mirror of
https://github.com/opencontainers/runc.git
synced 2026-02-05 18:45:28 +01:00
All of the callers of EnsureProcHandle now use filepath-securejoin's ProcThreadSelf to get a file handle, which has much stricter verification to avoid procfs attacks than EnsureProcHandle's very simplistic filesystem type check. Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>