mirror of
https://chromium.googlesource.com/crosvm/crosvm
synced 2025-02-11 04:26:38 +00:00
d8447077f0
Using AT_EMPTY_PATH with linkat requires the caller to have CAP_DAC_READ_SEARCH in the init user namespace. Since the fs device isn't going to have this when run in a sandbox, switch to using /proc/self/fd with AT_SYMLINK_FOLLOW instead, which is documented in the manpage as an alternative to AT_EMPTY_PATH. BUG=b:159861594 TEST=`touch foo; ln foo bar` succeeds Change-Id: I944d80d955742d653e36d245024adc48cf77d77e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2265933 Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Chirantan Ekbote <chirantan@chromium.org> Auto-Submit: Chirantan Ekbote <chirantan@chromium.org> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> |
||
---|---|---|
.. | ||
src | ||
Cargo.toml |