Line 7:
Line 7:
* criu restore works in a new userns only if setgroups is set to "allow"
* criu restore works in a new userns only if setgroups is set to "allow"
pie: 235: Error (criu/pie/restorer.c:172): Can't setup supplementary groups
pie: 235: Error (criu/pie/restorer.c:172): Can't setup supplementary groups
+
* PTRACE_O_SUSPEND_SECCOMP and PTRACE_SECCOMP_GET_FILTER require the root CAP_SYS_ADMIN (ptrace_setoptions)
{{FIXME|describe checkpoint/restore as an unprivileged (non-root) user.}}
{{FIXME|describe checkpoint/restore as an unprivileged (non-root) user.}}