[CRIU] [PATCH 19/28] seccomp: Add restore of per-thread filters

Cyrill Gorcunov gorcunov at gmail.com
Fri Mar 23 10:01:27 MSK 2018


On Thu, Mar 22, 2018 at 03:13:24PM -0700, Andrey Vagin wrote:
> On Wed, Mar 21, 2018 at 12:43:04AM +0300, Cyrill Gorcunov wrote:
> > From: Cyrill Gorcunov <gorcunov at virtuozzo.com>
> > 
> > https://jira.sw.ru/browse/PSBM-78762
> > 
> > Signed-off-by: Cyrill Gorcunov <gorcunov at virtuozzo.com>
> > ---
> >  criu/cr-restore.c       |  10 ++--
> >  criu/include/restorer.h |  15 ++++-
> >  criu/include/seccomp.h  |   9 ++-
> >  criu/pie/restorer.c     | 106 +++++++++++++++++++++-------------
> >  criu/seccomp.c          | 149 ++++++++++++++++++++++++++++++++++--------------
> >  5 files changed, 195 insertions(+), 94 deletions(-)
> 
> 
> 200 lines of code!!! Pls, write what is going on here in a commit
> message.

Mmmm, actually there is not that much I can put into a message :)
Simply because I didn't do somthing new here in code but rather
move syscall from per-task to per-thread place. Maybe something like this?
---

Currently all threads are inheriting filters from the group leader
via SECCOMP_FILTER_FLAG_TSYNC but we already prepared dumper to
carry filters on per-thread basis in core*.img files. Thus to
make per-thread restore of seccomp filters we drop old
SECCOMP_FILTER_FLAG_TSYNC call and make each thread to restore
own chain from the image.


More information about the CRIU mailing list