Date: Tue, 31 Jul 2012 21:52:46 +0400 From: Vasily Kulikov <segoon@...nwall.com> To: owl-dev@...ts.openwall.com Subject: vzctl bitness_lock patch Hi, The patch for bitness_lock feature is attached. It seems vzctl needs only BITNESS_LOCK_ON_EXEC, BITNESS_LOCK (just lock current process) is not needed. I suppose we can even lock CT after it is started without bitness locking using CPT and restarting each process (I didn't investigate whether it is actually true, though). E.g. CPT on modern upstream kernel is implemented in userspace by recreating the whole process tree, where it is trivially to add prctl() before executing the actual restorer. Thanks, -- Vasily View attachment "vzctl-3.0.23-owl-BITNESS_LOCK.diff" of type "text/x-diff" (7861 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.