diff options
author | Jamie Liu <jamieliu@google.com> | 2020-07-07 19:44:03 -0700 |
---|---|---|
committer | gVisor bot <gvisor-bot@google.com> | 2020-07-07 19:45:16 -0700 |
commit | 5e05950c1c520724e2e03963850868befb95efeb (patch) | |
tree | 5f8e3883b757489d4dceeaecad220625c6192fb6 /website/assets/images/2020-04-02-networking-security-figure1.png | |
parent | 76c7bc51b7b02c4ba83c0a064c3629bb5ee91340 (diff) |
Deflake exec test.
- Only use MAXSYMLINKS/2+1 symlinks for each of the interpreter and script
paths in SymlinkLimitRefreshedForInterpreter to tolerate cases where the
original paths (/tmp, /bin, or /bin/echo) themselves contain symlinks.
- Ensure that UnshareFiles performs execve immediately after clone(CLONE_VFORK)
(no heap allocation for ExecveArray/RunfilesPath).
- Use lstat() rather than stat() for the existence check in fs_util's Exists;
the latter will fail if the symlink target does not exist, even if the
symlink does.
PiperOrigin-RevId: 320110156
Diffstat (limited to 'website/assets/images/2020-04-02-networking-security-figure1.png')
0 files changed, 0 insertions, 0 deletions