Linux Container Development
 help / color / mirror / Atom feed
From: Dave Hansen <dave-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
To: David Newall <davidn-KzQzY1MbaKjAHznzqCTclw@public.gmane.org>
Cc: jeremy-TSDbQ3PG+2Y@public.gmane.org,
	arnd-r2nGTMty4D4@public.gmane.org,
	containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org,
	Ingo Molnar <mingo-X9Un+BFzKDI@public.gmane.org>,
	linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org,
	linux-mm-Bw31MaZKKs3YtjvyW6yDsg@public.gmane.org,
	Cedric Le Goater <clg-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org>,
	Thomas Gleixner <tglx-hfZtesqFncYOwBW4kG4KsQ@public.gmane.org>,
	Alexander Viro
	<viro-RmSDqhL/yNMiFSDQTTA3OLVCufUGDwFn@public.gmane.org>,
	"H. Peter Anvin" <hpa-YMNOUZJC4hwAvxtiuMwx3w@public.gmane.org>,
	Daniel Lezcano <dlezcano-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org>,
	Peter Chubb
	<peterc-M3ycANVxPotyL3EAZA59ERCuuivNXqWP@public.gmane.org>,
	Andrey Mirkin <major-GEFAQzZX7r8dnm+yROfE0A@public.gmane.org>
Subject: Re: [RFC v6][PATCH 0/9] Kernel based checkpoint/restart
Date: Mon, 20 Oct 2008 10:17:12 -0700	[thread overview]
Message-ID: <1224523032.1848.119.camel@nimitz> (raw)
In-Reply-To: <48F83121.7070705-KzQzY1MbaKjAHznzqCTclw@public.gmane.org>

On Fri, 2008-10-17 at 17:00 +1030, David Newall wrote:
> > The strace/gdb example is *really* hard; but for vfork, you just wait
> > until it's over. The interval between vfork and exec/exit should be
> > short enough not to affect the overall time for a checkpoint
> 
> A malicious user could trivially exploit that.

You mean a malicious user could prevent a checkpoint from occurring by
doing this?

There are going to be a lot of those for a long while. :)

-- Dave

  parent reply	other threads:[~2008-10-20 17:17 UTC|newest]

