||
|
|
1.3 Mandatory Locking As A Mount Option
|
||
|
|
---------------------------------------
|
||
|
|
|
||
|
|
Mandatory locking, as described in 'Documentation/mandatory.txt' was prior
|
||
|
|
to this release a general configuration option that was valid for all
|
||
|
|
mounted filesystems. This had a number of inherent dangers, not the least
|
||
|
|
of which was the ability to freeze an NFS server by asking it to read a
|
||
|
|
file for which a mandatory lock existed.
|
||
|
|
|
||
|
|
From this release of the kernel, mandatory locking can be turned on and off
|
||
|
|
on a per-filesystem basis, using the mount options 'mand' and 'nomand'.
|
||
|
|
The default is to disallow mandatory locking. The intention is that
|
||
|
|
mandatory locking only be enabled on a local filesystem as the specific need
|
||
|
|
arises.
|
||
|
|
|
||
|
|
Until an updated version of mount(8) becomes available you may have to apply
|
||
|
|
this patch to the mount sources (based on the version distributed with Rick
|
||
|
|
Faith's util-linux-2.5 package):
|
||
|
|
|
||
|
|
*** mount.c.orig Sat Jun 8 09:14:31 1996
|
||
|
|
--- mount.c Sat Jun 8 09:13:02 1996
|
||
|
|
***************
|
||
|
|
*** 100,105 ****
|
||
|
|
--- 100,107 ----
|
||
|
|
{ "noauto", 0, MS_NOAUTO }, /* Can only be mounted explicitly */
|
||
|
|
{ "user", 0, MS_USER }, /* Allow ordinary user to mount */
|
||
|
|
{ "nouser", 1, MS_USER }, /* Forbid ordinary user to mount */
|
||
|
|
+ { "mand", 0, MS_MANDLOCK }, /* Allow mandatory locks on this FS */
|
||
|
|
+ { "nomand", 1, MS_MANDLOCK }, /* Forbid mandatory locks on this FS */
|
||
|
|
/* add new options here */
|
||
|
|
#ifdef MS_NOSUB
|
||
|
|
{ "sub", 1, MS_NOSUB }, /* allow submounts */
|