Re: [RFC] Add critical process prctl

2019-09-10 Thread Andy Lutomirski
On Tue, Sep 10, 2019 at 10:43 AM Daniel Colascione wrote: > > On Tue, Sep 10, 2019 at 9:57 AM Andy Lutomirski wrote: > > > > On Wed, Sep 4, 2019 at 5:53 PM Daniel Colascione wrote: > > > > > > A task with CAP_SYS_ADMIN can mark itself PR_SET_TASK_CRITICAL, > > > meaning that if the task ever

Re: [RFC] Add critical process prctl

2019-09-10 Thread Daniel Colascione
On Tue, Sep 10, 2019 at 9:57 AM Andy Lutomirski wrote: > > On Wed, Sep 4, 2019 at 5:53 PM Daniel Colascione wrote: > > > > A task with CAP_SYS_ADMIN can mark itself PR_SET_TASK_CRITICAL, > > meaning that if the task ever exits, the kernel panics. This facility > > is intended for use by

Re: [RFC] Add critical process prctl

2019-09-10 Thread Andy Lutomirski
On Wed, Sep 4, 2019 at 5:53 PM Daniel Colascione wrote: > > A task with CAP_SYS_ADMIN can mark itself PR_SET_TASK_CRITICAL, > meaning that if the task ever exits, the kernel panics. This facility > is intended for use by low-level core system processes that cannot > gracefully restart without a

[RFC] Add critical process prctl

2019-09-04 Thread Daniel Colascione
A task with CAP_SYS_ADMIN can mark itself PR_SET_TASK_CRITICAL, meaning that if the task ever exits, the kernel panics. This facility is intended for use by low-level core system processes that cannot gracefully restart without a reboot. This prctl allows these processes to ensure that the system