On 10/21, Oleg Nesterov wrote:
On 10/14, Christian Brauner wrote:
The child helper process on Linux posix_spawn must ensure that no signal handlers are enabled, so the signal disposition must be either SIG_DFL or SIG_IGN. However, it requires a sigprocmask to obtain the current signal mask and at least _NSIG sigaction calls to reset the signal handlers for each posix_spawn call
Plus the caller has to block/unblock all signals around clone(VM|VFORK).
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
just in case... I meant that posix_spawn() has to block/unblock, not its caller.
Can this justify the new CLONE_ flag? Honestly, I have no idea. But the patch is simple and looks technically correct to me. FWIW,
Reviewed-by: Oleg Nesterov oleg@redhat.com