Line 110:
Line 110:
In the latter case, the following security restrictions would apply:
In the latter case, the following security restrictions would apply:
* criu will refuse to dump or restore processes whose <code>[se]?[ug]id</code> is not equal to the corresponding value of the calling user
* criu will refuse to dump or restore processes whose <code>[se]?[ug]id</code> is not equal to the corresponding value of the calling user
+
* criu will refuse to dump or restore any bits set in any capability set
== Further reading ==
== Further reading ==