diff options
author | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2012-06-25T19·45-0400 |
---|---|---|
committer | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2012-06-25T19·45-0400 |
commit | 1db38ae81bd91d781ece9c0cfb995e743e68e951 (patch) | |
tree | 52933112d6936d8067b65b02dd261bfc2890fea3 /configure.ac | |
parent | 5489086456ca13b2e884edecf7505235d214a594 (diff) |
When using chroots, use a private PID namespace
In a private PID namespace, processes have PIDs that are separate from the rest of the system. The initial child gets PID 1. Processes in the chroot cannot see processes outside of the chroot. This improves isolation between builds. However, processes on the outside can see processes in the chroot and send signals to them (if they have appropriate rights). Since the builder gets PID 1, it serves as the reaper for zombies in the chroot. This might turn out to be a problem. In that case we'll need to have a small PID 1 process that sits in a loop calling wait().
Diffstat (limited to 'configure.ac')
0 files changed, 0 insertions, 0 deletions