[PATCH v6 0/9] Add support for memory sealing

[Jeff Xu]

Hi All.

It seems that all of the opening comments for V6 are addressed.
>From a functionality point of view, V6 is suitable for use with Chrome
and ChromeOS.
Adding Stephen Röttger from Chrome point of view if there are any
additional comments.

Could we merge this patch to main glibc ?  ChromeOS is planning to use
this  after upgrading glibc.

Much appreciated.
Thanks
-Jeff


On Fri, Apr 18, 2025 at 11:52 AM Jeff Xu <jeffxu@google.com> wrote:
>
> On Tue, Mar 11, 2025 at 10:13 AM Adhemerval Zanella
> <adhemerval.zanella@linaro.org> wrote:
> >
> > Changes v5->v6:
> > * Fixed aarch64 gnu attribute handling to work with GCS.
> > * Add support for PT_GNU_MUTABLE.
> > * Fixed mseal manual wording.
> > * Add the tunable to allow some user cases (profiling).
>
> > * Changed semantics to avoid sealing on dependencies if the attribute is not present on the binary.
> I tested the above change.
> With this change, Checkpoint restoration should work fine when glibc
> is built with sealing enabled, since the CRIU doesn't set the seal
> flag in its main binary.
>
> Thanks
> -Jeff