[CRIU] [PATCH 02/27] seccomp: Fetch seccomp flags if kernel provides

Cyrill Gorcunov gorcunov at gmail.com
Thu Mar 1 17:24:58 MSK 2018


On Thu, Mar 01, 2018 at 02:18:40PM +0000, Dmitry Safonov wrote:
> Hi Cyrill,
> 
> 
> Should we possibly introduce kdat feature for SECCOMP_GET_METADATA?
> That will reflect the usual policy for kernel features and have two pros:
> 1. We will not make unneeded ptrace() syscalls on pre-v4.16 kernel that
> don't support this kind of request.
> 2. Someone interested may check it with `criu check --feature <...>`
> 
> I don't mind, but it looks to me that we better have the same policy applied
> for all new kernel features, having them in kdat..

Yes, I though of making it on top of the series. Together with new kcmp(FILTER)
or something which would allow us to drop memcmp completely.

	Cyrill


More information about the CRIU mailing list