Change Details

The usual way of doing this with capsicum(4) is by using process descriptors (pdfork(2)) and then waiting for them using kqueue(2), instead of the traditional fork(2)/wait4(2) API. But most apps hasn't been converted. Thus, provide backwards compatibility by allowing the simple case of waiting for any of process' own children, except for those created by pdfork(2). Some additional cases might be allowed in the future. This makes it often possible to avoid having to modify programs using wait4(2) to work under Capsicum.

The usual way of handling process exit exit in capsicum(4) mode is by using process descriptors (pdfork(2)) instead of the traditional fork(2)/wait4(2) API. But most apps hadn't been converted this way, and many cannot because the wait is hidden behind a library APIs that revolve around PID numbers and not descriptors; GLib's g_spawn_check_wait_status(3) is one example. Thus, provide backwards compatibility by allowing the wait(2) family of functions in Capsicum mode, except for child processes created by pdfork(2). One practical result is that with this patch, a capsicated irssi(1) is no longer leaving zombies around.

The usual way of doing this withhandling process exit exit in capsicum(4) mode is by using process descriptors (pdfork(2)) andinstead of then waiting traditional for them using kqueue(2),k(2)/wait4(2) API. But most apps instead of the traditional fork(2)/wait4(2) API. But most appshadn't been converted this way, and many cannot because the wait is hidden behind hasn't been converted.a library APIs that revolve around PID numbers and not descriptors; Thus, provide backwards compatibility byGLib's allowing the sig_spawn_check_wait_status(3) is one example case of waiting for any of process' own children,. Thus, provide backwards compatibility by allowing the wait(2) family of functions except for those created by pdfork(2). Some additional cases mightin Capsicum mode, except for child processes created by pdfork(2). One practical result is that with this patch, a capsicated irssi(1) is no longer be allowed in the future. This makes it often possible to avoid hleaving to modify programs usingzombies around. wait4(2) to work under Capsicum.