diff options
author | Chong Cai <chongc@google.com> | 2021-07-13 15:42:00 -0700 |
---|---|---|
committer | gVisor bot <gvisor-bot@google.com> | 2021-07-13 15:44:54 -0700 |
commit | d4dce953b7ac4705f5b52ac24c031170d701031b (patch) | |
tree | 486645acba552cf94fd1f7e8b083d4ad2e519064 /test/fuse/linux/setstat_test.cc | |
parent | c16e69a9d5ec3422b648a6d32842442925285a29 (diff) |
Do not require O_PATH flag to enable verity
Remove the hack in gVisor vfs that allows verity to bypass the O_PATH
check, since ioctl is not allowed on fds opened with O_PATH in linux.
Verity still opens the lowerFD with O_PATH to open it as a symlink, but
the API no longer expects O_PATH to open a fd to be verity enabled.
Now only O_FOLLOW should be specified when opening and enabling verity
features.
PiperOrigin-RevId: 384567833
Diffstat (limited to 'test/fuse/linux/setstat_test.cc')
0 files changed, 0 insertions, 0 deletions