[Bug 2646] zombie processes when using privilege separation

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Sat Jan 7 08:23:54 AEDT 2017


https://bugzilla.mindrot.org/show_bug.cgi?id=2646

--- Comment #10 from Akshay <akshay.moghe at gmail.com> ---
> In this situation, init is supposed to do the reaping

I understand that this is how normal systems might work. 

But as I mentioned in comment-1...

> does not get reaped by its parent (sshd) and as a result is adopted by whatever pid 1 happens to be. Normally this is okay since most init systems will handle this correctly, however in containers we might encounter homemade "init" systems that only serve to propagate signals but don't reap adopted zombie processes. In such cases we accumulate these zombies over time and can lead to obvious problems.

Is there any reason that sshd can't reap its children after they exit?

So the original intent of filing the bug was to find out if sshd
behavior could be changed so that all parents are around long enough to
reap the children and then exit, thereby leaving no zombies.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list