lkml.org 
[lkml]   [2017]   [Oct]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RESEND PATCH] prctl: add PR_[GS]ET_PDEATHSIG_PROC
    On 10/03, Jürg Billeter wrote:
    >
    > My use case is to provide a way for a process to spawn a child and
    > ensure that no descendants survive when that child dies. Avoiding
    > runaway processes is desirable in many situations. My motivation is
    > very lightweight (nested) sandboxing (every process is potentially
    > sandboxed).
    >
    > I.e., pid namespaces would be a pretty good fit (assuming they are
    > sufficiently lightweight) but CLONE_NEWPID

    sorry if this was already discussed, I didn't read this thread yet...

    if CLONE_NEWPID is not suitable for any reason. We already have
    PR_SET_CHILD_SUBREAPER. Perhaps we can simply add another
    PR_SET_KILL_ALL_DESCEDANTS_ON_EXIT? we can use walk_process_tree()
    to send SIGKILL.

    Oleg.

    \
     
     \ /
      Last update: 2017-10-05 18:28    [W:2.833 / U:1.524 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site