2,257
edits
Changes
Jump to navigation
Jump to search
Line 25:
Line 25: +
Added potential security hole
# Paths are better to be transferred as opened files (SCM_CREDS)
# Paths are better to be transferred as opened files (SCM_CREDS)
# Waiting for socket to get closed by CRIU is good way to wait for checkpoint to complete. In this case CRIU should close the socket after freeze, but before dump to properly dump the half-closed connection in the program.
# Waiting for socket to get closed by CRIU is good way to wait for checkpoint to complete. In this case CRIU should close the socket after freeze, but before dump to properly dump the half-closed connection in the program.
# What if applications runs another one and asks to dump itself with kids? In this case the app in question would be able to investigate its sub-task's guts, which would otherwise be impossible.