• Adrian Reber's avatar
    restore: support restoring threads with SELinux · 1bc3e588
    Adrian Reber authored
    Restoring a multi-threaded process with CRIU's SELinux support fails
    because SELinux does not always support changing the process context of
    a multi-threaded process.
    
    Reading the man-page for setcon(), to change the context of a running
    process, it states that changing the SELinux context of a multi-threaded
    process can only work 'if the new security context is bounded by the old
    security context'.
    
    To be able to restore a process without the need to have 'the new
    security context [] bounded by the old security context', this sets the
    SELinux process context before creating the threads. Thus all threads
    are created with the process context of the main process.
    Signed-off-by: 's avatarAdrian Reber <areber@redhat.com>
    1bc3e588
Name
Last commit
Last update
Documentation Loading commit data...
compel Loading commit data...
contrib Loading commit data...
coredump Loading commit data...
crit Loading commit data...
criu Loading commit data...
images Loading commit data...
include/common Loading commit data...
lib Loading commit data...
scripts Loading commit data...
soccr Loading commit data...
test Loading commit data...
.gitignore Loading commit data...
.mailmap Loading commit data...
.travis.yml Loading commit data...
COPYING Loading commit data...
CREDITS Loading commit data...
INSTALL.md Loading commit data...
Makefile Loading commit data...
Makefile.compel Loading commit data...
Makefile.config Loading commit data...
Makefile.install Loading commit data...
Makefile.versions Loading commit data...
README.md Loading commit data...