1555299265 J * fstd ~fstd@xdsl-87-78-47-149.nc.de 1555299734 Q * fstd_ Ping timeout: 480 seconds 1555308074 N * Bertl_zZ Bertl 1555308080 M * Bertl morning folks! 1555314580 J * hijacker ~nikolay@149.235.255.3 1555316991 M * thithib Bertl: here's the part of Chromium doing (nasty?) things with /proc/self/fd{,info}: https://chromium.googlesource.com/chromium/src/+/refs/tags/61.0.3163.79/sandbox/linux/suid/sandbox.c#70 1555317085 M * thithib and then Chromium exits here: https://chromium.googlesource.com/chromium/src/+/refs/tags/61.0.3163.79/content/browser/zygote_host/zygote_host_impl_linux.cc#173 1555317135 M * thithib see the comment right below, about their "elaborate dance to find and validate the zygote's PID" :) 1555319795 M * thithib ok so now I understand what your code is doing and what it is preventing :) 1555319858 M * thithib do you think it can be improved to allow this Chromium's "legitimate" use case? 1555322702 J * Jb_boin ~dedior@proxad.eu 1555328481 Q * Aiken Remote host closed the connection 1555331480 M * thithib Bertl: btw, is the d_drop() still needed in this snippet? I'm asking after having seen this: c143c2333c48 1555334883 M * thithib (vx_map_pid() reports 5994, __task_pid_nr_ns() reports 1??) // yes because vx_map_pid() is called on task->pid, which is the pid of the task in the init PIDNS 1555335340 J * obeardly ~obeardly@2603:3011:1661:0:9657:a5ff:feae:1552 1555339636 Q * any0n Ping timeout: 480 seconds 1555341240 J * any0n ~k@7YZAAEFS3.tor-irc.dnsbl.oftc.net 1555344228 Q * hijacker 1555356905 J * Aiken ~Aiken@b951.h.jbmb.net 1555357955 Q * Ghislain Ping timeout: 480 seconds 1555364052 M * Bertl off to bed now ... have a good one everyone! 1555364053 N * Bertl Bertl_zZ