kill all processes in container with shared PID Ns

Signed-off-by: lifubang <[email protected]>
opencontainers · Oct 2, 2023 · ccfd894 · ccfd894
1 parent ee45b9b
commit ccfd894
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/libcontainer/container_linux.go b/libcontainer/container_linux.go
@@ -371,6 +371,11 @@ func (c *Container) Signal(s os.Signal) error {
  // To avoid a PID reuse attack, don't kill non-running container.
  switch status {
  case Running, Created, Paused:
+ case Stopped:
+ // if PID namespace is shared, we should send signal to other processes.
+ if !c.cgroupManager.Exists() {
+ return nil
+ }
  default:
  return ErrNotRunning
  }