[CRIU] [PATCH]v2 security: set suid flag on crtools and check real uid on dump/restore

Pavel Emelyanov xemul at parallels.com
Wed Oct 2 06:11:46 PDT 2013


On 10/02/2013 08:52 PM, Ruslan Kuprieiev wrote:
> On 02.10.2013 17:00, Ruslan Kuprieiev wrote:
>> Hi!
>>
>> Lets set suid flag on crtools, so non-root users could dump/restore 
>> their own tasks and start service for their own tasks. On start criu 
>> will get it's real uid and will allow user to dump/restore only tasks 
>> that he own.
>>
>> Signed-off-by: Ruslan Kuprieiev <kupruser at gmail.com>
> v2: remove redundant functions and variables.
> 
> Signed-off-by: Ruslan Kuprieiev <kupruser at gmail.com>
> 


applied, but w/o Makefile hunk -- packagers should put permissions themselves.


More information about the CRIU mailing list