On Thu, Sep 29, 2022 at 03:29:35PM -0700, Rick Edgecombe wrote: > From: Mike Rapoport <rppt@xxxxxxxxxxxxx> > > Userspace loaders may lock features before a CRIU restore operation has > the chance to set them to whatever state is required by the process > being restored. Allow a way for CRIU to unlock features. Add it as an > arch_prctl() like the other CET operations, but restrict it being called > by the ptrace arch_pctl() interface. Hrm, please make this build-depend on CRIU... -- Kees Cook