Fork safety?

[Sargun Dhillon]

I understand that fork safety is a thing, and in the rust version, it's completely disallowed in multi-threaded processes. While, this makes a lot of sense for any time one is doing a generic fork, as it'll result in strange (perhaps an understatement) behaviour, but when you're just doing a fork-exec, I do not believe the restriction makes as much sense.

I'm curious whether folks would be open to:

1. Allowing for CLONE_PARENT to be set as part of clone. This would make it so that a user could first do their own fork, having a single-threaded process, and then calling minijail to fork once more.

2. The ability to bypass the fork-safety test, as an option to minijail?

[Allen Webb]

I think it is something we can look into. I kicked off a discussion with the Rust safety folks in case there are additional concerns.

--
You received this message because you are subscribed to the Google Groups "minijail" group.
To unsubscribe from this group and stop receiving emails from it, send an email to minijail+u...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/minijail/7d5077e9-e6fd-43a2-986b-9979427a2b92n%40chromium.org.