On Wed, Feb 22, 2017 at 5:29 PM, Eric W. Biederman <ebied...@xmission.com> wrote: > Aleksa Sarai <asa...@suse.de> writes: > >>> The only known user of this prctl systemd >>> forks all children after the prctl. So no userspace regressions will >>> occur. >> >> Note that runC and containerd (and thus Docker) as well as cri-o use the >> prctl >> as well -- to be able to collect exit codes from a non-child process (namely >> to >> collect the exit code from PID 1 in the container). > > Are any of those affected by the change? I would not expect so. As it > would require having children or grand children whose exit codes you > don't want to collect.
FWIW, I have private code that uses PR_SET_CHILD_SUBREAPER, too. I don't see why it would be affected by this change.
