Changes

195 bytes added ,  12:38, 9 July 2013
Added potential security hole
Line 25: Line 25:  
# Paths are better to be transferred as opened files (SCM_CREDS)
 
# Paths are better to be transferred as opened files (SCM_CREDS)
 
# Waiting for socket to get closed by CRIU is good way to wait for checkpoint to complete. In this case CRIU should close the socket after freeze, but before dump to properly dump the half-closed connection in the program.
 
# Waiting for socket to get closed by CRIU is good way to wait for checkpoint to complete. In this case CRIU should close the socket after freeze, but before dump to properly dump the half-closed connection in the program.
 +
# What if applications runs another one and asks to dump itself with kids? In this case the app in question would be able to investigate its sub-task's guts, which would otherwise be impossible.