kill all processes in container without private ps ns

Signed-off-by: lifubang <[email protected]>
opencontainers · Oct 2, 2023 · c30faf4 · c30faf4
1 parent ee45b9b
commit c30faf4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/libcontainer/container_linux.go b/libcontainer/container_linux.go
@@ -371,6 +371,10 @@ func (c *Container) Signal(s os.Signal) error {
 	// To avoid a PID reuse attack, don't kill non-running container.
 	switch status {
 	case Running, Created, Paused:
+	case Stopped:
+		if c.config.Namespaces.IsPrivate(configs.NEWPID) || !c.cgroupManager.Exists() {
+			return ErrNotRunning
+		}
 	default:
 		return ErrNotRunning
 	}