mirror of
https://github.com/checkpoint-restore/criu.git
synced 2026-07-22 17:49:13 +00:00
2b268c6c21
Currently, we only check if process gids match primary gid of user.
But process and user have additional groups too. So lets:
1) check that process rgid,egid and sgid are in the user's grouplist.
2) on restore check that user has all groups from the images.
Signed-off-by: Ruslan Kuprieiev <kupruser@gmail.com>
Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
33 lines
901 B
C
33 lines
901 B
C
#ifndef __CR_CRTOOLS_H__
|
|
#define __CR_CRTOOLS_H__
|
|
|
|
#include <sys/types.h>
|
|
|
|
#include "list.h"
|
|
#include "asm/types.h"
|
|
#include "servicefd.h"
|
|
|
|
#define CR_FD_PERM (S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH)
|
|
|
|
extern int check_img_inventory(void);
|
|
extern int write_img_inventory(void);
|
|
extern void kill_inventory(void);
|
|
|
|
#define LAST_PID_PATH "sys/kernel/ns_last_pid"
|
|
|
|
extern int cr_dump_tasks(pid_t pid);
|
|
extern int cr_pre_dump_tasks(pid_t pid);
|
|
extern int cr_restore_tasks(void);
|
|
extern int cr_show(int pid);
|
|
extern int convert_to_elf(char *elf_path, int fd_core);
|
|
extern int cr_check(void);
|
|
extern int cr_exec(int pid, char **opts);
|
|
extern int cr_dedup(void);
|
|
|
|
extern int restrict_uid(unsigned int uid, unsigned int gid);
|
|
struct proc_status_creds;
|
|
extern bool may_dump(struct proc_status_creds *);
|
|
struct _CredsEntry;
|
|
extern bool may_restore(struct _CredsEntry *);
|
|
|
|
#endif /* __CR_CRTOOLS_H__ */
|