[Devel] Re: [PATCH 1/2] pidns: Don't allow new pids after the namespace is dead.

2011-02-17 Thread Oleg Nesterov
On 02/17, Daniel Lezcano wrote: > > On 02/15/2011 07:30 PM, Oleg Nesterov wrote: >> On 02/15, Daniel Lezcano wrote: >>> In the case of unsharing or joining a pid namespace, it becomes >>> possible to attempt to allocate a pid after zap_pid_namespace has >>> killed everything in the namespace. Clos

[Devel] Re: [PATCH 1/2] pidns: Don't allow new pids after the namespace is dead.

2011-02-17 Thread Daniel Lezcano
On 02/15/2011 07:30 PM, Oleg Nesterov wrote: > On 02/15, Daniel Lezcano wrote: >> In the case of unsharing or joining a pid namespace, it becomes >> possible to attempt to allocate a pid after zap_pid_namespace has >> killed everything in the namespace. Close the hole for now by simply >> not allo

[Devel] Re: [PATCH 1/2] pidns: Don't allow new pids after the namespace is dead.

2011-02-16 Thread Oleg Nesterov
On 02/15, Daniel Lezcano wrote: > > In the case of unsharing or joining a pid namespace, it becomes > possible to attempt to allocate a pid after zap_pid_namespace has > killed everything in the namespace. Close the hole for now by simply > not allowing any of those pid allocations to succeed. Da