Even if clone() is invoked with CLONE_UNTRACED, the child process can be traced by strace
Issue
- Even if clone() is invoked with CLONE_UNTRACED, the child process can be traced by strace.
[root@RHEL6 24]# strace -f ./test ...snip... 16074 clone(child_stack=0x18703ff, flags=CLONE_UNTRACED|SIGCHLD) = 16075 ...snip... 16074 nanosleep({5, 0}, <unfinished ...> 16075 getpid() = 16075 16075 alarm(5) = 0 16074 <... nanosleep resumed> 0x7fffe901fd10) = 0 16074 exit_group(0) = ? 16075 --- SIGALRM (Alarm clock) @ 0 (0) --- ===
Environment
- Red Hat Enterprise Linux 6
- strace-4.5.19-1.6.el6.x86_64
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.