diff options
| author | Eric W. Biederman | 2010-07-13 03:50:25 +0200 |
|---|---|---|
| committer | Eric W. Biederman | 2012-11-19 14:59:11 +0100 |
| commit | 5e1182deb81ae8c68494017c4a8a71811659c870 (patch) | |
| tree | 81b9fa941a3293f6d5fa4e32aa311988bb3bf985 /kernel/pid_namespace.c | |
| parent | pidns: Make the pidns proc mount/umount logic obvious. (diff) | |
| download | kernel-qcow2-linux-5e1182deb81ae8c68494017c4a8a71811659c870.tar.gz kernel-qcow2-linux-5e1182deb81ae8c68494017c4a8a71811659c870.tar.xz kernel-qcow2-linux-5e1182deb81ae8c68494017c4a8a71811659c870.zip | |
pidns: Don't allow new processes in a dead pid namespace.
Set nr_hashed to -1 just before we schedule the work to cleanup proc.
Test nr_hashed just before we hash a new pid and if nr_hashed is < 0
fail.
This guaranteees that processes never enter a pid namespaces after we
have cleaned up the state to support processes in a pid namespace.
Currently sending SIGKILL to all of the process in a pid namespace as
init exists gives us this guarantee but we need something a little
stronger to support unsharing and joining a pid namespace.
Acked-by: "Serge E. Hallyn" <serge@hallyn.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Diffstat (limited to 'kernel/pid_namespace.c')
0 files changed, 0 insertions, 0 deletions