mirror of
https://github.com/checkpoint-restore/criu.git
synced 2026-07-23 18:19:39 +00:00
beb158a66e
Dumping is simple. All but secbits can be read from proc, secbits are got from parasite. Restoring is a bit tricky -- when you change anything on kernel cred's struct it performs sophisticated checks and can change some more stuff than requested, so the creds restoration procedure is carefully commented step-by-step. Another thing to mention is that creds are restored after everything else, i.e. right before performing final threads sync and sigreturns. This is done to avoid potential problems with insufficient caps for restoring other stuff (e.g. CAP_DAC_OVERRIDE or zero euid is most likely required for opening any image file and the notorious control /proc/sys/kernel/ns_last_pid, which in turn is performed till the very last moment). Signed-off-by: Pavel Emelyanov <xemul@parallels.com> Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> |
||
|---|---|---|
| .. | ||
| atomic.h | ||
| bitops.h | ||
| compiler.h | ||
| crtools.h | ||
| files.h | ||
| image.h | ||
| inet_diag.h | ||
| libnetlink.h | ||
| list.h | ||
| lock.h | ||
| log.h | ||
| namespaces.h | ||
| parasite-syscall.h | ||
| parasite.h | ||
| proc_parse.h | ||
| ptrace.h | ||
| restorer-log.h | ||
| restorer.h | ||
| sockets.h | ||
| syscall-codes.h | ||
| syscall.h | ||
| types.h | ||
| unix_diag.h | ||
| util.h | ||