Thread overview: 35+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <1223461197-11513-1-git-send-email-orenl@cs.columbia.edu>
     [not found] ` <1223461197-11513-1-git-send-email-orenl-eQaUEPhvms7ENvBUuze7eA@public.gmane.org>
2008-10-08 10:19   ` [RFC v6][PATCH 1/9] Create syscalls: sys_checkpoint, sys_restart Oren Laadan
2008-10-08 10:19   ` [RFC v6][PATCH 2/9] General infrastructure for checkpoint restart Oren Laadan
2008-10-08 10:19   ` [RFC v6][PATCH 3/9] x86 support for checkpoint/restart Oren Laadan
2008-10-08 10:19   ` [RFC v6][PATCH 4/9] Dump memory address space Oren Laadan
2008-10-08 10:19   ` [RFC v6][PATCH 5/9] Restore " Oren Laadan
2008-10-08 10:19   ` [RFC v6][PATCH 6/9] Checkpoint/restart: initial documentation Oren Laadan
2008-10-08 10:19   ` [RFC v6][PATCH 7/9] Infrastructure for shared objects Oren Laadan
2008-10-08 10:19   ` [RFC v6][PATCH 8/9] Dump open file descriptors Oren Laadan
2008-10-08 10:19   ` [RFC v6][PATCH 9/9] Restore open file descriprtors Oren Laadan
2008-10-09 12:46   ` [RFC v6][PATCH 0/9] Kernel based checkpoint/restart Ingo Molnar
     [not found] ` <1223461197-11513-6-git-send-email-orenl@cs.columbia.edu>
     [not found]   ` <1223461197-11513-6-git-send-email-orenl-eQaUEPhvms7ENvBUuze7eA@public.gmane.org>
2008-10-08 15:35     ` [RFC v6][PATCH 5/9] Restore memory address space Dave Hansen
     [not found] ` <20081009124658.GE2952@elte.hu>
     [not found]   ` <20081009124658.GE2952-X9Un+BFzKDI@public.gmane.org>
2008-10-09 12:58     ` [RFC v6][PATCH 0/9] Kernel based checkpoint/restart Dave Hansen
2008-10-09 13:17       ` Ingo Molnar
     [not found]       ` <20081009131701.GA21112@elte.hu>
     [not found]         ` <1223559246.11830.23.camel@nimitz>
2008-10-09 13:44           ` Ingo Molnar
     [not found]             ` <20081009134415.GA12135-X9Un+BFzKDI@public.gmane.org>
2008-10-09 16:50               ` Dave Hansen
     [not found]             ` <1223571036.11830.32.camel@nimitz>
2008-10-10 15:39               ` Ingo Molnar
     [not found]               ` <20081010153951.GD28977@elte.hu>
     [not found]                 ` <20081010153951.GD28977-X9Un+BFzKDI@public.gmane.org>
2008-10-13  8:13                   ` Cedric Le Goater
     [not found]                 ` <48F30315.1070909@fr.ibm.com>
     [not found]                   ` <48F30315.1070909-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org>
2008-10-13 16:12                     ` Oren Laadan
2008-10-13 16:43                     ` Dave Hansen
     [not found]                   ` <48F3737B.6070904@cs.columbia.edu>
     [not found]                     ` <48F3737B.6070904-eQaUEPhvms7ENvBUuze7eA@public.gmane.org>
2008-10-15 15:13                       ` Cedric Le Goater
     [not found]                     ` <48F60891.1070807@fr.ibm.com>
     [not found]                       ` <48F60891.1070807-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org>
2008-10-15 23:59                         ` Oren Laadan
     [not found]                   ` <1223916223.29877.14.camel@nimitz>
2008-10-15 15:15                     ` Cedric Le Goater
     [not found]                     ` <48F6092D.6050400@fr.ibm.com>
     [not found]                       ` <48F6092D.6050400-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org>
2008-10-16  0:06                         ` Oren Laadan
     [not found]                       ` <48F685A3.1060804@cs.columbia.edu>
     [not found]                         ` <48F685A3.1060804-eQaUEPhvms7ENvBUuze7eA@public.gmane.org>
2008-10-16 12:35                           ` Daniel Lezcano
     [not found]                         ` <48F7352F.3020700@fr.ibm.com>
     [not found]                           ` <48F7352F.3020700-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org>
2008-10-16 13:49                             ` Oren Laadan
     [not found]                           ` <48F74674.20202@cs.columbia.edu>
     [not found]                             ` <48F74674.20202-eQaUEPhvms7ENvBUuze7eA@public.gmane.org>
2008-10-16 22:51                               ` Peter Chubb
     [not found]                             ` <87r66g8875.wl%peter@chubb.wattle.id.au>
     [not found]                               ` <87r66g8875.wl%peter-LkDQP0DxSMGxwJ88Py/mJxCuuivNXqWP@public.gmane.org>
2008-10-17  6:30                                 ` David Newall
2008-10-17  6:44                                 ` Cedric Le Goater
2008-10-17  7:08                                 ` Oren Laadan
     [not found]                               ` <48F83121.7070705@davidnewall.com>
     [not found]                                 ` <48F83121.7070705-KzQzY1MbaKjAHznzqCTclw@public.gmane.org>
2008-10-20 17:17                                   ` Dave Hansen [this message]
     [not found]         ` <20081009131701.GA21112-X9Un+BFzKDI@public.gmane.org>
2008-10-09 13:34           ` Dave Hansen
2008-10-09 21:59           ` Greg Kurz
     [not found] ` <1223461197-11513-4-git-send-email-orenl@cs.columbia.edu>
     [not found]   ` <1223461197-11513-4-git-send-email-orenl-eQaUEPhvms7ENvBUuze7eA@public.gmane.org>
2008-10-10 10:21     ` [RFC v6][PATCH 3/9] x86 support for checkpoint/restart Cedric Le Goater
     [not found]   ` <48EF2CB3.9040900@fr.ibm.com>
     [not found]     ` <48EF2CB3.9040900-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org>
2008-10-10 10:24       ` Oren Laadan
2008-10-08 10:19 [RFC v6][PATCH 0/9] Kernel based checkpoint/restart Oren Laadan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1224523032.1848.119.camel@nimitz \
    --to=dave-23vcf4htsmix0ybbhkvfkdbpr1lh4cv8@public.gmane.org \
    --cc=arnd-r2nGTMty4D4@public.gmane.org \
    --cc=clg-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org \
    --cc=containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org \
    --cc=davidn-KzQzY1MbaKjAHznzqCTclw@public.gmane.org \
    --cc=dlezcano-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org \
    --cc=hpa-YMNOUZJC4hwAvxtiuMwx3w@public.gmane.org \
    --cc=jeremy-TSDbQ3PG+2Y@public.gmane.org \
    --cc=linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
    --cc=linux-mm-Bw31MaZKKs3YtjvyW6yDsg@public.gmane.org \
    --cc=major-GEFAQzZX7r8dnm+yROfE0A@public.gmane.org \
    --cc=mingo-X9Un+BFzKDI@public.gmane.org \
    --cc=peterc-M3ycANVxPotyL3EAZA59ERCuuivNXqWP@public.gmane.org \
    --cc=tglx-hfZtesqFncYOwBW4kG4KsQ@public.gmane.org \
    --cc=viro-RmSDqhL/yNMiFSDQTTA3OLVCufUGDwFn@public.gmane.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox