• Oleg Nesterov's avatar
    signal: give SEND_SIG_FORCED more power to beat SIGNAL_UNKILLABLE · 629d362b
    Oleg Nesterov authored
    force_sig_info() and friends have the special semantics for synchronous
    signals, this interface should not be used if the target is not current.
    And it needs the fixes, in particular the clearing of SIGNAL_UNKILLABLE
    is not exactly right.
    
    However there are callers which have to use force_ exactly because it
    clears SIGNAL_UNKILLABLE and thus it can kill the CLONE_NEWPID tasks,
    although this is almost always is wrong by various reasons.
    
    With this patch SEND_SIG_FORCED ignores SIGNAL_UNKILLABLE, like we do if
    the signal comes from the ancestor namespace.
    
    This makes the naming in prepare_signal() paths insane, fixed by the
    next cleanup.
    
    Note: this only affects SIGKILL/SIGSTOP, but this is enough for
    force_sig() abusers.
    Signed-off-by: default avatarOleg Nesterov <oleg@redhat.com>
    Cc: Tejun Heo <tj@kernel.org>
    Cc: Anton Vorontsov <anton.vorontsov@linaro.org>
    Cc: "Eric W. Biederman" <ebiederm@xmission.com>
    Cc: KOSAKI Motohiro <kosaki.motohiro@gmail.com>
    Cc: David Rientjes <rientjes@google.com>
    Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
    Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
    629d362b
signal.c 85.1 KB