Aleksa Sarai 77d217c7c3 init: write sysctls using safe procfs API ...

sysctls could in principle also be used as a write gadget for arbitrary
procfs files. As this requires getting a non-subset=pid /proc handle we
amortise this by only allocating a single procfs handle for all sysctl
writes.

Fixes: GHSA-cgrx-mc8f-2prm CVE-2025-52881
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

2025-11-01 21:24:05 +11:00

..

doc.go

…

opath_linux.go

…

sysctl_linux.go

init: write sysctls using safe procfs API

2025-11-01 21:24:05 +11:00

verify_inode_unix.go

…