mir/criu
2
0
Fork 0
mirror of https://github.com/checkpoint-restore/criu synced 2025-08-23 02:17:22 +00:00
Code Issues Releases Wiki Activity
criu/include/crtools.h

35 lines
926 B
C
Raw Normal View History

hdrs: Fixup reinclusion preprocessor constants Make them look like __CR_<smth>_H__ with sed -e '1,2s/#\(ifndef\|define\) _\?_\?\(CR_\)\?/#\1 __CR_/' -e '1,2s/_H_\?_\?.*$/_H__/' on every header file. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2012-12-24 15:36:14 +04:00
#ifndef __CR_CRTOOLS_H__
#define __CR_CRTOOLS_H__
Initial commit Signed-off-by: Cyrill Gorcunov <gorcunov@gmail.com>
2011-09-23 12:00:45 +04:00
#include <sys/types.h>
crtools: link pstree_item-s in a tree (v3) because they describes a process TREE. It's usefull, when we dump tasks from another pid namespace, because a real pid is got from parasite. In previous version we need to update pid in two places one is in a pstree_item and one is in a children array. A process tree will be necessery to restore sid and pgid, because we should add fake tasks in a tree. For example if a sesion leader is absent. v2: fix rollback actions v3: fix comments from Pavel Emelyanov * add macros for_each_pstree_item * and a few bugs Signed-off-by: Andrey Vagin <avagin@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2012-05-31 14:50:00 +04:00
#include "list.h"
x86: moved x86-specific files into the directory arch/x86. * The following files goes into the directory arch/x86/include/asm unmodified: - include/atomic.h, - include/linkage.h, - include/memcpy_64.h, - include/types.h, - include/bitops.h, - pie/parasite-head-x86-64.S, - include/processor-flags.h, - include/syscall-x86-64.def. * Changed include directives in the source files that include the headers listed above. * Modified build scripts to reflect the source moves. Signed-off-by: Alexander Kartashov <alekskartashov@parallels.com> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-01-09 17:02:47 +04:00
#include "asm/types.h"
crtools: create new header for servicefd stuff (v2) v2: generate patch relative to the official git. Signed-off-by: Andrey Vagin <avagin@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-11-05 20:17:47 +04:00
#include "servicefd.h"
Initial commit Signed-off-by: Cyrill Gorcunov <gorcunov@gmail.com>
2011-09-23 12:00:45 +04:00
security: change CR_FD_PERM from rw-rw-r-- to rw-r--r-- This makes only root to be able to modify images by default. When using criu with suid bit set, group of the images is set to user group, which is not safe, considering current CR_FD_PERM. Signed-off-by: Ruslan Kuprieiev <kupruser@gmail.com> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2014-09-16 13:34:00 +04:00
#define CR_FD_PERM (S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH)
Initial commit Signed-off-by: Cyrill Gorcunov <gorcunov@gmail.com>
2011-09-23 12:00:45 +04:00
headers: Add extern specificator to functions We really have a mess of extern/non-extern declaration of functions in our headers. Always use extern for unification purpose. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-11-15 14:04:48 +04:00
extern int check_img_inventory(void);
extern int write_img_inventory(void);
extern void kill_inventory(void);
images: Introduce the top-level file -- inventory Currently we store the images version in the core file. This is bad, since core file describes a single process (or thread) and says nothing about the images set as a whole (let alone the fact that it's being parsed too late). Thus introduce the inventory image file which describes the image set the way we need (want). For now the only entry in it is the images version. In the future it can be extended. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2012-07-19 17:37:25 +04:00
restore: Open /proc/sys/kernel/ns_last_pid via helpers Signed-off-by: Pavel Emelyanov <xemul@parallels.com> Acked-by: Andrew Vagin <avagin@parallels.com>
2014-06-05 20:16:41 +04:00
#define LAST_PID_PATH "sys/kernel/ns_last_pid"
restore: Switch to the new ns_last_pid kernel facility while forking children Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Acked-by: Pavel Emelyanov <xemul@parallels.com>
2011-12-01 18:21:17 +04:00
headers: Add extern specificator to functions We really have a mess of extern/non-extern declaration of functions in our headers. Always use extern for unification purpose. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-11-15 14:04:48 +04:00
extern int cr_dump_tasks(pid_t pid);
extern int cr_pre_dump_tasks(pid_t pid);
extern int cr_restore_tasks(void);
extern int cr_show(int pid);
extern int convert_to_elf(char *elf_path, int fd_core);
extern int cr_check(void);
extern int cr_exec(int pid, char **opts);
v3 deduplication: add dedup comand to criu Signed-off-by: Tikhomirov Pavel <snorcht@gmail.com> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-12-17 19:27:07 +04:00
extern int cr_dedup(void);
Initial commit Signed-off-by: Cyrill Gorcunov <gorcunov@gmail.com>
2011-09-23 12:00:45 +04:00
security: check additional groups,v5 Currently, we only check if process gids match primary gid of user. But process and user have additional groups too. So lets: 1) check that process rgid,egid and sgid are in the user's grouplist. 2) on restore check that user has all groups from the images. Signed-off-by: Ruslan Kuprieiev <kupruser@gmail.com> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2014-07-14 22:24:24 +04:00
extern int restrict_uid(unsigned int uid, unsigned int gid);
security: Push full creds info into may_xxx checks It's not enough to check only uids on dump and restore -- we need to check e-ids and s-ids now (and caps in the future). Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-09-28 15:48:44 +04:00
struct proc_status_creds;
headers: Add extern specificator to functions We really have a mess of extern/non-extern declaration of functions in our headers. Always use extern for unification purpose. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-11-15 14:04:48 +04:00
extern bool may_dump(struct proc_status_creds *);
security: Push full creds info into may_xxx checks It's not enough to check only uids on dump and restore -- we need to check e-ids and s-ids now (and caps in the future). Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-09-28 15:48:44 +04:00
struct _CredsEntry;
headers: Add extern specificator to functions We really have a mess of extern/non-extern declaration of functions in our headers. Always use extern for unification purpose. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-11-15 14:04:48 +04:00
extern bool may_restore(struct _CredsEntry *);
dump: get tasks ids from parasite We have two reason for that: * parsing of /proc/pid/status is slow * parasite returns ids from a target userns Signed-off-by: Andrey Vagin <avagin@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2014-10-31 12:14:22 +03:00
extern bool cr_user_is_root(void);
security: Introduce (rather basic) security restrictions for C/R Right now we have an ability to launch the C/R service from root and execure dump requests from unpriviledged users. Not to be bad guys, we deny dumping tasks belonging to user, that cannot be "watched" (traced, read /proc, etc.) by the dumper. In the future we will use this "engine" when launched with suid bit, and (probably) will have more sophisticated policy. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-09-28 06:16:17 +04:00
headers: Unify include guards (in comments) and a few fixes - fix names in comments - add empty lines where needed - fix rbtree.h - fix syscall-types.h Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2012-12-25 22:40:24 +04:00
#endif /* __CR_CRTOOLS_H__ */
Reference in New Issue Copy Permalink