Unable to Run Nested Minijails with PID Namespaces |
||
Issue descriptionRunning nested PID namespaces can sometimes trigger an incorrect assertion in glibc which results in a crash. https://sourceware.org/bugzilla/show_bug.cgi?id=17214 According to chirantan@ possible fixes may include: - uprev glibc to a newer version which drops the pid cache - backport the patch that removes the pid cache to our tree We could also looking into adding some sort of workaround into minijail.
,
Jan 19
(4 days ago)
we've updated to glibc-2.27 now (we were at glibc-2.23). so assuming that is sufficient, i don't think we have to do anything in minijail ... "just" tell users to upgrade to a recent glibc release. would be nice if we had a reproduction to verify, but until then, assume resolved. |
||
►
Sign in to add a comment |
||
Comment 1 by vapier@chromium.org
, Jan 16 2018