tree f32f2c49d23555a071807ae7fdcd55b220f7162c
parent 7559dfe9ed16455e03f68d9aa0a5a65747e6a174
author Jorge Lucangeli Obes <jorgelo@google.com> 1479926895 -0500
committer Jorge Lucangeli Obes <jorgelo@google.com> 1479930809 -0500

Create a new session for the jailed process.

This prevents the jailed process from using the TIOCSTI ioctl to push
characters into the parent process terminal's input buffer, therefore
escaping the jail.

To avoid messing with job control/signals in the non-interactive case
(i.e. when not started from the console), only do this if any of stdin,
stdout, or stderr are TTYs. Note that this bug only really affects
users who use 'minijail0' from the command line, which is not the case
for Android or Chrome OS.

Bug: 33073072
Bug: crbug.com/667493
Test: Use repro case from bug.
Change-Id: I7ab43ee8ba81110253809d98440ae572a01a6260