Giuseppe Scrivano 6b0e1a3091 rootless: block signals on re-exec ...

we are allowed to use only signal safe functions between a fork of a
multithreaded application and the next execve.  Since setenv(3) is not
signal safe, block signals.  We are already doing it for creating a
new namespace.

This is mostly a cleanup since reexec_in_user_namespace_wait is used
only only to join existing namespaces when we have not a pause.pid
file.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2019-06-03 14:25:10 +02:00

18 KiB

Raw Blame History

View Raw