Re: [PATCH v5] seccomp: add ptrace options for suspend/resume

2015-06-16 Thread Tycho Andersen
On Mon, Jun 15, 2015 at 03:50:59PM -0700, Kees Cook wrote: > On Mon, Jun 15, 2015 at 3:04 PM, Kees Cook wrote: > > On Mon, Jun 15, 2015 at 2:20 PM, Oleg Nesterov wrote: > >> On 06/15, Kees Cook wrote: > >>> > >>> On Sat, Jun 13, 2015 at 4:52 PM, Oleg Nesterov wrote: > >>> > On 06/13, Tycho Ander

Re: [PATCH v5] seccomp: add ptrace options for suspend/resume

2015-06-15 Thread Kees Cook
On Mon, Jun 15, 2015 at 3:04 PM, Kees Cook wrote: > On Mon, Jun 15, 2015 at 2:20 PM, Oleg Nesterov wrote: >> On 06/15, Kees Cook wrote: >>> >>> On Sat, Jun 13, 2015 at 4:52 PM, Oleg Nesterov wrote: >>> > On 06/13, Tycho Andersen wrote: >>> >> >>> >> This patch is the first step in enabling check

Re: [PATCH v5] seccomp: add ptrace options for suspend/resume

2015-06-15 Thread Kees Cook
On Mon, Jun 15, 2015 at 2:20 PM, Oleg Nesterov wrote: > On 06/15, Kees Cook wrote: >> >> On Sat, Jun 13, 2015 at 4:52 PM, Oleg Nesterov wrote: >> > On 06/13, Tycho Andersen wrote: >> >> >> >> This patch is the first step in enabling checkpoint/restore of processes >> >> with seccomp enabled. >> >

Re: [PATCH v5] seccomp: add ptrace options for suspend/resume

2015-06-15 Thread Oleg Nesterov
On 06/15, Kees Cook wrote: > > On Sat, Jun 13, 2015 at 4:52 PM, Oleg Nesterov wrote: > > On 06/13, Tycho Andersen wrote: > >> > >> This patch is the first step in enabling checkpoint/restore of processes > >> with seccomp enabled. > > > > So just in case, I am fine with this version. > > Should I

Re: [PATCH v5] seccomp: add ptrace options for suspend/resume

2015-06-15 Thread Andy Lutomirski
On Mon, Jun 15, 2015 at 1:19 PM, Kees Cook wrote: > On Sat, Jun 13, 2015 at 4:52 PM, Oleg Nesterov wrote: >> On 06/13, Tycho Andersen wrote: >>> >>> This patch is the first step in enabling checkpoint/restore of processes >>> with seccomp enabled. >> >> So just in case, I am fine with this versio

Re: [PATCH v5] seccomp: add ptrace options for suspend/resume

2015-06-15 Thread Kees Cook
On Sat, Jun 13, 2015 at 4:52 PM, Oleg Nesterov wrote: > On 06/13, Tycho Andersen wrote: >> >> This patch is the first step in enabling checkpoint/restore of processes >> with seccomp enabled. > > So just in case, I am fine with this version. Should I add your Ack? Though I really like the idea of

Re: [PATCH v5] seccomp: add ptrace options for suspend/resume

2015-06-15 Thread Pavel Emelyanov
On 06/13/2015 06:02 PM, Tycho Andersen wrote: > This patch is the first step in enabling checkpoint/restore of processes > with seccomp enabled. > > One of the things CRIU does while dumping tasks is inject code into them > via ptrace to collect information that is only available to the process >

Re: [PATCH v5] seccomp: add ptrace options for suspend/resume

2015-06-13 Thread Oleg Nesterov
On 06/13, Tycho Andersen wrote: > > This patch is the first step in enabling checkpoint/restore of processes > with seccomp enabled. So just in case, I am fine with this version. > One of the things CRIU does while dumping tasks is inject code into them > via ptrace to collect information that is

[PATCH v5] seccomp: add ptrace options for suspend/resume

2015-06-13 Thread Tycho Andersen
This patch is the first step in enabling checkpoint/restore of processes with seccomp enabled. One of the things CRIU does while dumping tasks is inject code into them via ptrace to collect information that is only available to the process itself. However, if we are in a seccomp mode where these p