[CRIU] [PATCH 8/9] seccomp: Dont forget to suspend filtering on threads

[Dmitry Safonov]

2018-04-26 21:14 GMT+01:00 Cyrill Gorcunov <gorcunov at gmail.com>:
> When considering if we to call PTRACE_O_SUSPEND_SECCOMP
> on the tid we should take into account if there at least
> one thread which has seccomp mode enabled, otherwise
> we might miss filter suspension and restore procedure
> might break due to own criu syscall get filtered out.
>
> Same time we should move seccomp restore for threads
> to take place after CR_STATE_RESTORE_SIGCHLD state
> so that main criu code will attach to threads and
> setup seccomp suspension flag before we start
> restoring the filters.
>
> Reported-by: Andrei Vagin <avagin at virtuozzo.com>
> Signed-off-by: Cyrill Gorcunov <gorcunov at gmail.com>

Reviewed-by: Dmitry Safonov <0x7f454c46 at gmail.com>

-- 
             Dima