16
edits
Changes
no edit summary
#* The dumper writes out files and pipes parameter and data.
# The procedure continues for every '''$pid'''.
=== Restore ===
The restore procedure (aka restorer) proceed in the following steps:
# A process tree has been read from a file.
# Every process started with saved (i.e. original) '''$pid''' via <code>clone()</code> call with new <code>CLONE_CHILD_USEPID</code> flag.
# Files and pipes are restored (by restored it's meant - they are opened and positioned).
# A new file generated. The file has an Elf format but with modified executable and program header types (telling the kernel that this particular file is not a regular Elf'oid but rather the kernel needs to handle it in a slightly different way).
# Finally execve with new Elf file as an argument is executed, which initiate the kernel's stage of restore procedure.