<div dir="ltr"><div class="gmail_extra"><div><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><br></div></div></div></div></div></div></div></div><div class="gmail_quote">2015-12-22 15:19 GMT+01:00 Cyrill Gorcunov <span dir="ltr"><<a href="mailto:gorcunov@gmail.com" target="_blank">gorcunov@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span>On Tue, Dec 22, 2015 at 03:14:33PM +0100, Federico Reghenzani wrote:<br>
> I added the re-mounting of /proc and it works! It seems the restore is<br>
> always successful now. I will (try to) integrate this in C API in next<br>
> days :)<br>
> Last question, but I think I know already the answer, with unshare it<br>
> becomes impossible to c/r without root permission, right?<br>
<br>
</span>Congrats!<br>
<br>
Actually the reason for gaining root permissions is a bit different,<br>
there are few limits in the kernel where admin rights needed to adjust<br>
various parameters inaccessible otherwise (we're working on dropping<br>
off this requirement).<br>
<span><font color="#888888"><br>
Cyrill<br>
</font></span></blockquote></div><br></div><div class="gmail_extra">But we need at least CAP_SYS_ADMIN capability to call the <i>unshare.</i></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra">Federico <br></div></div>