lkml.org 
[lkml]   [2013]   [Oct]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [RFC] [PATCH 00/19] Non disruptive application core dump infrastructure using task_work_add()
On 10/08/2013 02:12 PM, Janani Venkataraman1 wrote:
>
>
>
>
> From: Pavel Emelyanov <xemul@parallels.com>
> To: Janani Venkataraman1/India/IBM@IBMIN,
> Cc: <linux-kernel@vger.kernel.org>, <amwang@redhat.com>,
> <rdunlap@xenotime.net>, <andi@firstfloor.org>,
> <aravinda@linux.vnet.ibm.com>, <hch@lst.de>,
> <mhiramat@redhat.com>, <jeremy.fitzhardinge@citrix.com>,
> <suzuki@linux.vnet.ibm.com>, <kosaki.motohiro@jp.fujitsu.com>,
> <adobriyan@gmail.com>, <tarundsk@linux.vnet.ibm.com>,
> <vapier@gentoo.org>, <roland@hack.frob.com>, <tj@kernel.org>,
> <ananth@linux.vnet.ibm.com>, <gorcunov@openvz.org>,
> <avagin@openvz.org>, <oleg@redhat.com>, <eparis@redhat.com>,
> <d.hatayama@jp.fujitsu.com>, <james.hogan@imgtec.com>,
> <akpm@linux-foundation.org>, <torvalds@linux-foundation.org>
> Date: 10/04/2013 04:08 PM
> Subject: Re: [RFC] [PATCH 00/19] Non disruptive application core dump
> infrastructure using task_work_add()
>
>
>
> On 10/04/2013 02:30 PM, Janani Venkataraman wrote:
>> Hi all,
>>
>
>> This series is based on the Task work add approach. We didn't adopt the
> CRIU
>> approch because of the following reasons:
>>
>> * It is not upstream yet.
>
> It is, starting from criu-v0.7 + linux-3.11
>
>> * There are concerns about the security of the dump.
>
> Can you elaborate on this? Is it fixable in CRIU at all?
>
>> * It involves a lot of changes and this approach provides a UNIX style
>> interface.
>
> Can you also shed more light on this -- what changes do you mean?
>
> We had a prototype ready earlier using the freezer approach.
> http://lwn.net/Articles/419756/
>
> We made a couple of minor changes to it and implemented using task work
> add.
> We wanted to know what the community felt about this approach.
>
> Also in the previous RFD, Andi Kleen had mentioned a concern on the
> security with
> respect to the daemon approach for a self dump in CRIU.

We have this thing addressed -- when one requests a self-dump from criu daemon
the latter

a) gets pid to dump from SO_PEERCRED, thus requester cannot just send some other's pid
b) doesn't dump tasks that belong to user other than the one who requested the dump

What other security concerns do you have? We're also interested in addressing them.

> Thanks.
> Janani
>
> .
>




\
 
 \ /
  Last update: 2013-10-09 11:21    [W:0.094 / U:2.656 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site