[PATCH] signal: Avoid corrupting si_pid and si_uid in do_notify_parent

Oleg Nesterov oleg at redhat.com
Tue Apr 21 12:17:22 UTC 2020


On 04/21, Christian Brauner wrote:
>
> process B setnses into
> <pidnsC> which is a sibling pid namespace,

please see pidns_install(), it verifies that

	* Only allow entering the current active pid namespace
	* or a child of the current active pid namespace.

Oleg.



More information about the Containers mailing list