summaryrefslogtreecommitdiffhomepage
path: root/pkg/sentry/mm/lifecycle.go
diff options
context:
space:
mode:
authorDean Deng <deandeng@google.com>2019-10-29 10:03:18 -0700
committergVisor bot <gvisor-bot@google.com>2019-10-29 10:04:39 -0700
commit29273b03842a85bce8314799348231520ceb6e9c (patch)
tree118b42eb7eb8ef0f6942ca75f1575de1fdf272ee /pkg/sentry/mm/lifecycle.go
parentdbeaf9d4dbeea4cde670c3d07a78b56a45fa8f21 (diff)
Disallow execveat on interpreter scripts with fd opened with O_CLOEXEC.
When an interpreter script is opened with O_CLOEXEC and the resulting fd is passed into execveat, an ENOENT error should occur (the script would otherwise be inaccessible to the interpreter). This matches the actual behavior of Linux's execveat. PiperOrigin-RevId: 277306680
Diffstat (limited to 'pkg/sentry/mm/lifecycle.go')
0 files changed, 0 insertions, 0 deletions