From 60909dcb397daca6cf160dfbfbfe36bb725384ac Mon Sep 17 00:00:00 2001 From: Peyton Walters Date: Tue, 5 Nov 2024 16:37:48 +0000 Subject: [PATCH] Implement /proc/sys/kernel/pid_max with TasksLimit Previously, /proc/sys/kernel/pid_max did not exist in sandboxes, making some processes which depend on it fail. This commit populates it with kernel.TasksLimit. --- pkg/sentry/fsimpl/proc/tasks_sys.go | 1 + 1 file changed, 1 insertion(+) diff --git a/pkg/sentry/fsimpl/proc/tasks_sys.go b/pkg/sentry/fsimpl/proc/tasks_sys.go index 3a2b64c7c..521b0f180 100644 --- a/pkg/sentry/fsimpl/proc/tasks_sys.go +++ b/pkg/sentry/fsimpl/proc/tasks_sys.go @@ -52,6 +52,7 @@ func (fs *filesystem) newSysDir(ctx context.Context, root *auth.Credentials, k * "hostname": fs.newInode(ctx, root, 0444, &hostnameData{}), "overflowgid": fs.newInode(ctx, root, 0444, newStaticFile(fmt.Sprintf("%d\n", auth.OverflowGID))), "overflowuid": fs.newInode(ctx, root, 0444, newStaticFile(fmt.Sprintf("%d\n", auth.OverflowUID))), + "pid_max": fs.newInode(ctx, root, 0644, newStaticFile(fmt.Sprintf("%d\n", kernel.TasksLimit))), "random": fs.newStaticDir(ctx, root, map[string]kernfs.Inode{ "boot_id": fs.newInode(ctx, root, 0444, newStaticFile(randUUID())), }),