>>>>> "Oren" == Oren Laadan <orenl@xxxxxxxxxxxxxxx> writes: Oren> Nope, since we will fail to restart in many cases. We will need Oren> a way to move from caller's credentials to saved credentials, Oren> and even from caller's credentials to privileged credentials Oren> (e.g. to reopen a file that was created by a setuid program Oren> prior to dropping privileges). You can't necessarily tell the difference between this and revocation of privilege. For most security models, it must be possible to change the permissions on the file, and then the restart should fail. In our implementation, we simply refused to checkpoint setid programs. -- Dr Peter Chubb http://www.gelato.unsw.edu.au peterc AT gelato.unsw.edu.au http://www.ertos.nicta.com.au ERTOS within National ICT Australia _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/containers
