Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as reapers for child processes

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: Roland McGrath
Date: Thursday, March 4, 2010 - 3:14 pm

> Security. This is beyond my understanding, hopefully the cc'ed

There are a few different aspects of behavior change to think about.

1. Who can get a SIGCHLD and wait result they weren't expecting.
2. Who sees some PID for getppid() when they are expecting 1.
3. What ps shows.

When I start thinking through what might be security issues, they are
almost all #1 questions.  There is a hairy nest of many variations of #1
questions.  The #2 question is pretty simple, but it also could be an issue
for security when setuid is involved (or just correctness for any
application).

My impression is that #3 is the only actual motivation for this feature.
So perhaps we should consider an approach that leaves the rest of the
semantics alone and only affects that.

Lennart, am I right that this is all you are looking for?  Does it even
matter to you that this change the PPID that ps groks today?  How about if
it's just an entirely new kind of assocation that ps et al can learn to
display, and not even the traditional PPID field changes?


Agreed.  It could probably be a bit in signal_struct.flags,
which also means no memory cost for adding the feature.


Thanks,
Roland
--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
[PATCH] exit: PR_SET_ANCHOR for marking processes as reape ..., Lennart Poettering, (Tue Feb 2, 5:04 am)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Lennart Poettering, (Wed Feb 3, 2:53 am)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., =?utf-8?Q?Am=C3=A9ri ..., (Wed Feb 3, 8:31 am)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Lennart Poettering, (Wed Feb 3, 10:49 am)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., =?UTF-8?Q?Am=C3=A9ri ..., (Fri Feb 5, 2:54 am)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Roland McGrath, (Thu Mar 4, 3:14 pm)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Lennart Poettering, (Fri Mar 5, 5:16 pm)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Lennart Poettering, (Fri Mar 5, 5:20 pm)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Lennart Poettering, (Fri Mar 5, 5:24 pm)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Eric W. Biederman, (Wed Mar 10, 9:14 pm)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Scott James Remnant, (Mon Dec 20, 7:26 am)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Lennart Poettering, (Tue Dec 21, 2:56 am)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Scott James Remnant, (Tue Dec 21, 5:05 am)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Lennart Poettering, (Thu Dec 23, 8:44 am)
Re: [PATCH] exit: PR_SET_ANCHOR for marking processes as r ..., Scott James Remnant, (Thu Dec 23, 9:00 am)