diff options
| author | gVisor bot <gvisor-bot@google.com> | 2019-10-01 22:46:57 +0000 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2019-10-01 22:46:57 +0000 |
| commit | 4738b69c4e3747ec48f4ea75d3fc5a758ae73df8 (patch) | |
| tree | e9a8358efb076a2bf63757a119534d80b36c8753 /pkg/sentry/loader | |
| parent | 196caf150c7fd7333ab4cea5f6fb7c2971f25539 (diff) | |
| parent | 0d483985c57a2d001039d17bd198e2eca0f4ff7f (diff) | |
Merge release-20190806.1-225-g0d48398 (automated)
Diffstat (limited to 'pkg/sentry/loader')
| -rw-r--r-- | pkg/sentry/loader/loader.go | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/pkg/sentry/loader/loader.go b/pkg/sentry/loader/loader.go index f6f1ae762..089d1635b 100644 --- a/pkg/sentry/loader/loader.go +++ b/pkg/sentry/loader/loader.go @@ -308,6 +308,9 @@ func Load(ctx context.Context, m *mm.MemoryManager, mounts *fs.MountNamespace, r arch.AuxEntry{linux.AT_EUID, usermem.Addr(c.EffectiveKUID.In(c.UserNamespace).OrOverflow())}, arch.AuxEntry{linux.AT_GID, usermem.Addr(c.RealKGID.In(c.UserNamespace).OrOverflow())}, arch.AuxEntry{linux.AT_EGID, usermem.Addr(c.EffectiveKGID.In(c.UserNamespace).OrOverflow())}, + // The conditions that require AT_SECURE = 1 never arise. See + // kernel.Task.updateCredsForExecLocked. + arch.AuxEntry{linux.AT_SECURE, 0}, arch.AuxEntry{linux.AT_CLKTCK, linux.CLOCKS_PER_SEC}, arch.AuxEntry{linux.AT_EXECFN, execfn}, arch.AuxEntry{linux.AT_RANDOM, random}, |