Aleksa Sarai e416baeaf3 init: write sysctls using safe procfs API ...

sysctls could in principle also be used as a write gadget for arbitrary
procfs files. As this requires getting a non-subset=pid /proc handle we
amortise this by only allocating a single procfs handle for all sysctl
writes.

Fixes: GHSA-cgrx-mc8f-2prm CVE-2025-52881
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

2025-10-16 11:27:53 +11:00

..

doc.go

internal/sys: add VerifyInode helper

2025-10-16 11:27:50 +11:00

opath_linux.go

rootfs: avoid using os.Create for new device inodes

2025-10-16 11:27:52 +11:00

sysctl_linux.go

init: write sysctls using safe procfs API

2025-10-16 11:27:53 +11:00

verify_inode_unix.go

internal/sys: add VerifyInode helper

2025-10-16 11:27:50 +11:00