diff --git a/libcontainer/container_linux.go b/libcontainer/container_linux.go index ae5d4fb46b4..981ddb3d818 100644 --- a/libcontainer/container_linux.go +++ b/libcontainer/container_linux.go @@ -371,6 +371,10 @@ func (c *Container) Signal(s os.Signal) error { // To avoid a PID reuse attack, don't kill non-running container. switch status { case Running, Created, Paused: + case Stopped: + if c.config.Namespaces.IsPrivate(configs.NEWPID) || !c.cgroupManager.Exists() { + return ErrNotRunning + } default: return ErrNotRunning }