Messages in this thread | | | Date | Sat, 22 Jan 2005 04:25:16 +0100 | From | Andrea Arcangeli <> | Subject | Re: seccomp for 2.6.11-rc1-bk8 |
| |
On Fri, Jan 21, 2005 at 01:31:46PM -0800, Roland McGrath wrote: > When gdb has a bug, people want to be able to kill it and get on with using > their program, not have their program always be killed too.
What I need is that the program is killed right away synchronously as soon as the "debugger" detaches (to me that's a needed feature). No matter why the debugger detached. This is the opposite of what ptrace/strace does right now.
Just try to attach to a task with strace -p, then kill strace with -9, the task will keep going like if nothing has happened. I need the child killed too instead (before the parent unptrace the child).
Probably the reason why the app gets killed is that gdb is the ptrace task is the process leader of the process group like Ingo suggested. But I'd rather not depend on leaders/groups/pids/signals, when I can do it with do_exit and a check on the syscall number.
Ptrace does a lot more of what I need, I don't care about parameters or anything more than the syscall number, I don't need to change the retvals during syscall return or to check registers or to stop a task. Even the auditing subsystem could be implemented by putting all tasks under strace and by having the ptracers communicating with each other with pipes to generate a global info. But it wouldn't be as reliable and as simple as having kernel code doing it.
I'm still open to do it with ptrace if there's a consensus on l-k to do it in that direction, it's probably going to work fine too but if I didn't feel safer with seccomp I would be doing ptrace in the first place, it's not like I forgotten I could do it with ptrace too (like Pavel already reminded me some month ago). - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |