6 ms·
In those cases you mentioned the kernel has spawned a process loaded from normal ELF executable from filesystem, just like you could do with exec(). But in this
by dezgeg 4y ago
In those cases you mentioned the kernel has spawned a process loaded from normal ELF executable from filesystem, just like you could do with exec(). But in this bpfilter_umh case the executable is not coming from the filesystem but instead is embedded in the kernel itself. That seems to be quite new invention.
- sounds 4y agoThe interest is warranted, but it was been true for a long time that the kernel spawns processes where the executable is in the kernel itself. https://www.quora.com/What-is-kswapd0-in-Linux-Kernel https://www.quora.com/What-is-kswapd0-in-Linux-Kernel https://stackoverflow.com/questions/9154042/where-can-i-find-documentation-on-the-kflushd https://stackoverflow.com/questions/9154042/where-can-i-find... Here's some official documentation on it: https://tldp.org/HOWTO/From-PowerUp-To-Bash-Prompt-HOWTO-8.html https://tldp.org/HOWTO/From-PowerUp-To-Bash-Prompt-HOWTO-8.h...
- throwawaylinux 4y agoThose are kernel threads and not considered to be like spawning a process.