[lxc-devel] [lxc/lxc] 5ed06d: seccomp: send process memory fd

[Stéphane Graber]

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 5ed06d3ad6a80a7a8efd10a9c01e90e0e7981306
      https://github.com/lxc/lxc/commit/5ed06d3ad6a80a7a8efd10a9c01e90e0e7981306
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2019-05-02 (Thu, 02 May 2019)

  Changed paths:
    M src/lxc/af_unix.c
    M src/lxc/af_unix.h
    M src/lxc/seccomp.c

  Log Message:
  -----------
  seccomp: send process memory fd

There's an inherent race when reading a process's memory. The easiest way is to
have liblxc get an fd and check that the race was one, send it to the caller
(They are free to ignore it if they don't use recvmsg()).

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 9e1accb9d28a579d28eac635767382b2f07dfc1b
      https://github.com/lxc/lxc/commit/9e1accb9d28a579d28eac635767382b2f07dfc1b
  Author: Stéphane Graber <stgraber at ubuntu.com>
  Date:   2019-05-02 (Thu, 02 May 2019)

  Changed paths:
    M src/lxc/af_unix.c
    M src/lxc/af_unix.h
    M src/lxc/seccomp.c

  Log Message:
  -----------
  Merge pull request #2972 from brauner/2019-05-02/seccomp_notify_mem_fd

seccomp: send process memory fd


Compare: https://github.com/lxc/lxc/compare/99b68bdb48d2...9e1accb9d28a