[CRIU] [PATCH] seccomp: add a --no-seccomp option to disable dumping seccomp
Pavel Emelyanov
xemul at virtuozzo.com
Wed Feb 17 06:41:28 PST 2016
On 02/17/2016 05:15 PM, Tycho Andersen wrote:
> On Wed, Feb 17, 2016 at 01:48:37PM +0300, Pavel Emelyanov wrote:
>> Applied.
>>
>> Am I right, that the current behavior of criu is -- no seccomp configured
>> on a process means no attempt to dump one is performed?
>
> I think so, just to restate: if no seccomp is configured on the
> process than no attempt to dump the /seccomp/ stuff is made (since
> there's nothing to dump). The task itself is still dumped as usual.
OK :) Then Saied is potentially doing a dangerous thing with this option :)
since tasks will be restored without seccomp stuff configured in.
-- Pavel
More information about the CRIU
mailing list