Mike Rapoport (IBM) a48aa33eaa restorer: shstk: implement shadow stack restore ...

The restore of a task with shadow stack enabled adds these steps:

* switch from the default shadow stack to a temporary shadow stack
  allocated in the premmaped area
* unmap CRIU mappings; nothing changed here, but it's important that
  CRIU mappings can be removed only after switching to a temporary
  shadow stack
* create shadow stack VMA with map_shadow_stack()
* restore shadow stack contents with wrss
* switch to "real" shadow stack
* lock shadow stack features

Signed-off-by: Mike Rapoport (IBM) <rppt@kernel.org>

2024-09-11 16:02:11 -07:00

..

arch

restorer: shstk: implement shadow stack restore

2024-09-11 16:02:11 -07:00

include

restorer: shstk: implement shadow stack restore

2024-09-11 16:02:11 -07:00

pie

restorer: shstk: implement shadow stack restore

2024-09-11 16:02:11 -07:00

unittest

ci: Fix code indent

2022-06-22 10:20:33 -07:00

action-scripts.c

rpc: Support gathering external file list after freezing process tree.

2023-10-22 13:29:25 -07:00

aio.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

apparmor.c

apparmor: remove the redundant check

2023-10-22 13:29:25 -07:00

autofs.c

autofs: fix a frankenstein auto-created by clang-format

2023-04-15 21:17:21 -07:00

bfd.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

bitmap.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

bpfmap.c

bpf: update deprecated API

2022-04-28 17:53:52 -07:00

cgroup-props.c

cgroup-v2: Checkpoint and restore some global properties

2023-04-15 21:17:21 -07:00

cgroup.c

cgroup: Add support for restoring a thread in a correct v1 cgroup

2024-09-11 16:02:11 -07:00

clone-noasan.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

config.c

Allow skipping iptables/nftables invocation.

2023-10-22 13:29:25 -07:00

cr-check.c

kerndat: check the PAGEMAP_SCAN ioctl

2024-09-11 16:02:11 -07:00

cr-dedup.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

cr-dump.c

dump+restore: Implement membarrier() registration c/r.

2023-10-22 13:29:25 -07:00

cr-errno.c

build: Move everything criu related into criu directory

2016-02-15 15:32:45 +03:00

cr-restore.c

restore: add infrastructure to enable shadow stack

2024-09-11 16:02:11 -07:00

cr-service.c

rpc: Support setting images_dir by path.

2023-10-22 13:29:25 -07:00

crtools.c

Add documentation for --ghost-fiemap

2023-04-15 21:17:21 -07:00

eventfd.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

eventpoll.c

Fix some codespell warnings

2022-04-28 17:53:52 -07:00

external.c

configs: fix used after free cases

2021-09-03 10:31:00 -07:00

fault-injection.c

Add error logging to config + crtools init

2020-10-20 00:18:24 -07:00

fdstore.c

non-root: Rework socket bufs for unprivileged mode

2023-04-15 21:17:21 -07:00

fifo.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

file-ids.c

criu/files: Don't cache fd ids for device files

2022-04-28 17:53:52 -07:00

file-lock.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

files-ext.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

files-reg.c

files-reg: don't change the file pos in get_build_id

2023-10-22 13:29:25 -07:00

files.c

string: use our own __strlcpy and __strlcat to remove bsd headers

2023-04-15 21:17:21 -07:00

filesystems.c

mount: allow bindmounts for external fuse mounts

2023-04-15 21:17:21 -07:00

fsnotify.c

log: remove all uses of %m specifier in pr_* functions

2023-04-15 21:17:21 -07:00

hugetlb.c

hugetlb: don't dump anonymous private hugetlb mapping using memfd approach

2023-04-15 21:17:21 -07:00

image-desc.c

lsm: support checkpoint/restore of stacked apparmor profiles

2021-09-03 10:31:00 -07:00

image.c

cgroup-v2: Dump cgroup controllers of every threads in a process

2023-04-15 21:17:21 -07:00

img-streamer.c

action-scripts: Add pre-stream hook

2023-10-22 13:29:25 -07:00

ipc_ns.c

ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach

2023-04-15 21:17:21 -07:00

irmap.c

irmap: hardcode some more interesting paths

2024-09-11 16:02:11 -07:00

kcmp-ids.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

kerndat.c

criu: kerndat: add kdat_has_shstk()

2024-09-11 16:02:11 -07:00

libnetlink.c

build: libnfnetlink: Remove nla_get_s32().

