tree c6f45c634a94be9d03a82347cd86a59dec8cd5ea
parent fc81455b5afe2aa384dcbc4239a7b58e2a4f4a0e
author Daniel Erat <derat@google.com> 1556078333 -0700
committer Daniel Erat <derat@google.com> 1556258064 -0700

libminijail: Block child sync for all configuration.

Make the child process wait for the parent process to say
that configuration is complete if any configuration was
requested. Formerly, synchronization only occurred when
configuring user namespaces and cgroups, leading to races
when e.g. writing PID files or setting rlimits.

Bug: chromium:955547,chromium:955110
Test: manual: ran security.Minijail test in a loop

Change-Id: I8abcc042649a1742f344df4e8c0d58356eace78f