4 Commits

Author	SHA1	Message	Date
Cyrill Gorcunov	65570d9559	sockets, inet: Use inet_sk_entry as a reference in inet_sk_info ... For PB transition. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>	2012-07-16 07:03:59 +04:00
Cyrill Gorcunov	582954685b	Escape using unsafe sprintf helper ... Util it's very critical for speed we should not use unsafe sprintf helper, we're root-granted program and must be as safe as possible. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>	2012-06-20 15:04:51 +04:00
Stanislav Kinsbursky	41195598cf	parasite: remove excessive header deps from parasite.h and friends ... The task is not complete - this is just a part of what have to be done. I.e. looks like a lot of excessive deps can be fixed. Signed-off-by: Stanislav Kinsbursky <skinsbursky@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>	2012-05-30 12:50:18 +04:00
Pavel Emelyanov	64c64e4f2c	net: Add code for locking a tcp connection with netfilter ... Between dump and restore of a tcp conn we have to keep the connection blocked, since the socket doesn't exists in the kernel at this time and any packet from peer will result in RST. Thus, add the -j DROP rule for every connection we're about to repair. Later, when we support containers, this will be extended to stop the whole networking in a CT instead of cherry-peeking connections. It does system("iptables ...") for this, but I'd prefer using the libnetfilter-devel sometime in the future. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>	2012-04-28 17:59:21 +04:00