summaryrefslogtreecommitdiffhomepage
path: root/pkg/abi
diff options
context:
space:
mode:
authorChong Cai <chongc@google.com>2021-07-13 15:42:00 -0700
committergVisor bot <gvisor-bot@google.com>2021-07-13 15:44:54 -0700
commitd4dce953b7ac4705f5b52ac24c031170d701031b (patch)
tree486645acba552cf94fd1f7e8b083d4ad2e519064 /pkg/abi
parentc16e69a9d5ec3422b648a6d32842442925285a29 (diff)
Do not require O_PATH flag to enable verity
Remove the hack in gVisor vfs that allows verity to bypass the O_PATH check, since ioctl is not allowed on fds opened with O_PATH in linux. Verity still opens the lowerFD with O_PATH to open it as a symlink, but the API no longer expects O_PATH to open a fd to be verity enabled. Now only O_FOLLOW should be specified when opening and enabling verity features. PiperOrigin-RevId: 384567833
Diffstat (limited to 'pkg/abi')
0 files changed, 0 insertions, 0 deletions