[CRIU] [PATCH RESEND v3 1/4] lazy-pages: use abstract UNIX socket

Pavel Emelyanov xemul at virtuozzo.com
Fri Nov 4 11:01:49 PDT 2016


On 11/04/2016 06:08 PM, Mike Rapoport wrote:
> From: Andrei Vagin <avagin at virtuozzo.com>
> 
> Replace file-system based UNIX socket name with abstract. This ensures we
> won't run into problems with invalid socket names.
> 
> v2: fix compilation on arm
> 
> Signed-off-by: Andrei Vagin <avagin at virtuozzo.com>
> Acked-by: Mike Rapoport <rppt at linux.vnet.ibm.com>

Anon unix sockets allow for anyone to connect to uffd and drain some
other process' memory :( File-bound sockets can be guarded by setting
permissions on the work dir (where the uffdd socket sits).

-- Pavel



More information about the CRIU mailing list