[CRIU] CRIU needs root privileges?

[Eliot Moss]

On 10/29/2019 12:19 PM, Adrian Reber wrote:
> On Mon, Oct 28, 2019 at 10:38:42PM -0400, Eliot Moss wrote:
>>
>> If you go back through recent posts, you'll see that as part of one question,
>> I also asked about whether CRIU should need to be run as root.  In my tests,
>> it could not take a checkpoint if I did not use sudo.
>>
>> Should that be the case?  Or is it something about my jobs?
> 
> As far as I remember there has been an effort to run CRIU as non-root,
> but currently you need to run CRIU as root. There are definitely still
> some things missing in the kernel to have CRIU run as non-root.
> 
>> Also, are there risks to setting up CRIU as setuid-to-root?
> 
> There are always risks running anything as setuid ;)

Thank you, Adrian!

Yes, there are always risks - I should perhaps rephrase.  Is it
considered appropriate by the developer / user community of CRIU
that it should (currently) be setup as setuid root, or should we
insure that programs/users invoking CRIU have sudo privileges?

Regards - Eliot