[CRIU] [RFC] compel: mprotect() parasite's .text from writes

Cyrill Gorcunov gorcunov at gmail.com
Fri Jan 27 09:18:06 PST 2017


On Fri, Jan 27, 2017 at 07:35:35PM +0300, Dmitry Safonov wrote:
> Make parasite's .text section rx and data section rw.
> That'll make parasite more resistant to corruptions.
> 
> For RFC sending version that always protects parasite,
> the overhead is added by mprotect() syscall.
> I can make a new infect-flag if this is too much for
> the default case.
> 
> Cc: Cyrill Gorcunov <gorcunov at openvz.org>
> Cc: Laurent Dufour <ldufour at linux.vnet.ibm.com>
> Signed-off-by: Dmitry Safonov <dsafonov at virtuozzo.com>

I like the idea. If it passes tests this would be just great.


More information about the CRIU mailing list