refs #23: Fix traced syscall list.

* Now it correctly prevents killing the REPL daemon itself, while allowing other signals transparently. (e.g., now "Ctrl+Z on vim" to set it background works.)
lablup · Nov 1, 2016 · 2094668 · 2094668
1 parent 422321f
commit 2094668
Show file tree

Hide file tree

Showing 5 changed files with 1 addition and 0 deletions.
diff --git a/bin/intra-jail b/bin/intra-jail
diff --git a/bin/intra-jail-check b/bin/intra-jail-check
diff --git a/bin/jail b/bin/jail
diff --git a/bin/jail-check b/bin/jail-check
diff --git a/jail/policy/common.go b/jail/policy/common.go
@@ -56,6 +56,7 @@ func init() {
 		"vfork",
 		"clone",
 		"execve",
+		"kill",
 	}
 
 	// Following syscalls are conditionally allowed.