2023-10-22 13:29:25 -07:00

log.c

log: fix timestamp logging when tv_sec>=100

2023-04-15 21:17:21 -07:00

lsm.c

lsm: do not print a warning if no LSM has been detected

2021-09-03 10:31:00 -07:00

Makefile

make: remove checks for python 2 binary

2023-10-22 13:29:25 -07:00

Makefile.crtools

string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers

2023-04-15 21:17:21 -07:00

Makefile.packages

make: remove checks for python 2 binary

2023-10-22 13:29:25 -07:00

mem.c

criu: shstk: premap and prepopulate shadow stack VMAs

2024-09-11 16:02:11 -07:00

memfd.c

memfd: don't reopen file descriptors for memory mappings

2023-10-22 13:29:25 -07:00

mount-v2.c

mount-v2: workaround for multiple external bindmounts with no common root

2022-06-22 10:20:33 -07:00

mount.c

mount: Demote fsnotify logs for ignored failures.

2023-10-22 13:29:25 -07:00

namespaces.c

ci: fix new codespell errors

2023-10-22 13:29:25 -07:00

net.c

net: return bool with iptable_has_criu_jump_target

2024-09-11 16:02:11 -07:00

netfilter.c

log: Remove error logs for ignored or otherwise logged subprocess exits.

2023-10-22 13:29:25 -07:00

page-pipe.c

dump: increase fcntl call failure judgment

2023-10-22 13:29:25 -07:00

page-xfer.c

page-xfer: Pull tcp_cork,nodelay().

2023-10-22 13:29:25 -07:00

pagemap-cache.c

pagemap-cache: add an ability to run tests without PAGEMAP_SCAN

2024-09-11 16:02:11 -07:00

pagemap.c

pagemap: tiny fix on truncating memory image

2022-04-28 17:53:52 -07:00

parasite-syscall.c

dump: use MEMBARRIER_CMD_GET_REGISTRATIONS when available

2023-10-22 13:29:25 -07:00

path.c

Fix some codespell warnings

2022-04-28 17:53:52 -07:00

pidfd-store.c

non-root: Rework socket bufs for unprivileged mode

2023-04-15 21:17:21 -07:00

pie-util-vdso-elf32.c

vdso: fill compat symtab in CRIU

2017-03-15 00:09:52 +03:00

pie-util-vdso.c

build: Move everything criu related into criu directory

2016-02-15 15:32:45 +03:00

pie-util.c

build: Move everything criu related into criu directory

2016-02-15 15:32:45 +03:00

pipes.c

pipes: Plug pipe fd leak in "Unable to set a pipe size" error case.

2023-10-22 13:29:25 -07:00

plugin.c

criu: Introduce new device file plugin hooks

2022-04-28 17:53:52 -07:00

proc_parse.c

criu: shstk: add VMA_AREA_SHSTK flag

2024-09-11 16:02:11 -07:00

protobuf-desc.c

lsm: support checkpoint/restore of stacked apparmor profiles

2021-09-03 10:31:00 -07:00

protobuf.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

pstree.c

pstree: improve id intersection detection in prepare_pstree_for_shell_job

2023-04-15 21:17:21 -07:00

rbtree.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

rst-malloc.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

seccomp.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

seize.c

dump: improve error printing and readability of task_comm_info

2023-04-15 21:17:21 -07:00

servicefd.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

setproctitle.c

string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers

2023-04-15 21:17:21 -07:00

shmem.c

page-cache: use the PAGEMAP_SCAN ioctl when it is available

2024-09-11 16:02:11 -07:00

sigframe.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

signalfd.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

sk-inet.c

sk-inet: fix codding style in restore_ip_opts

2024-09-11 16:02:11 -07:00

sk-netlink.c

netlink: fix netlink fd flags dump/restore failed

2023-04-15 21:17:21 -07:00

sk-packet.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

sk-queue.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

sk-tcp.c

Allow skipping iptables/nftables invocation.

2023-10-22 13:29:25 -07:00

sk-unix.c

sk-unix: Avoid restore_file_perms() EPERM error for no-op changes.

2023-10-22 13:29:25 -07:00

sockets.c

sockets: Increase the size of sockets hashmap to 16K.

2023-10-22 13:29:25 -07:00

stats.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

string.c

string: use our own __strlcpy and __strlcat to remove bsd headers

2023-04-15 21:17:21 -07:00

sysctl.c

ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach

2023-04-15 21:17:21 -07:00

sysfs_parse.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

timens.c

non-root: enable non-root checkpoint/restore

2023-04-15 21:17:21 -07:00

timerfd.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

tls.c

Fix some codespell warnings

2022-04-28 17:53:52 -07:00

tty.c

tty: skip ioctl(TIOCSLCKTRMIOS) if possible

2024-09-11 16:02:11 -07:00

tun.c

tun: don't parse buffers that have not been filled with data

2023-10-22 13:29:25 -07:00

uffd.c

Fix some codespell warnings

2022-04-28 17:53:52 -07:00

util.c

util: allow to run criu under strace

2023-10-22 13:29:25 -07:00

uts_ns.c

util: Include int.h (compilation fix)

2016-10-24 16:00:16 +03:00

vdso-compat.c

Run 'make indent' on all C files

2021-09-03 10:31:00 -07:00

vdso.c

vdso-compat: Increase the reserved buffer for compat vdso

2023-04-15 21:17:21 -07:00