mirror of
https://github.com/checkpoint-restore/criu.git
synced 2026-07-19 17:43:59 +00:00
ada4664429
This makes only root to be able to modify images by default. When using criu with suid bit set, group of the images is set to user group, which is not safe, considering current CR_FD_PERM. Signed-off-by: Ruslan Kuprieiev <kupruser@gmail.com> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
33 lines
891 B
C
33 lines
891 B
C
#ifndef __CR_CRTOOLS_H__
|
|
#define __CR_CRTOOLS_H__
|
|
|
|
#include <sys/types.h>
|
|
|
|
#include "list.h"
|
|
#include "asm/types.h"
|
|
#include "servicefd.h"
|
|
|
|
#define CR_FD_PERM (S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH)
|
|
|
|
extern int check_img_inventory(void);
|
|
extern int write_img_inventory(void);
|
|
extern void kill_inventory(void);
|
|
|
|
#define LAST_PID_PATH "sys/kernel/ns_last_pid"
|
|
|
|
extern int cr_dump_tasks(pid_t pid);
|
|
extern int cr_pre_dump_tasks(pid_t pid);
|
|
extern int cr_restore_tasks(void);
|
|
extern int cr_show(int pid);
|
|
extern int convert_to_elf(char *elf_path, int fd_core);
|
|
extern int cr_check(void);
|
|
extern int cr_exec(int pid, char **opts);
|
|
extern int cr_dedup(void);
|
|
|
|
extern int restrict_uid(unsigned int uid, unsigned int gid);
|
|
struct proc_status_creds;
|
|
extern bool may_dump(struct proc_status_creds *);
|
|
struct _CredsEntry;
|
|
extern bool may_restore(struct _CredsEntry *);
|
|
|
|
#endif /* __CR_CRTOOLS_H__ */
|