refs #23: Prevent self-interrupt of the sandbox.

lablup · Feb 15, 2017 · 6edd21f · 6edd21f
1 parent 7d50307
commit 6edd21f
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 8 deletions.
diff --git a/bin/jail b/bin/jail
diff --git a/jail/main.go b/jail/main.go
@@ -313,23 +313,25 @@ loop:
 					case id_Tgkill:
 						targetTgid := int(regs.Rdi)
 						targetTid := int(regs.Rsi)
-						signum := uint(regs.Rdx)
-						if signum == uint(syscall.SIGKILL) {
+						signum := syscall.Signal(uint(regs.Rdx))
+						switch signum {
+						case syscall.SIGKILL, syscall.SIGINT, syscall.SIGTERM:
 							allow = (targetTgid != os.Getpid() &&
 								targetTid != pid &&
 								targetTid != os.Getpid() &&
 								targetTid != 1)
-						} else {
+						default:
 							allow = true
 						}
 					case id_Kill, id_Killpg, id_Tkill:
 						targetPid := int(regs.Rdi)
-						signum := uint(regs.Rsi)
-						if signum == uint(syscall.SIGKILL) {
+						signum := syscall.Signal(uint(regs.Rsi))
+						switch signum {
+						case syscall.SIGKILL, syscall.SIGINT, syscall.SIGTERM:
 							allow = (targetPid != pid &&
 								targetPid != os.Getpid() &&
 								targetPid != 1)
-						} else {
+						default:
 							allow = true
 						}
 					case id_Execve: