Mirrors/criu
1
0
Fork 0
mirror of https://github.com/checkpoint-restore/criu.git synced 2026-07-21 01:06:58 +00:00
Code Issues Projects Releases Wiki Activity

Allow passing ps-socket file descriptor when launching criu.

Browse source 
This makes it possible to have the pageserver communication go over anonymous
unix sockets, e.g. created by socketpair().

Such setup makes it easier to secure pageserver connection by wrapping
it in an encrypted tunnel. It also helps prevent attacks where
a malicious process connects to page server and injects its own
stream of pages to either fool criu into restoring wrong pages or
to DoS the pageserver by having it exhaust local storage by writing
large .img files.

Signed-off-by: Pawel Stradomski <pstradomski@google.com>
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
This commit is contained in:
Pawel Stradomski 2018-06-13 12:27:37 +02:00 • committed by Pavel Emelyanov
parent 339446a7cc
commit 2e236dcf10
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
criu/crtools.c
View file

@ -311,6 +311,7 @@ int main(int argc, char *argv[], char *envp[])
{ "status-fd", required_argument, 0, 1088 },
BOOL_OPT(SK_CLOSE_PARAM, &opts.tcp_close),
{ "verbosity", optional_argument, 0, 'v' },
{ "ps-socket", required_argument, 0, 1091},
{ },
};
@ -615,6 +616,9 @@ int main(int argc, char *argv[], char *envp[])
return 1;
}
break;
case 1091:
opts.ps_socket = atoi(optarg);
break;
case 'V':
pr_msg("Version: %s\n", CRIU_VERSION);
if (strcmp(CRIU_GITID, "0"))