On 4/12/19 9:25 AM, Tycho Andersen wrote:
On Thu, Apr 11, 2019 at 04:56:31PM -0700, Kees Cook wrote:
When running without USERNS or PIDNS the seccomp test would hang since
it was waiting forever for the child to trigger the user notification
since it seems the glibc() abort handler makes a call to getpid(),
which would trap again. This changes the getpid filter to getppid, and
makes sure ASSERTs execute to stop from spawning the listener.
Reported-by: Shuah Khan <[email protected]>
Fixes: 6a21cc50f0c7 ("seccomp: add a return code to trap to userspace")
Signed-off-by: Kees Cook <[email protected]>
Sorry for the delay, thanks for looking at this!
Reviewed-by: Tycho Andersen <[email protected]>
Thanks both. Should it go into stables. I will pull this and
add stable if that is appropriate.
thanks,
-- Shuah
