criu/arch
Sophie Blee-Goldman e606c2141e Dump capabilities from the parasite
Needed for future user namespace support. Capabilities will have to be
dumped from the parasite, ie from inside the namespace since there is no
obvious way to 'translate' capabilities from the global namespace (unlike
with uids and gids, where the id mappings can be used for translation).

[ additional explanation from Andrew Vagin:

"capabilities" are not translated between namespaces. They can exist
only in one userns, where a process lives. If a process is created in a
new userns, it gets a full set of capabilities in this userns, and
loses all caps in a parent userns.

So if capabilities are not shown in /proc/pid/stat, we have no way to
get it except of using parasite code. ]

Signed-off-by: Sophie Blee-Goldman <ableegoldman@google.com>
Acked-by: Andrew Vagin <avagin@parallels.com>
Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2014-08-15 23:10:44 +04:00
..
aarch64 vdso: aarch64 -- Merge fixes from x86 2014-08-07 10:23:02 +04:00
arm Dump capabilities from the parasite 2014-08-15 23:10:44 +04:00
scripts/arm arm: prepare syscall table generation scripts to be shared with AArch64 2014-03-11 22:46:06 +04:00
x86 Dump capabilities from the parasite 2014-08-15 23:10:44 +04:00