[PATCH v8 0/8] Add support for memory sealing

[Florian Weimer]

* Cristian Rodríguez:

> On Mon, Feb 3, 2025 at 4:40 PM Florian Weimer <fweimer@redhat.com> wrote:
>>
>> * Adhemerval Zanella Netto:
>>
>> >> CRIU needs to be able to unmap everything that was initially loaded by
>> >> the kernel and glibc.  This will stop working if we use mseal for glibc
>> >> itself.
>> >
>> > So in this case the easiest way it to filter of mseal (with seccomp or
>> > something related) and disable sealing.  I don't have a easy solution.
>>
>> Please test with CRIU and trace and find a way to make them work again
>> if they are broken.
>
> that is a kernel problem afaik.. .why libc has to care about this limitation ?

We want CRIU and similar tools to be able to build with glibc 2.42 and
later, without distributions having to provide two separate glibc
versions.

Thanks,
Florian