Fwd: Waiting for programs to stop

From: Victor Porton
Date: Fri Jan 10 2014 - 15:25:51 EST


I remind that we discuss sandboxing of untrusted programs.

My application needs to receive a signal when ALL direct and indirect children of a process (including this process itself) started in a sandbox exit (it should work even when they call setsid()).

You can assume that the sandboxing binary creates a new cgroup.

Can this be done with the current kernel?

--
Victor Porton - http://portonvictor.org
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/