execute: Launch any containers in a new PID namespace

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/libpakfire/execute.c b/src/libpakfire/execute.c
index 150f770474b4bf33d4cd73b1e38f07887ffeb36e..88d21dffa318b82139f1465efdf40a2df4c2e480 100644 (file)
--- a/src/libpakfire/execute.c
+++ b/src/libpakfire/execute.c
@@ -489,6 +489,7 @@ PAKFIRE_EXPORT int pakfire_execute(struct pakfire* pakfire, const char* argv[],
                        CLONE_NEWCGROUP |
                        CLONE_NEWIPC |
                        CLONE_NEWNS |
+                       CLONE_NEWPID |
                        CLONE_NEWUTS,
                .exit_signal = SIGCHLD,
        };