New issue
Advanced search Search tips

Issue 721172 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 3
Type: Bug



Sign in to add a comment

Container ID for ARC.

Project Member Reported by hidehiko@chromium.org, May 11 2017

Issue description

For stabilization purpose, https://chromium-review.googlesource.com/c/499912 introduces an ID for contaner instance.

In the review, Luis proposed to use the ID in the libcontainer, too.
At the moment, we're using mkdtemp to create unique directory for container instance.
So, there's two topics here;

- If we should share the per instance ID between libcontainer (=using it in instance directory path), and communication between Chrome and session_manager.

- If so, by-who/how instance ID should be generated.
  1) If ID is passed to libcontainer from outside, then we need to think about conflicting. (Maybe then it should just return an error?).
  2) If ID is still generated by mkdtemp, then no worry about conflicting because it ensures uniqueness. Then, who owns the responsibility to take the "ID" part from the path, libcontainer or session_manager?

- In case of sharing, it means it exposes container instance path to Chrome. Any security risks (maybe no?)?
 

Comment 1 by dgreid@chromium.org, May 11 2017

I'd prefer (2) if we decide there is value in having the ID pushed to libcontainer as well.  libcontainer currently uses the pointer as the ID, because C.

I don't see a security risk here.  the directory is already in a known path that has one subdir.  knowing the name of that subdir doesn't hurt.
Components: Platform>Apps>ARC
Cc: -lhchavez@chromium.org

Sign in to add a comment