Re: vfork

Matthew Kirkwood (weejock@ferret.lmh.ox.ac.uk)
Wed, 10 Nov 1999 20:18:59 +0000 (GMT)


On Wed, 10 Nov 1999, Linus Torvalds wrote:

[ things about ]
> CLONE_PARENT

Wasn't there a consensus that allowing CLONE_PARENT where the
parent hadn't specifically permitted that flag is a security
risk?

The original patch had a CLONE_PPIDOK, though which the parent
could indicate that it was happy to have wait return on a child
that it didn't spawn (or to receive SIGCHLD for one).

Would you accept a patch to put this back?

Matthew.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/