Re: vfork

Alan Cox (alan@lxorguk.ukuu.org.uk)
Wed, 10 Nov 1999 20:18:40 +0000 (GMT)


> Wasn't there a consensus that allowing CLONE_PARENT where the
> parent hadn't specifically permitted that flag is a security
> risk?

Now that we control death signals outside thread groups Im not sure
it is needed. What failure scenarios can you think of that are not
equivalent to

fork()
in parent exec app

in child, sleep ,exit

Alan

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/