Make the sandbox process reap all children.

The sandbox process is PID 1 in the sandbox, which means it needs to reap
orphans within the jail by running waitpid(-1).

Solves netblue30/firejail#256

1 files changed, 5 insertions, 1 deletions

diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c
index b49172f1f..441269277 100644
--- a/src/firejail/sandbox.c
+++ b/src/firejail/sandbox.c
@@ -134,7 +134,11 @@ static void monitor_application(pid_t app_pid) {
                 usleep(20000);
 
                 int status;
-                unsigned rv = waitpid(app_pid, &status, 0);
+                unsigned rv;
+                do {
+                        rv = waitpid(-1, &status, 0);
+                }
+                while(rv != app_pid);
                 if (arg_debug)
                         printf("Sandbox monitor: waitpid %u retval %d status %d\n", app_pid, rv, status);