[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20120731175246.GA3166@albatros>
Date: Tue, 31 Jul 2012 21:52:46 +0400
From: Vasily Kulikov <segoon@...nwall.com>
To: owl-dev@...ts.openwall.com
Subject: vzctl bitness_lock patch
Hi,
The patch for bitness_lock feature is attached.
It seems vzctl needs only BITNESS_LOCK_ON_EXEC, BITNESS_LOCK (just lock
current process) is not needed. I suppose we can even lock CT after it
is started without bitness locking using CPT and restarting each process
(I didn't investigate whether it is actually true, though). E.g. CPT
on modern upstream kernel is implemented in userspace by recreating the
whole process tree, where it is trivially to add prctl() before
executing the actual restorer.
Thanks,
--
Vasily
View attachment "vzctl-3.0.23-owl-BITNESS_LOCK.diff" of type "text/x-diff" (7861 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
