mirror of
https://gitlab.com/redhat/centos-stream/rpms/conmon.git
synced 2026-07-04 04:11:16 +00:00
Compare commits
2 Commits
c9s
..
32f550bb13
| Author | SHA1 | Date | |
|---|---|---|---|
| 32f550bb13 | |||
| 2197708e24 |
@@ -1,32 +0,0 @@
|
|||||||
From 8596fc6462efa2bd0db47485931cfcd704ca0637 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Jindrich Novy <jnovy@redhat.com>
|
|
||||||
Date: Thu, 21 May 2026 09:38:48 +0200
|
|
||||||
Subject: [PATCH] Reset create_pid after waitpid to prevent signaling unrelated
|
|
||||||
processes
|
|
||||||
|
|
||||||
After the synchronous waitpid(create_pid) succeeds, create_pid was
|
|
||||||
never reset to -1. If the PID was later reused by another process,
|
|
||||||
on_sig_exit() would send SIGTERM to that unrelated process.
|
|
||||||
|
|
||||||
Resolves: RHEL-178025
|
|
||||||
|
|
||||||
Signed-off-by: Jindrich Novy <jnovy@redhat.com>
|
|
||||||
---
|
|
||||||
src/conmon.c | 1 +
|
|
||||||
1 file changed, 1 insertion(+)
|
|
||||||
|
|
||||||
diff --git a/src/conmon.c b/src/conmon.c
|
|
||||||
index 0abbd17d..24a7da18 100644
|
|
||||||
--- a/src/conmon.c
|
|
||||||
+++ b/src/conmon.c
|
|
||||||
@@ -360,6 +360,7 @@ int main(int argc, char *argv[])
|
|
||||||
}
|
|
||||||
pexitf("Failed to wait for `runtime %s`", opt_exec ? "exec" : "create");
|
|
||||||
}
|
|
||||||
+ create_pid = -1;
|
|
||||||
}
|
|
||||||
|
|
||||||
/* For exec operations, a non-zero runtime exit status reflects the exit status of the exec'd command,
|
|
||||||
--
|
|
||||||
2.49.0
|
|
||||||
|
|
||||||
@@ -22,8 +22,6 @@ Summary: OCI container runtime monitor
|
|||||||
URL: https://github.com/containers/%{name}
|
URL: https://github.com/containers/%{name}
|
||||||
# Tarball fetched from upstream
|
# Tarball fetched from upstream
|
||||||
Source0: %{url}/archive/v%{version}.tar.gz
|
Source0: %{url}/archive/v%{version}.tar.gz
|
||||||
# https://github.com/containers/conmon/pull/659
|
|
||||||
Patch0001: 0001-Reset-create_pid-after-waitpid-to-prevent-signaling-.patch
|
|
||||||
%if %{with docs}
|
%if %{with docs}
|
||||||
BuildRequires: go-md2man
|
BuildRequires: go-md2man
|
||||||
%endif
|
%endif
|
||||||
@@ -72,10 +70,6 @@ sed -i 's/install.bin: bin\/conmon/install.bin:/' Makefile
|
|||||||
%endif
|
%endif
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
* Mon Jun 22 2026 Jindrich Novy <jnovy@redhat.com> - 3:2.2.1-2
|
|
||||||
- reset create_pid after waitpid to prevent signaling unrelated processes
|
|
||||||
- Resolves: RHEL-178025
|
|
||||||
|
|
||||||
* Thu Feb 12 2026 Jindrich Novy <jnovy@redhat.com> - 3:2.2.1-1
|
* Thu Feb 12 2026 Jindrich Novy <jnovy@redhat.com> - 3:2.2.1-1
|
||||||
- update to https://github.com/containers/conmon/releases/tag/v2.2.1
|
- update to https://github.com/containers/conmon/releases/tag/v2.2.1
|
||||||
- enable RELRO
|
- enable RELRO
|
||||||
|
|||||||
Reference in New Issue
Block a user