mirror of
https://github.com/checkpoint-restore/criu.git
synced 2026-01-23 02:14:37 +00:00
8d992a680e
Support for apparmor namespaces and stacking is coming to Ubuntu kernels in 16.10, and should hopefully be upstreamed Soon (TM) :). The basic idea is similar to how cgroups are done: we can restore the apparmor namespace and profile blobs independently of the tasks, and then at the end we can just set the task's label appropriately. This means the code that moves tasks under a label stays the same, and the only new code is the stuff that dumps and restores the policy blobs that are in the namespace that were loaded by the container. Signed-off-by: Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
27 lines
590 B
Protocol Buffer
27 lines
590 B
Protocol Buffer
// SPDX-License-Identifier: MIT
|
|
|
|
syntax = "proto2";
|
|
|
|
message creds_entry {
|
|
required uint32 uid = 1;
|
|
required uint32 gid = 2;
|
|
required uint32 euid = 3;
|
|
required uint32 egid = 4;
|
|
required uint32 suid = 5;
|
|
required uint32 sgid = 6;
|
|
required uint32 fsuid = 7;
|
|
required uint32 fsgid = 8;
|
|
|
|
repeated uint32 cap_inh = 9;
|
|
repeated uint32 cap_prm = 10;
|
|
repeated uint32 cap_eff = 11;
|
|
repeated uint32 cap_bnd = 12;
|
|
|
|
required uint32 secbits = 13;
|
|
|
|
repeated uint32 groups = 14;
|
|
|
|
optional string lsm_profile = 15;
|
|
optional string lsm_sockcreate = 16;
|
|
optional bytes apparmor_data = 17;
|
|
}
|