Mirrors/criu
1
0
Fork 0
mirror of https://github.com/checkpoint-restore/criu.git synced 2026-08-04 15:53:44 +00:00
Code Issues Projects Releases Wiki Activity

seccomp/restorer: Disable gtod from vdso in strict mode

Browse source 
Signed-off-by: Dmitry Safonov <dima@arista.com>
Signed-off-by: Andrei Vagin <avagin@gmail.com>
This commit is contained in:
Dmitry Safonov 2019-07-25 23:01:12 +01:00 • committed by Andrei Vagin
parent 90ecb82202
commit 23960fe60e
1 changed files with 17 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

17
criu/pie/restorer.c
View file

@ -476,6 +476,23 @@ static int restore_seccomp(struct thread_restore_args *args)
return 0;
break;
case SECCOMP_MODE_STRICT:
/*
* Disable gettimeofday() from vdso: it may use TSC
* which is restricted by kernel:
*
* static long seccomp_set_mode_strict(void)
* {
* [..]
* #ifdef TIF_NOTSC
* disable_TSC();
* #endif
* [..]
*
* XXX: It may need to be fixed in kernel under
* PTRACE_O_SUSPEND_SECCOMP, but for now just get timings
* with a raw syscall instead of vdso.
*/
std_log_set_gettimeofday(NULL);
ret = sys_prctl(PR_SET_SECCOMP, SECCOMP_MODE_STRICT, 0, 0, 0);
if (ret < 0) {
pr_err("seccomp: SECCOMP_MODE_STRICT returned %d on tid %d\n",