[CRIU] [PATCH]v2 security: set suid flag on crtools and check real uid on dump/restore
Pavel Emelyanov
xemul at parallels.com
Wed Oct 2 06:11:46 PDT 2013
On 10/02/2013 08:52 PM, Ruslan Kuprieiev wrote:
> On 02.10.2013 17:00, Ruslan Kuprieiev wrote:
>> Hi!
>>
>> Lets set suid flag on crtools, so non-root users could dump/restore
>> their own tasks and start service for their own tasks. On start criu
>> will get it's real uid and will allow user to dump/restore only tasks
>> that he own.
>>
>> Signed-off-by: Ruslan Kuprieiev <kupruser at gmail.com>
> v2: remove redundant functions and variables.
>
> Signed-off-by: Ruslan Kuprieiev <kupruser at gmail.com>
>
applied, but w/o Makefile hunk -- packagers should put permissions themselves.
More information about the CRIU
mailing list