Re:The history of sending signals to Unix process groups
by amelius on Tuesday September 06, 2022 @06:34AM
(#32735228)
Question: can we control a Linux process (with all its threads, signal handlers etc.) in a completely deterministic way, e.g. by using ptrace() on it?
[ Parent
| on HN ]
Re:The history of sending signals to Unix process groups
by sporksmith on Tuesday September 06, 2022 @07:36AM
(#32735672)
Yes. Though I'm not sure I see the connection to the OP...?
The example I'm most familiar with, because I work on it, is Shadow. We used ptrace for a bit but now use seccomp.
Re:The history of sending signals to Unix process groups
by rollcat on Tuesday September 06, 2022 @07:15AM
(#32735502)
Sorry for no references, it's off the top of my head. There were past attempts at confining / "jailing" processes based on ptrace, it ended up being racey and/or escapeable. If you're relying on cooperation for isolation, you're back to square 1.