f2e4b5ab93
When the sandbox runs in attached more, e.g. runsc do, runsc run, the sandbox lifetime is controlled by the parent process. This wasn't working in all cases because PR_GET_PDEATHSIG doesn't propagate through execve when the process changes uid/gid. So it was getting dropped when the sandbox execve's to change to user nobody. PiperOrigin-RevId: 300601247 |
||
---|---|---|
.. | ||
testdata | ||
BUILD | ||
cgroup_test.go | ||
chroot_test.go | ||
crictl_test.go | ||
main_test.go | ||
oom_score_adj_test.go | ||
root.go | ||
runsc_test.go |