From d07915987631f4c3c6345275019a5b5b0cf28dbb Mon Sep 17 00:00:00 2001 From: Andrei Vagin Date: Wed, 23 Dec 2020 11:08:42 -0800 Subject: vfs1: don't allow to open socket files open() has to return ENXIO in this case. O_PATH isn't supported by vfs1. PiperOrigin-RevId: 348820478 --- pkg/sentry/fs/host/inode.go | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'pkg/sentry/fs/host/inode.go') diff --git a/pkg/sentry/fs/host/inode.go b/pkg/sentry/fs/host/inode.go index fbfba1b58..2c14aa6d9 100644 --- a/pkg/sentry/fs/host/inode.go +++ b/pkg/sentry/fs/host/inode.go @@ -276,6 +276,10 @@ func (i *inodeOperations) BoundEndpoint(inode *fs.Inode, path string) transport. // GetFile implements fs.InodeOperations.GetFile. func (i *inodeOperations) GetFile(ctx context.Context, d *fs.Dirent, flags fs.FileFlags) (*fs.File, error) { + if fs.IsSocket(d.Inode.StableAttr) { + return nil, syserror.ENXIO + } + return newFile(ctx, d, flags, i), nil } -- cgit v1.2.3