Cc: [email protected]
Signed-off-by: Dan Smith <[email protected]>
---
checkpoint/checkpoint.c | 15 +++++++++++++--
1 files changed, 13 insertions(+), 2 deletions(-)
diff --git a/checkpoint/checkpoint.c b/checkpoint/checkpoint.c
index ef35754..c2f0e16 100644
--- a/checkpoint/checkpoint.c
+++ b/checkpoint/checkpoint.c
@@ -302,8 +302,19 @@ static int cr_may_checkpoint_task(struct task_struct *t,
struct cr_ctx *ctx)
if (t != current && !frozen(t))
return -EBUSY;
- /* FIXME: change this for nested containers */
- if (task_nsproxy(t) != ctx->root_nsproxy)
+ if (task_nsproxy(t)->uts_ns != ctx->root_nsproxy->uts_ns)
+ return -EPERM;
+
+ if (task_nsproxy(t)->ipc_ns != ctx->root_nsproxy->ipc_ns)
+ return -EPERM;
+
+ if (task_nsproxy(t)->mnt_ns != ctx->root_nsproxy->mnt_ns)
+ return -EPERM;
+
+ if (task_nsproxy(t)->pid_ns != ctx->root_nsproxy->pid_ns)
+ return -EPERM;
+
+ if (task_nsproxy(t)->net_ns != ctx->root_nsproxy->net_ns)
return -EPERM;
return 0;
--
1.5.6.3
_______________________________________________
Containers mailing list
[email protected]
https://lists.linux-foundation.org/mailman/listinfo/containers
_______________________________________________
Devel mailing list
[email protected]
https://openvz.org/mailman/listinfo/devel
