1
0
Files
linux/kernel
Oleg Nesterov c6c70f4455 exit: fix the setns() && PR_SET_CHILD_SUBREAPER interaction
find_new_reaper() checks same_thread_group(reaper, child_reaper) to
prevent the cross-namespace reparenting but this is not enough if the
exiting parent was injected by setns() + fork().

Suppose we have a process P in the root namespace and some namespace X.
P does setns() to enter the X namespace, and forks the child C.
C forks a grandchild G and exits.

The grandchild G should be re-parented to X->child_reaper, but in this
case the ->real_parent chain does not lead to ->child_reaper, so it will
be wrongly reparanted to P's sub-reaper or a global init.

Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2017-02-01 18:20:48 +13:00
..
2016-12-25 17:21:22 +01:00
2016-12-25 17:21:22 +01:00
2016-11-25 16:25:52 -05:00
2016-12-26 17:30:24 -08:00
2016-12-25 17:21:22 +01:00
2016-12-12 18:55:06 -08:00
2016-05-27 15:26:11 -07:00
2016-12-25 17:21:22 +01:00
2016-12-22 22:58:37 -05:00
2016-09-22 20:00:36 -05:00