]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
signal: Always ignore SIGKILL and SIGSTOP sent to the global init
authorEric W. Biederman <ebiederm@xmission.com>
Fri, 20 Jul 2018 00:47:27 +0000 (19:47 -0500)
committerStefan Bader <stefan.bader@canonical.com>
Tue, 26 Nov 2019 12:16:34 +0000 (13:16 +0100)
commit3177b082661a6860b385acf5591909e0c7877156
treeec2a0cc3e8517269ee69bb76b7ad2c8218684b7e
parente6e6b3567be9fc0f3215f1d4f76026824eec530d
signal: Always ignore SIGKILL and SIGSTOP sent to the global init

BugLink: https://bugs.launchpad.net/bugs/1853915
[ Upstream commit 86989c41b5ea08776c450cb759592532314a4ed6 ]

If the first process started (aka /sbin/init) receives a SIGKILL it
will panic the system if it is delivered.  Making the system unusable
and undebugable.  It isn't much better if the first process started
receives SIGSTOP.

So always ignore SIGSTOP and SIGKILL sent to init.

This is done in a separate clause in sig_task_ignored as force_sig_info
can clear SIG_UNKILLABLE and this protection should work even then.

Reviewed-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
kernel/signal.c