Comments (5)
zopieux
commented on July 23, 2024
I thought this may be related to https://github.com/ioi/isolate/blob/master/isolate.c#L272 but SIGKILL is not in the table, yet it still OKays out.
from isolate.
gollux
commented on July 23, 2024
Hello!
In control group mode, the sandboxed process is effectively an init process
of its container and the usual exceptions for delivering signals to init apply
(well, at least with respect to signals which came from the inside of the
container; SIGKILL sent from the parent container is always unblockable).
Therefore a SIGFPE sent to the same process is not fatal, while SIGFPE
automatically generated by division by zero is fatal.
For SIGFPE, it is probably harmless, but I suspect that ignoring raise(SIGABRT)
could be less pleasant as it is used by libstdc++ when an unhandled exception
is thrown.
I will think about it...
from isolate.
hermanzdosilovic
commented on July 23, 2024
I can reproduce both examples: first, second.
from isolate.
Leo1003
commented on July 23, 2024
I have the same problem too. Because the process is the init process in the namespace, it won't receive signals (even the signal is from the parent namespace) unless the init process register the signal handler. This problem made me hard to check if the process was killed by signals like SIGABRT, SIGXCPU, SIGXFSZ, and so on...
from isolate.
gollux
commented on July 23, 2024
In the proxy branch (to be merged after some review), we added an extra process serving as init in the namespace, so that the sandboxed process should have its signals delivered properly.
from isolate.
Related Issues (20)
- I also encountered the same issue. This worked for me:
- Getting Resource temporarily unavailable error while compiling C program HOT 3
- Is this possible? HOT 13
- cg2: `cf_cg_root` points to junk after `clone()` on Fedora HOT 2
- Unable to access internet inside isolate box even after using --share-net HOT 4
- "No such file or directory" issue when trying to run C# program using Dotnet HOT 7
- Memory corruption bug in cg_init HOT 2
- C# program failed to compile using mcs - error CS2001: Source file `Main.cs' could not be found HOT 1
- make install exited with error code 1. HOT 1
- Error Running isolate in Ubuntu:22.04 with Systemd HOT 10
- Support for Docker HOT 12
- Error using isolate HOT 15
- Assertion Failure Issue HOT 4
- --as-uid and --as-gid seem to be not usable in Docker container HOT 3
- Cannot set disk quota: No such process HOT 1
- chown: cannot access /var/local/lib/isolate/XX/box': No such file or directory HOT 6
- CPU time (--time) consumed in subsequent runs in the same box with cg (cgroup2) enabled HOT 9
- Limitation on number of sandboxes HOT 1
- [Query] Isolate Mac OS setup HOT 1
- Unable to build manual HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from isolate.