CA-36554: call setsid() before exec() to make sure children don't accidentally kill...

Signed-off-by: David Scott <dave.scott@eu.citrix.com>

diff --git a/forking_executioner/child.ml b/forking_executioner/child.ml
index 464e657d594c20f73e015160287108069376d2af..9ebe326a31cd7d87250bcf0874166a4179f641d2 100644 (file)
--- a/forking_executioner/child.ml
+++ b/forking_executioner/child.ml
@@ -129,6 +129,9 @@ let run state comms_sock fd_sock fd_sock_path =
       (* Now let's close everything except those fds mentioned in the ids_received list *)
       Unixext.close_all_fds_except ([Unix.stdin; Unix.stdout; Unix.stderr] @ fds);
       
+         (* Distance ourselves from our parent process: *)
+         if Unix.setsid () == -1 then failwith "Unix.setsid failed";     
+
       (* And exec *)
       Unix.execve (List.hd args) (Array.of_list args) (Array.of_list state.env)
     end else begin