[GIT PULL] namespaces related fixes for v4.11-rc1

Andy Lutomirski luto at amacapital.net
Thu Feb 23 03:06:17 UTC 2017


On Wed, Feb 22, 2017 at 5:29 PM, Eric W. Biederman
<ebiederm at xmission.com> wrote:
> Aleksa Sarai <asarai at suse.de> writes:
>
>>> The only known user of this prctl systemd
>>> forks all children after the prctl.  So no userspace regressions will
>>> occur.
>>
>> Note that runC and containerd (and thus Docker) as well as cri-o use the prctl
>> as well -- to be able to collect exit codes from a non-child process (namely to
>> collect the exit code from PID 1 in the container).
>
> Are any of those affected by the change?  I would not expect so.  As it
> would require having children or grand children whose exit codes you
> don't want to collect.

FWIW, I have private code that uses PR_SET_CHILD_SUBREAPER, too.  I
don't see why it would be affected by this change.


More information about the Containers mailing list