[CRIU] [PATCH 19/28] seccomp: Add restore of per-thread filters
Cyrill Gorcunov
gorcunov at gmail.com
Fri Mar 23 10:01:27 MSK 2018
On Thu, Mar 22, 2018 at 03:13:24PM -0700, Andrey Vagin wrote:
> On Wed, Mar 21, 2018 at 12:43:04AM +0300, Cyrill Gorcunov wrote:
> > From: Cyrill Gorcunov <gorcunov at virtuozzo.com>
> >
> > https://jira.sw.ru/browse/PSBM-78762
> >
> > Signed-off-by: Cyrill Gorcunov <gorcunov at virtuozzo.com>
> > ---
> > criu/cr-restore.c | 10 ++--
> > criu/include/restorer.h | 15 ++++-
> > criu/include/seccomp.h | 9 ++-
> > criu/pie/restorer.c | 106 +++++++++++++++++++++-------------
> > criu/seccomp.c | 149 ++++++++++++++++++++++++++++++++++--------------
> > 5 files changed, 195 insertions(+), 94 deletions(-)
>
>
> 200 lines of code!!! Pls, write what is going on here in a commit
> message.
Mmmm, actually there is not that much I can put into a message :)
Simply because I didn't do somthing new here in code but rather
move syscall from per-task to per-thread place. Maybe something like this?
---
Currently all threads are inheriting filters from the group leader
via SECCOMP_FILTER_FLAG_TSYNC but we already prepared dumper to
carry filters on per-thread basis in core*.img files. Thus to
make per-thread restore of seccomp filters we drop old
SECCOMP_FILTER_FLAG_TSYNC call and make each thread to restore
own chain from the image.
More information about the CRIU
mailing list